000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400000000000000000000000300", 0x3a, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 610.232734][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 610.314405][T16308] bond0: (slave bridge41): Enslaving as an active interface with an up link 02:43:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000250000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}]}, 0x2c}}, 0x0) 02:43:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000001c0)) 02:43:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 610.829431][T16322] loop5: detected capacity change from 0 to 512 [ 610.850475][T16324] loop2: detected capacity change from 0 to 512 [ 610.879407][T16324] EXT4-fs (loop2): orphan cleanup on readonly fs [ 610.886641][T16324] EXT4-fs error (device loop2): ext4_ext_check_inode:459: inode #3: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 610.905929][T16324] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 [ 610.917427][T16324] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 610.935289][T16324] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 610.944597][T16324] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 610.999648][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 611.011013][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 611.083943][T16322] EXT4-fs (loop5): orphan cleanup on readonly fs [ 611.091058][T16322] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 611.102995][T16322] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 611.119150][T16322] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 611.128081][T16322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:43:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x2, 0x0, 0x4) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) shutdown(r4, 0x0) 02:43:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003000000", 0x3c, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 611.506409][T16337] __nla_validate_parse: 1 callbacks suppressed [ 611.506476][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:43:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000640000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 611.583267][T16341] bond0: (slave bridge42): Enslaving as an active interface with an up link 02:43:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:54 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x400040, 0x0) 02:43:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:43:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000020000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 612.267399][T16353] loop2: detected capacity change from 0 to 512 02:43:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) [ 612.364028][T16355] loop5: detected capacity change from 0 to 512 [ 612.459789][T16353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 612.466578][T16353] EXT4-fs error (device loop2): ext4_ext_check_inode:459: inode #3: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 612.467045][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.485385][T16353] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 [ 612.485515][T16353] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 612.485644][T16353] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 612.485728][T16353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 612.664175][T16355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 612.673103][T16355] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 612.684296][T16355] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 612.698629][T16355] EXT4-fs (loop5): Cannot turn on quotas: error -116 02:43:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20000840, 0x0, 0x0) [ 612.706282][T16355] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:43:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003000000", 0x3c, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:55 executing program 0: io_uring_setup(0x1f30, &(0x7f0000000340)) [ 612.998186][T16364] bridge18: port 1(syz_tun) entered blocking state [ 613.005328][T16364] bridge18: port 1(syz_tun) entered disabled state [ 613.015464][T16364] device syz_tun entered promiscuous mode [ 613.026428][T16366] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:43:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000030000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:43:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {0x0, 0x0, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x17, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0x2, 0x0, 0xfff7ffbc, @dev}, r1}}, 0x48) 02:43:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 613.469430][T16381] loop2: detected capacity change from 0 to 512 [ 613.513792][T16381] EXT4-fs (loop2): orphan cleanup on readonly fs [ 613.520874][T16381] EXT4-fs error (device loop2): ext4_ext_check_inode:459: inode #3: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 613.544215][T16381] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 [ 613.555377][T16381] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 613.572962][T16381] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 613.580144][T16381] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:43:56 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) [ 613.764325][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 613.775346][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 613.785625][T16387] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:43:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003000000", 0x3c, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 613.960152][T16392] loop5: detected capacity change from 0 to 512 02:43:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000040000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:43:56 executing program 4: syz_io_uring_setup(0x352b, &(0x7f0000000280), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), 0x0) [ 614.184364][T16392] EXT4-fs (loop5): orphan cleanup on readonly fs [ 614.192137][T16392] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 614.205024][T16392] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 614.212874][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 614.220951][T16392] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 614.237342][T16392] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 614.336467][T16403] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave [ 614.667152][T16411] loop2: detected capacity change from 0 to 512 02:43:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000080000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:43:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:43:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0xb, 0x5, 0x9000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) [ 614.819002][T16411] EXT4-fs (loop2): orphan cleanup on readonly fs [ 614.827277][T16411] EXT4-fs error (device loop2): ext4_ext_check_inode:459: inode #3: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 614.849341][T16411] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 02:43:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {0x0, 0x0, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 614.861121][T16411] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 614.876260][T16411] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 614.884250][T16411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:43:57 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc001, 0x0) 02:43:57 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006a80)={0x2020}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) [ 615.177379][T16420] loop5: detected capacity change from 0 to 512 [ 615.250877][T16420] EXT4-fs (loop5): orphan cleanup on readonly fs [ 615.257931][T16420] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 615.269807][T16420] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 615.284770][T16420] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 615.292040][T16420] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 615.481029][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:43:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000a0000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 615.573304][T16427] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:43:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:43:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {0x0, 0x0, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:58 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000012000']) 02:43:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, 0x0) [ 616.126133][T16442] loop2: detected capacity change from 0 to 512 02:43:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, 0x0) [ 616.276212][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.302646][T16442] EXT4-fs (loop2): orphan cleanup on readonly fs [ 616.309647][T16442] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 [ 616.321183][T16442] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 616.336027][T16442] EXT4-fs (loop2): Cannot turn on quotas: error -116 [ 616.343478][T16442] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:43:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000250000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 616.463103][T16453] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave [ 616.661708][T16456] loop5: detected capacity change from 0 to 512 [ 616.742976][T16456] EXT4-fs (loop5): orphan cleanup on readonly fs [ 616.750093][T16456] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 616.764729][T16456] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 616.783025][T16456] EXT4-fs (loop5): Cannot turn on quotas: error -116 02:43:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 616.790521][T16456] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:43:59 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000006080), 0x4000, 0x0) 02:43:59 executing program 0: syz_io_uring_setup(0x352b, &(0x7f0000000280), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 02:43:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 617.052563][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.062616][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.076486][T16464] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.237546][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.305105][T16468] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:43:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000640000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:43:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00), 0x0, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:43:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:00 executing program 4: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.596996][T16474] loop2: detected capacity change from 0 to 512 [ 617.709593][T16474] EXT4-fs (loop2): orphan cleanup on readonly fs [ 617.717635][T16474] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 [ 617.729673][T16474] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 617.744190][T16474] EXT4-fs (loop2): Cannot turn on quotas: error -116 [ 617.751126][T16474] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:00 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000180)) [ 618.131407][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.217314][T16492] loop5: detected capacity change from 0 to 512 [ 618.228199][T16491] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave [ 618.314007][T16492] EXT4-fs (loop5): orphan cleanup on readonly fs [ 618.320934][T16492] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 618.333081][T16492] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 618.348211][T16492] EXT4-fs (loop5): Cannot turn on quotas: error -116 02:44:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000000300000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4b, 0x0, &(0x7f0000000180)) [ 618.355932][T16492] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000100)) openat$mice(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x41) 02:44:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000f2ffff7f0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 618.924754][T16507] loop2: detected capacity change from 0 to 512 02:44:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00), 0x0, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 619.000439][T16507] EXT4-fs (loop2): orphan cleanup on readonly fs [ 619.007354][T16507] EXT4-fs error (device loop2): ext4_quota_enable:6405: comm syz-executor.2: Bad quota inode # 3 [ 619.020330][T16507] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 619.035601][T16507] EXT4-fs (loop2): Cannot turn on quotas: error -116 [ 619.042899][T16507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, 0x0, &(0x7f0000000180)) 02:44:01 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x185000) [ 619.177046][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 619.210621][T16512] device syz_tun left promiscuous mode [ 619.219394][T16512] bridge18: port 1(syz_tun) entered disabled state 02:44:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 619.532693][T16522] loop5: detected capacity change from 0 to 512 [ 619.613373][T16522] EXT4-fs (loop5): orphan cleanup on readonly fs [ 619.620507][T16522] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 619.634915][T16522] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 619.651408][T16522] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 619.658409][T16522] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 620.067563][T16533] loop2: detected capacity change from 0 to 512 02:44:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000f8ffff7f0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 620.243034][T16533] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 620.255663][T16533] EXT4-fs (loop2): get root inode failed [ 620.261994][T16533] EXT4-fs (loop2): mount failed 02:44:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002cc0)={&(0x7f00000008c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@tclass={{0x14}}], 0x18}, 0x0) 02:44:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00), 0x0, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:02 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000000300000000000000000000000300000000000000020000f3"], 0x23) [ 620.365392][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000f9ffff7f0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 621.019009][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.029320][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.040167][T16553] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.065927][T16554] loop5: detected capacity change from 0 to 512 02:44:03 executing program 4: mount$fuse(0x0, &(0x7f0000000340)='\x00', 0x0, 0x0, 0x0) [ 621.196184][T16557] loop2: detected capacity change from 0 to 512 02:44:03 executing program 0: mount$fuse(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x84010, &(0x7f0000000500)) [ 621.366202][T16554] EXT4-fs (loop5): orphan cleanup on readonly fs [ 621.373381][T16554] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 621.385197][T16554] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 621.400357][T16554] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 621.405547][T16557] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 621.407487][T16554] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 621.420011][T16557] EXT4-fs (loop2): get root inode failed [ 621.437180][T16557] EXT4-fs (loop2): mount failed 02:44:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010200000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c0000", 0x1f, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:04 executing program 4: socketpair(0x0, 0x0, 0x5, &(0x7f00000001c0)) 02:44:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@tclass={{0x14}}], 0x18}, 0x0) 02:44:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 622.419534][T16578] __nla_validate_parse: 2 callbacks suppressed [ 622.419671][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 622.436966][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 622.447710][T16578] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010300000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 623.030502][T16587] loop2: detected capacity change from 0 to 512 [ 623.128741][T16587] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 623.141832][T16587] EXT4-fs (loop2): get root inode failed [ 623.148086][T16587] EXT4-fs (loop2): mount failed [ 623.167943][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 623.190394][T16592] loop5: detected capacity change from 0 to 512 02:44:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 623.487629][T16592] EXT4-fs (loop5): orphan cleanup on readonly fs [ 623.494764][T16592] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 623.509709][T16592] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 623.519938][T16592] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 623.532173][T16592] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {0x0, 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:06 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 02:44:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002cc0)={&(0x7f00000008c0)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0x1c, 0x0}, 0x40) [ 623.700227][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 623.709951][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 623.723445][T16604] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010400000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c0000", 0x1f, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 624.112406][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.133249][T16610] loop2: detected capacity change from 0 to 512 [ 624.299250][T16610] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 624.313699][T16610] EXT4-fs (loop2): get root inode failed [ 624.321777][T16610] EXT4-fs (loop2): mount failed 02:44:06 executing program 4: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x111040) 02:44:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 624.601364][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 624.612275][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:07 executing program 0: io_uring_setup(0x1f30, &(0x7f0000000340)={0x0, 0xae, 0x0, 0x2}) 02:44:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {0x0, 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 624.814874][T16625] loop5: detected capacity change from 0 to 512 [ 625.019270][T16625] EXT4-fs (loop5): orphan cleanup on readonly fs [ 625.027675][T16625] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 625.044968][T16625] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 625.054901][T16625] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 02:44:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010500000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 625.067638][T16625] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:07 executing program 0: syz_io_uring_setup(0x2484, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 02:44:08 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f00000002c0)=""/254, 0xfe, &(0x7f0000000440)={&(0x7f00000003c0)={'blake2s-160\x00'}}) 02:44:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010600000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c0000", 0x1f, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 625.746963][T16642] loop2: detected capacity change from 0 to 512 02:44:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 625.876721][T16642] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 625.890192][T16642] EXT4-fs (loop2): get root inode failed [ 625.896126][T16642] EXT4-fs (loop2): mount failed 02:44:08 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)) 02:44:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {0x0, 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 626.462946][T16665] loop5: detected capacity change from 0 to 512 02:44:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010700000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 626.718101][T16665] EXT4-fs (loop5): orphan cleanup on readonly fs [ 626.725764][T16665] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 626.741135][T16665] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 626.748754][T16665] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 02:44:09 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002540), 0x114000, 0x0) [ 626.759583][T16665] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:09 executing program 0: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/135) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x200) [ 627.137726][T16677] loop2: detected capacity change from 0 to 512 [ 627.413201][T16677] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 627.426471][T16677] EXT4-fs (loop2): get root inode failed [ 627.432543][T16677] EXT4-fs (loop2): mount failed 02:44:09 executing program 4: keyctl$join(0x1, &(0x7f0000002440)={'syz', 0x1}) 02:44:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400", 0x2e, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010800000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 627.656134][T16685] __nla_validate_parse: 15 callbacks suppressed [ 627.656209][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00), 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:10 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x0) fstat(r0, &(0x7f0000000100)) 02:44:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:10 executing program 4: r0 = epoll_create(0x3) epoll_pwait(r0, &(0x7f0000002600)=[{}], 0x1, 0x0, &(0x7f0000002640)={[0x9230]}, 0x8) [ 628.267289][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 628.278770][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 628.289759][T16698] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 628.325824][T16699] loop5: detected capacity change from 0 to 512 02:44:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010900000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 628.480114][T16699] EXT4-fs (loop5): orphan cleanup on readonly fs [ 628.487639][T16699] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 628.508647][T16699] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 628.520152][T16699] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 628.537383][T16699] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 628.545068][T16699] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 628.582735][T16706] loop2: detected capacity change from 0 to 512 [ 628.782257][T16706] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 628.795416][T16706] EXT4-fs (loop2): get root inode failed [ 628.802289][T16706] EXT4-fs (loop2): mount failed 02:44:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400", 0x2e, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 628.866718][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 628.950760][T16715] bridge18: port 1(syz_tun) entered blocking state [ 628.958674][T16715] bridge18: port 1(syz_tun) entered disabled state [ 628.968359][T16715] device syz_tun entered promiscuous mode [ 628.985577][T16713] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:11 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) [ 629.000019][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 629.010015][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 629.019919][T16716] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00), 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) 02:44:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010a00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 629.672274][T16724] loop5: detected capacity change from 0 to 512 [ 629.801961][T16724] EXT4-fs (loop5): orphan cleanup on readonly fs [ 629.809128][T16724] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 629.829232][T16724] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 629.840673][T16724] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 629.846950][T16728] loop2: detected capacity change from 0 to 512 [ 629.855548][T16724] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 629.870913][T16724] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 629.909227][T16728] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 629.922535][T16728] EXT4-fs (loop2): get root inode failed [ 629.928340][T16728] EXT4-fs (loop2): mount failed [ 630.110822][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 630.190558][T16740] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave [ 630.260456][T16741] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00), 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 02:44:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400", 0x2e, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010b00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:13 executing program 0: getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000004340)) ioprio_set$uid(0x3, 0x0, 0x4000) [ 631.026019][T16752] loop2: detected capacity change from 0 to 512 [ 631.072221][T16755] loop5: detected capacity change from 0 to 512 [ 631.105089][T16755] EXT4-fs (loop5): orphan cleanup on readonly fs [ 631.112309][T16755] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 631.133648][T16755] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 631.146513][T16755] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 631.162416][T16755] EXT4-fs (loop5): Cannot turn on quotas: error -117 02:44:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={0x0}}, 0x0) [ 631.169950][T16755] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 631.272149][T16752] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 631.285378][T16752] EXT4-fs (loop2): get root inode failed [ 631.291227][T16752] EXT4-fs (loop2): mount failed [ 631.309569][T16759] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010c00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:14 executing program 0: r0 = io_uring_setup(0x1bf7, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0)=r1, 0x1) 02:44:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000", 0x36, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:14 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 02:44:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010d00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 632.276533][T16775] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave [ 632.317019][T16782] loop2: detected capacity change from 0 to 512 [ 632.447589][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.455424][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.553718][T16782] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 632.566416][T16782] EXT4-fs (loop2): get root inode failed [ 632.572628][T16782] EXT4-fs (loop2): mount failed 02:44:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:15 executing program 0: syz_open_dev$vcsu(&(0x7f0000000340), 0x3, 0x0) 02:44:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000001c0)=0x5) [ 632.885760][T16791] loop5: detected capacity change from 0 to 512 [ 632.971229][T16795] __nla_validate_parse: 10 callbacks suppressed [ 632.971297][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 632.988128][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 632.998224][T16795] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.020715][T16791] EXT4-fs (loop5): orphan cleanup on readonly fs [ 633.027547][T16791] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 633.050502][T16791] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 633.062064][T16791] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 633.076776][T16791] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 633.084597][T16791] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000", 0x36, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010e00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 633.596914][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.621153][T16806] loop2: detected capacity change from 0 to 512 02:44:16 executing program 4: mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) [ 633.721287][T16805] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:16 executing program 0: r0 = io_uring_setup(0x1bf7, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0), 0x1) [ 633.795939][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.805831][T16813] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.816300][T16813] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.878068][T16806] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 633.891131][T16806] EXT4-fs (loop2): get root inode failed [ 633.897666][T16806] EXT4-fs (loop2): mount failed 02:44:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010f00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 634.146221][T16817] loop5: detected capacity change from 0 to 512 [ 634.220213][T16817] EXT4-fs (loop5): orphan cleanup on readonly fs [ 634.227261][T16817] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 634.246543][T16817] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 634.257704][T16817] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 634.274390][T16817] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 634.281207][T16817] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 634.425756][T16827] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 634.436246][T16827] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 634.446781][T16827] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:17 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:44:17 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x374, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xfffffe05}], 0x1, 0x0) fcntl$getownex(r0, 0x10, 0x0) 02:44:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000011000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 634.846858][T16829] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000", 0x36, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 635.054422][T16832] loop2: detected capacity change from 0 to 512 02:44:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 635.252143][T16832] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 635.265416][T16832] EXT4-fs (loop2): get root inode failed [ 635.271629][T16832] EXT4-fs (loop2): mount failed 02:44:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:44:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400000000000000000000000300", 0x3a, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:18 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x135303, 0x0) 02:44:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000011100000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 635.947937][T16849] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 636.256452][T16856] loop2: detected capacity change from 0 to 512 [ 636.276091][T16855] loop5: detected capacity change from 0 to 512 [ 636.447748][T16856] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 636.460774][T16856] EXT4-fs (loop2): get root inode failed [ 636.466928][T16856] EXT4-fs (loop2): mount failed [ 636.487397][T16855] EXT4-fs (loop5): orphan cleanup on readonly fs [ 636.494678][T16855] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 636.513421][T16855] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 636.526561][T16855] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 636.541858][T16855] EXT4-fs (loop5): Cannot turn on quotas: error -117 02:44:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 636.548691][T16855] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:19 executing program 4: syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) 02:44:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000011200000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 636.796178][T16868] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400000000000000000000000300", 0x3a, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:44:19 executing program 4: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000840)) [ 637.515857][T16880] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave [ 637.518170][T16882] loop2: detected capacity change from 0 to 512 02:44:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000011c00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 637.681062][T16882] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 637.695301][T16882] EXT4-fs (loop2): get root inode failed [ 637.701778][T16882] EXT4-fs (loop2): mount failed 02:44:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 637.978001][T16893] loop5: detected capacity change from 0 to 512 02:44:20 executing program 4: r0 = io_uring_setup(0x5f5e, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) 02:44:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 638.207768][T16893] EXT4-fs (loop5): orphan cleanup on readonly fs [ 638.215305][T16893] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 638.234595][T16893] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 02:44:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 638.246661][T16893] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 638.264346][T16893] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 638.271345][T16893] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 638.434732][T16900] device syz_tun left promiscuous mode [ 638.441046][T16900] bridge18: port 1(syz_tun) entered disabled state [ 638.538330][T16903] __nla_validate_parse: 16 callbacks suppressed [ 638.538397][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 638.555659][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 638.565669][T16903] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:21 executing program 0: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 638.899137][T16906] loop2: detected capacity change from 0 to 512 02:44:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af301000400000000000000000000000300", 0x3a, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000012500000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 639.074270][T16906] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 639.088788][T16906] EXT4-fs (loop2): get root inode failed [ 639.095643][T16906] EXT4-fs (loop2): mount failed 02:44:21 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f00000001c0)) 02:44:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 639.538890][T16922] loop5: detected capacity change from 0 to 512 02:44:21 executing program 0: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 639.664643][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.675402][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.686060][T16926] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.752327][T16922] EXT4-fs (loop5): orphan cleanup on readonly fs [ 639.759615][T16922] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 639.778863][T16922] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 639.790376][T16922] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 639.804982][T16922] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 639.812184][T16922] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003000000", 0x3c, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000014800000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:22 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000cfc6ae084c052b000b010000000109022400010000000009040000021f25730009050e0200f3ff000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 640.401806][T16939] loop2: detected capacity change from 0 to 512 [ 640.449342][T16942] loop5: detected capacity change from 0 to 512 [ 640.482124][T16942] EXT4-fs (loop5): orphan cleanup on readonly fs 02:44:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 640.489308][T16942] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 640.509883][T16942] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 640.523822][T16942] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 640.539313][T16942] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 640.547248][T16942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 640.596129][T16939] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 640.610671][T16939] EXT4-fs (loop2): get root inode failed [ 640.619852][T16939] EXT4-fs (loop2): mount failed 02:44:23 executing program 0: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 640.934240][T16952] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.944482][T16952] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.954728][T16952] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003000000", 0x3c, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000014c00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 641.346212][T11396] usb 5-1: new high-speed USB device number 8 using dummy_hcd 02:44:23 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 641.578968][T16961] loop2: detected capacity change from 0 to 512 [ 641.594578][T11396] usb 5-1: Using ep0 maxpacket: 8 [ 641.715751][T11396] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 768 [ 641.726617][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 641.737442][T11396] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 641.749184][T11396] usb 5-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0b [ 641.759153][T11396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.800216][T16968] loop5: detected capacity change from 0 to 512 [ 641.814074][T16961] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 641.827388][T16961] EXT4-fs (loop2): get root inode failed [ 641.833573][T16961] EXT4-fs (loop2): mount failed [ 641.850129][T11396] usb 5-1: config 0 descriptor?? [ 641.874301][T16954] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 641.915701][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 641.959352][T11396] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 642.215032][T16968] EXT4-fs (loop5): orphan cleanup on readonly fs [ 642.222764][T16968] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 642.243594][T16968] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 02:44:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 642.256310][T16968] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 642.272274][T16968] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 642.279479][T16968] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 642.308562][T11396] scsi host1: usb-storage 5-1:0.0 [ 642.360112][T16981] bridge18: port 1(syz_tun) entered blocking state [ 642.367293][T16981] bridge18: port 1(syz_tun) entered disabled state [ 642.377050][T16981] device syz_tun entered promiscuous mode [ 642.391342][T16981] bond0: (slave gretap0): slave is up - this may be due to an out of date ifenslave 02:44:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:24 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:44:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000016000000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 642.869980][T16993] loop2: detected capacity change from 0 to 512 [ 642.900754][T16997] device syz_tun left promiscuous mode [ 642.907350][T16997] bridge18: port 1(syz_tun) entered disabled state [ 642.987961][T16993] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 643.001275][T16993] EXT4-fs (loop2): get root inode failed [ 643.008366][T16993] EXT4-fs (loop2): mount failed [ 643.441006][T11396] usb 5-1: USB disconnect, device number 8 [ 644.211693][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 644.471703][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 644.604827][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 768 [ 644.618884][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 644.631258][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 644.644809][ T7] usb 5-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0b [ 644.655769][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.752324][ T7] usb 5-1: config 0 descriptor?? [ 644.775545][T16954] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 644.818606][ T7] ums-isd200 5-1:0.0: USB Mass Storage device detected 02:44:27 executing program 4: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) 02:44:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af3010004000000000000000000000003000000", 0x3c, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:27 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:44:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000016800000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 644.992389][ T7] scsi host1: usb-storage 5-1:0.0 [ 645.032866][ T7] usb 5-1: USB disconnect, device number 9 [ 645.166806][T17043] loop5: detected capacity change from 0 to 512 [ 645.166974][T17044] loop2: detected capacity change from 0 to 512 [ 645.176558][T17050] __nla_validate_parse: 5 callbacks suppressed [ 645.176620][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.198835][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.202720][T17044] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 645.209209][T17050] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.216225][T17044] EXT4-fs (loop2): mount failed [ 645.452685][T17043] EXT4-fs (loop5): orphan cleanup on readonly fs [ 645.459522][T17043] EXT4-fs error (device loop5): ext4_ext_check_inode:459: inode #3: comm syz-executor.5: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 645.478748][T17043] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 645.490079][T17043] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 645.507786][T17043] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 645.516038][T17043] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 02:44:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000016c00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 646.133306][T17066] loop2: detected capacity change from 0 to 512 02:44:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x8, 0x0, &(0x7f0000000180)) [ 646.332149][T17066] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 646.339503][T17066] EXT4-fs (loop2): mount failed 02:44:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 02:44:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 646.605449][T17074] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 646.617406][T17074] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 646.629226][T17074] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000017400000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:29 executing program 4: pselect6(0x40, &(0x7f0000001a80), &(0x7f0000001ac0)={0x1ff}, &(0x7f0000001b00), &(0x7f0000001b40)={0x77359400}, 0x0) [ 647.087740][T17084] loop5: detected capacity change from 0 to 512 [ 647.113684][T17084] EXT4-fs (loop5): orphan cleanup on readonly fs [ 647.121850][T17084] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 647.136475][T17084] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 647.158337][T17084] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 647.167364][T17084] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) 02:44:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 647.497388][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.507350][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.518121][T17092] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.541952][T17094] loop2: detected capacity change from 0 to 512 [ 647.625832][T17094] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 647.633588][T17094] EXT4-fs (loop2): mount failed 02:44:30 executing program 4: io_setup(0x2, &(0x7f0000000080)=0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000001180)="d69712ba18a4cd6036525c949cc22458", 0x10}]) 02:44:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000017a00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:44:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 648.281744][T17109] loop5: detected capacity change from 0 to 512 [ 648.318704][T17109] EXT4-fs (loop5): orphan cleanup on readonly fs [ 648.326065][T17109] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 648.337623][T17109] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 648.353288][T17109] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 648.360938][T17109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 648.534761][T17117] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:30 executing program 4: write$input_event(0xffffffffffffffff, 0x0, 0x0) [ 648.694908][T17120] loop2: detected capacity change from 0 to 512 [ 648.818122][T17120] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 648.832675][T17120] EXT4-fs (loop2): get root inode failed [ 648.838661][T17120] EXT4-fs (loop2): mount failed 02:44:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001cb00000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 02:44:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 02:44:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010003000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 649.652658][T17137] loop2: detected capacity change from 0 to 512 02:44:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 649.776631][T17141] loop5: detected capacity change from 0 to 512 [ 649.830177][T17137] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 649.847062][T17137] EXT4-fs (loop2): get root inode failed [ 649.853682][T17137] EXT4-fs (loop2): mount failed [ 649.888833][T17141] EXT4-fs (loop5): orphan cleanup on readonly fs [ 649.896033][T17141] EXT4-fs error (device loop5): ext4_quota_enable:6405: comm syz-executor.5: Bad quota inode # 3 [ 649.907614][T17141] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 649.922464][T17141] EXT4-fs (loop5): Cannot turn on quotas: error -116 [ 649.929567][T17141] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 02:44:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000014004000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 650.322620][T17155] __nla_validate_parse: 11 callbacks suppressed [ 650.322689][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:32 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 02:44:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 650.781315][T17160] loop2: detected capacity change from 0 to 512 [ 650.801020][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 650.811886][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 650.823118][T17161] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 650.889686][T17160] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 650.903574][T17160] EXT4-fs (loop2): get root inode failed [ 650.909458][T17160] EXT4-fs (loop2): mount failed 02:44:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 02:44:33 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x16, 0x4) 02:44:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 651.429181][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010005000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 651.519039][T17175] loop5: detected capacity change from 0 to 512 [ 651.656984][T17175] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 651.672543][T17175] EXT4-fs (loop5): get root inode failed [ 651.681331][T17175] EXT4-fs (loop5): mount failed 02:44:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 652.013098][T17188] loop2: detected capacity change from 0 to 512 02:44:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) [ 652.132526][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 652.143351][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 652.153809][T17192] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 652.174989][T17188] EXT4-fs (loop2): orphan cleanup on readonly fs [ 652.200700][T17188] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 652.215304][T17188] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 652.222446][T17188] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 652.233619][T17188] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 652.389779][T17195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 02:44:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010006000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 652.814331][T17201] loop5: detected capacity change from 0 to 512 [ 652.924888][T17201] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 652.938183][T17201] EXT4-fs (loop5): get root inode failed [ 652.944513][T17201] EXT4-fs (loop5): mount failed 02:44:35 executing program 4: openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 653.194541][T17208] loop2: detected capacity change from 0 to 512 [ 653.228013][T17208] EXT4-fs (loop2): orphan cleanup on readonly fs [ 653.236153][T17208] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 653.251028][T17208] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 653.257994][T17208] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 653.269306][T17208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 653.400506][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010007000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:36 executing program 4: r0 = openat$ppp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)) [ 654.044594][T17227] loop2: detected capacity change from 0 to 512 02:44:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 654.173551][T17231] loop5: detected capacity change from 0 to 512 [ 654.284313][T17227] EXT4-fs (loop2): orphan cleanup on readonly fs [ 654.309743][T17231] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 654.322677][T17231] EXT4-fs (loop5): get root inode failed [ 654.328652][T17231] EXT4-fs (loop5): mount failed [ 654.359706][T17227] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 654.375016][T17227] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 654.382231][T17227] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 654.394366][T17227] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010009000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {0x0, 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:44:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:37 executing program 4: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) keyctl$link(0x8, r0, r0) 02:44:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000a000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 655.419488][T17261] __nla_validate_parse: 10 callbacks suppressed [ 655.419552][T17261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 655.508005][T17267] loop2: detected capacity change from 0 to 512 [ 655.673478][T17270] loop5: detected capacity change from 0 to 512 [ 655.745822][T17267] EXT4-fs (loop2): orphan cleanup on readonly fs [ 655.754140][T17267] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 655.769636][T17267] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 655.778354][T17267] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 02:44:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x801}, 0x14}}, 0x0) [ 655.789565][T17267] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 655.844676][T17270] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 655.854911][T17277] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 655.858025][T17270] EXT4-fs (loop5): get root inode failed [ 655.867689][T17277] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 655.877137][T17270] EXT4-fs (loop5): mount failed [ 655.885496][T17277] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:38 executing program 4: add_key(0x0, 0x0, &(0x7f0000000180)='Q', 0x1, 0xfffffffffffffff8) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 02:44:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000b000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {0x0, 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 656.486382][T17286] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:38 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000002080)='ns/uts\x00') 02:44:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x801}, 0x14}}, 0x0) [ 656.698689][T17289] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 656.708736][T17289] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 656.718606][T17289] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 656.948771][T17292] loop2: detected capacity change from 0 to 512 [ 657.003216][T17292] EXT4-fs (loop2): orphan cleanup on readonly fs [ 657.011397][T17292] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 657.026333][T17292] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 657.034168][T17292] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 657.045779][T17292] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001c00b000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 657.109396][T17298] loop5: detected capacity change from 0 to 512 [ 657.388789][T17298] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 657.402605][T17298] EXT4-fs (loop5): get root inode failed [ 657.408671][T17298] EXT4-fs (loop5): mount failed 02:44:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:39 executing program 4: r0 = openat$ppp(0xffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f00000014c0)={0x0, 0x0}) 02:44:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x801}, 0x14}}, 0x0) [ 657.529619][T17307] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {0x0, 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 657.841039][T17312] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001c10b000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 658.141793][T17320] loop2: detected capacity change from 0 to 512 [ 658.360119][T17320] EXT4-fs (loop2): orphan cleanup on readonly fs [ 658.384736][T17320] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 658.400453][T17320] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 658.409012][T17320] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 658.421737][T17320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:40 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "0099bf0aa1b4e651e5c11eda3dcb33230de3c3f2d2ed840536f31c37c80de77d9a8f033dbfab6b46f08c47e6abea9fd22fc41ada109956494447f5a05e5cea4a"}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r0, 0x0, 0x0) [ 658.466091][T17329] loop5: detected capacity change from 0 to 512 02:44:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='\x00', r0) [ 658.664624][T17329] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 658.678994][T17329] EXT4-fs (loop5): get root inode failed [ 658.685808][T17329] EXT4-fs (loop5): mount failed 02:44:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001c20b000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00), 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700), 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000002080)='uid_map\x00') 02:44:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xfff, 0x4) 02:44:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 659.681633][T17348] loop5: detected capacity change from 0 to 512 02:44:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 659.750095][T17348] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 659.766711][T17348] EXT4-fs (loop5): get root inode failed [ 659.774091][T17348] EXT4-fs (loop5): mount failed [ 659.908517][T17354] loop2: detected capacity change from 0 to 512 [ 659.988586][T17354] EXT4-fs (loop2): orphan cleanup on readonly fs [ 660.061711][T17354] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 660.078865][T17354] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 660.086245][T17354] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 660.097242][T17354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00), 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:42 executing program 0: getitimer(0x1, &(0x7f0000000340)) 02:44:42 executing program 4: setitimer(0x2, &(0x7f0000000240)={{}, {0x0, 0x2710}}, &(0x7f0000000280)) 02:44:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000d000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 660.503495][T17365] __nla_validate_parse: 13 callbacks suppressed [ 660.503558][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700), 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 660.838014][T17375] loop5: detected capacity change from 0 to 512 02:44:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 660.917330][T17375] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 660.930745][T17375] EXT4-fs (loop5): get root inode failed [ 660.937079][T17375] EXT4-fs (loop5): mount failed 02:44:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) connect$netlink(r0, &(0x7f0000000000), 0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}}, 0x0) 02:44:43 executing program 4: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 661.085868][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.100044][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.110825][T17381] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00), 0x0, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 661.277161][T17383] loop2: detected capacity change from 0 to 512 02:44:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000e000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 661.444943][T17383] EXT4-fs (loop2): orphan cleanup on readonly fs [ 661.616094][T17383] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 661.635087][T17383] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 661.642804][T17383] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 661.654472][T17383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:44 executing program 0: r0 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) [ 661.694737][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:44 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) 02:44:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 661.955181][T17399] loop5: detected capacity change from 0 to 512 [ 662.021180][T17399] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 662.036055][T17399] EXT4-fs (loop5): get root inode failed [ 662.043535][T17399] EXT4-fs (loop5): mount failed [ 662.206313][T17405] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.217036][T17405] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.232028][T17405] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700), 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000f000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 662.616664][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:45 executing program 0: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000000080)=""/251, 0xfb) 02:44:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 662.909427][T17420] loop2: detected capacity change from 0 to 512 [ 662.944965][T17420] EXT4-fs (loop2): orphan cleanup on readonly fs [ 662.952737][T17420] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 662.967564][T17420] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 662.975183][T17420] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 662.988020][T17420] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 662.994255][T17421] loop5: detected capacity change from 0 to 512 02:44:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0", 0x3, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 663.191657][T17430] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:45 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000001c00)='.pending_reads\x00', 0x0, 0x0) [ 663.255500][T17421] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 663.268949][T17421] EXT4-fs (loop5): get root inode failed [ 663.275425][T17421] EXT4-fs (loop5): mount failed 02:44:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010011000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:46 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 02:44:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 663.702532][T17442] loop2: detected capacity change from 0 to 512 [ 663.845253][T17442] EXT4-fs (loop2): orphan cleanup on readonly fs [ 663.956332][T17442] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 663.973019][T17442] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 663.980434][T17442] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 663.992158][T17442] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 664.094419][T17449] loop5: detected capacity change from 0 to 512 02:44:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "8fc0437eee95029c732ee8ca"}, 0x10) [ 664.170097][T17449] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 664.183651][T17449] EXT4-fs (loop5): get root inode failed [ 664.190720][T17449] EXT4-fs (loop5): mount failed 02:44:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010012000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0", 0x3, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:46 executing program 4: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='(', 0x1, 0xffffffffffffffff) 02:44:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') read$alg(r0, 0x0, 0x0) [ 665.026422][T17472] loop5: detected capacity change from 0 to 512 [ 665.110708][T17475] loop2: detected capacity change from 0 to 512 [ 665.175154][T17472] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 665.189101][T17472] EXT4-fs (loop5): get root inode failed [ 665.198473][T17472] EXT4-fs (loop5): mount failed 02:44:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001001c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 665.315802][T17475] EXT4-fs (loop2): orphan cleanup on readonly fs [ 665.326276][T17475] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 665.340869][T17475] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 665.348034][T17475] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 665.358812][T17475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:47 executing program 0: openat$pfkey(0xffffff9c, &(0x7f0000001dc0), 0x21e080, 0x0) 02:44:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0", 0x3, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 665.629248][T17485] __nla_validate_parse: 10 callbacks suppressed [ 665.629314][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:48 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 02:44:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 665.898047][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 665.911609][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 665.922457][T17491] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) [ 666.228846][T17497] loop2: detected capacity change from 0 to 512 [ 666.294225][T17497] EXT4-fs (loop2): orphan cleanup on readonly fs [ 666.352321][T17497] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 666.367897][T17497] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 666.375259][T17497] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 666.386812][T17497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:48 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) read$alg(r0, &(0x7f0000000140)=""/47, 0x2f) 02:44:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010020000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 666.539155][T17503] loop5: detected capacity change from 0 to 512 [ 666.666106][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 666.719181][T17503] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 666.733737][T17503] EXT4-fs (loop5): get root inode failed [ 666.739780][T17503] EXT4-fs (loop5): mount failed 02:44:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:49 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "1b5dffb91429e120c66b18d8e92e47f1ead59b21ebf24826763d70c332ef9c6d7c068668a8498fca963a7345e01b97bca3a99a525271054e73c61e99ed9e3785"}, 0x48, 0xfffffffffffffffe) [ 667.343773][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 667.354045][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 667.364141][T17521] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 667.471709][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 667.531915][T17525] loop2: detected capacity change from 0 to 512 [ 667.637051][T17525] EXT4-fs (loop2): orphan cleanup on readonly fs [ 667.746892][T17525] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 667.764847][T17525] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 667.773351][T17525] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 667.785459][T17525] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010025000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 667.900228][T17533] loop5: detected capacity change from 0 to 512 02:44:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:50 executing program 0: io_setup(0x2, &(0x7f0000000080)=0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000001180)="d69712ba18a4cd6036525c949cc22458951786a44b91f602a56d997a9f0a7692", 0x20}]) [ 668.083518][T17533] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 668.096492][T17533] EXT4-fs (loop5): get root inode failed [ 668.102906][T17533] EXT4-fs (loop5): mount failed 02:44:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r0, &(0x7f0000005040)=[{{&(0x7f0000000240)=@phonet={0x23, 0x0, 0x0, 0x8}, 0x80, 0x0}}], 0x1, 0x0) 02:44:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 668.351712][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010440000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:51 executing program 0: r0 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) [ 668.910032][T17553] loop2: detected capacity change from 0 to 512 [ 668.990249][T17553] EXT4-fs (loop2): orphan cleanup on readonly fs [ 668.998164][T17553] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 669.013359][T17553] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 669.020318][T17553] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 669.031591][T17553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 669.150346][T17561] loop5: detected capacity change from 0 to 512 02:44:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d9", 0x4, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 669.190038][T17561] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 669.203001][T17561] EXT4-fs (loop5): get root inode failed [ 669.208753][T17561] EXT4-fs (loop5): mount failed 02:44:51 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000980), 0x0, &(0x7f0000000a00)={0x0, 0x0, @d}, 0x18, 0xfffffffffffffff9) 02:44:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000018847000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 669.842482][T17577] loop2: detected capacity change from 0 to 512 02:44:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:52 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "0099bf0aa1b4e651e5c11eda3dcb33230de3c3f2d2ed840536f31c37c80de77d9a8f033dbfab6b46f08c47e6abea9fd22fc41ada109956494447f5a05e5cea4a"}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "0099bf0aa1b4e651e5c11eda3dcb33230de3c3f2d2ed840536f31c37c80de77d9a8f033dbfab6b46f08c47e6abea9fd22fc41ada109956494447f5a05e5cea4a"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 02:44:52 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') read$alg(r0, 0x0, 0x0) 02:44:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010048000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 669.997243][T17577] EXT4-fs (loop2): orphan cleanup on readonly fs [ 670.095776][T17577] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 670.113049][T17577] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 670.120205][T17577] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 670.131529][T17577] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 670.165737][T17583] loop5: detected capacity change from 0 to 512 [ 670.228420][T17583] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 670.243692][T17583] EXT4-fs (loop5): get root inode failed [ 670.249989][T17583] EXT4-fs (loop5): mount failed 02:44:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 670.648959][T17597] __nla_validate_parse: 17 callbacks suppressed [ 670.649030][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000018848000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000021c0)={0x0, 0xfffffffffffffc57, &(0x7f0000002180)={&(0x7f0000002100)={0x43}, 0x38}}, 0x0) 02:44:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') read$alg(r0, 0x0, 0x0) 02:44:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 671.019859][T17601] loop2: detected capacity change from 0 to 512 [ 671.101329][T17605] loop5: detected capacity change from 0 to 512 [ 671.123084][T17605] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 671.138903][T17605] EXT4-fs (loop5): get root inode failed [ 671.145674][T17605] EXT4-fs (loop5): mount failed 02:44:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 671.254081][T17601] EXT4-fs (loop2): orphan cleanup on readonly fs [ 671.318985][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.329613][T17614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.343791][T17614] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.360700][T17601] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 671.376249][T17601] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 671.379804][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 671.383688][T17601] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 671.404492][T17601] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 671.470590][T17615] bond0: (slave ip6_vti0): slave is up - this may be due to an out of date ifenslave 02:44:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) 02:44:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001004c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 671.865472][T17623] loop5: detected capacity change from 0 to 512 [ 671.960896][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.970683][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.980614][T17627] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 672.063211][T17623] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 672.076363][T17623] EXT4-fs (loop5): get root inode failed [ 672.082388][T17623] EXT4-fs (loop5): mount failed 02:44:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000016558000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x38}}, 0x0) [ 672.337891][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x11) 02:44:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 672.556814][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') read$alg(r0, 0x0, 0x0) [ 672.787755][T17641] loop2: detected capacity change from 0 to 512 02:44:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010060000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 672.946090][T17641] EXT4-fs (loop2): orphan cleanup on readonly fs [ 672.995340][T17641] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 673.011846][T17641] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 673.019018][T17641] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 673.030147][T17641] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}) 02:44:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 673.193898][T17651] loop5: detected capacity change from 0 to 512 [ 673.342114][T17651] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 673.349212][T17651] EXT4-fs (loop5): mount failed 02:44:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000015865000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:55 executing program 0: syz_open_procfs(0x0, &(0x7f0000000200)='net/sco\x00') 02:44:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:56 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) [ 673.932447][T17670] loop2: detected capacity change from 0 to 512 [ 674.025379][T17676] loop5: detected capacity change from 0 to 512 02:44:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010068000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 674.146369][T17676] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 674.153391][T17676] EXT4-fs (loop5): mount failed [ 674.167626][T17670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 674.290486][T17670] EXT4-fs warning (device loop2): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 674.307035][T17670] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 674.319226][T17670] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 02:44:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 674.330561][T17670] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:44:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @hci, @can, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='virt_wifi0\x00'}) 02:44:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:57 executing program 4: add_key$user(&(0x7f0000000c80), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 02:44:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001006c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:44:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:57 executing program 0: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}) [ 675.067422][T17694] loop5: detected capacity change from 0 to 512 [ 675.149304][T17694] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 675.157145][T17694] EXT4-fs (loop5): mount failed 02:44:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x1}, 0x10}}, 0x0) 02:44:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:44:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:58 executing program 0: clock_gettime(0x0, &(0x7f0000000040)) sched_rr_get_interval(0x0, &(0x7f00000006c0)) 02:44:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010074000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 675.709132][T17712] loop2: detected capacity change from 0 to 512 [ 675.749384][T17712] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 675.760197][T17712] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 675.772011][T17712] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 675.787412][T17712] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 675.801365][T17712] EXT4-fs (loop2): get root inode failed [ 675.807326][T17712] EXT4-fs (loop2): mount failed 02:44:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 676.015765][T17719] loop5: detected capacity change from 0 to 512 02:44:58 executing program 4: openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) [ 676.173725][T17725] __nla_validate_parse: 14 callbacks suppressed [ 676.173790][T17725] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.191161][T17725] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.202726][T17725] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.267355][T17719] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 676.282653][T17719] EXT4-fs (loop5): get root inode failed [ 676.289324][T17719] EXT4-fs (loop5): mount failed 02:44:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:58 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 02:44:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001007a000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 676.699410][T17732] loop2: detected capacity change from 0 to 512 02:44:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 676.829188][T17732] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 676.841016][T17732] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 676.852775][T17732] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 676.877161][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:44:59 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x1, &(0x7f00000007c0)=[{}]}) [ 677.050459][T17732] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 677.063166][T17732] EXT4-fs (loop2): get root inode failed [ 677.071103][T17732] EXT4-fs (loop2): mount failed [ 677.161104][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 677.173920][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 677.185485][T17745] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:44:59 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) [ 677.316402][T17748] loop5: detected capacity change from 0 to 512 02:44:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x2, &(0x7f00000007c0)=[{}, {0x7fff}]}) [ 677.476547][T17748] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 677.491329][T17748] EXT4-fs (loop5): get root inode failed [ 677.499793][T17748] EXT4-fs (loop5): mount failed 02:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010081000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:00 executing program 0: r0 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 677.868669][T17760] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:00 executing program 4: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) 02:45:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 678.106288][T17764] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 678.116985][T17764] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 678.240418][T17766] loop2: detected capacity change from 0 to 512 [ 678.313313][T17770] loop5: detected capacity change from 0 to 512 [ 678.333240][T17770] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 678.346325][T17770] EXT4-fs (loop5): get root inode failed [ 678.352600][T17770] EXT4-fs (loop5): mount failed 02:45:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 678.424062][T17766] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 678.435993][T17766] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 678.448883][T17766] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000014788000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 678.690279][T17766] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 678.703272][T17766] EXT4-fs (loop2): get root inode failed [ 678.712796][T17766] EXT4-fs (loop2): mount failed 02:45:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000002080)='net/mcfilter6\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 02:45:01 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000001c00)='.pending_reads\x00', 0x140, 0x0) [ 679.071632][T17787] loop5: detected capacity change from 0 to 512 02:45:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') write$input_event(r0, 0x0, 0x0) [ 679.187665][T17787] EXT4-fs (loop5): orphan cleanup on readonly fs 02:45:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 679.302564][T17787] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 679.318646][T17787] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 679.325901][T17787] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 679.337123][T17787] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000014888000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:01 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) [ 679.674030][T17798] loop2: detected capacity change from 0 to 512 02:45:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) 02:45:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 679.838570][T17798] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 679.849170][T17798] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 679.860089][T17798] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:45:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 680.000390][T17798] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 680.013642][T17798] EXT4-fs (loop2): get root inode failed [ 680.019608][T17798] EXT4-fs (loop2): mount failed 02:45:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:45:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010bc0000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 680.316031][T17814] loop5: detected capacity change from 0 to 512 02:45:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 680.571115][T17814] EXT4-fs (loop5): orphan cleanup on readonly fs [ 680.625671][T17814] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 680.642371][T17814] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 680.650200][T17814] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 680.663939][T17814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:03 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x4, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 02:45:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010bc1000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015be", 0xcf}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c) 02:45:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 681.171215][T17831] loop2: detected capacity change from 0 to 512 02:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010bc2000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 681.243779][T17837] __nla_validate_parse: 13 callbacks suppressed [ 681.243847][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.249585][T17831] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 681.250227][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.250306][T17837] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.291008][T17831] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 681.301260][T17831] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 681.348112][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 681.597648][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.607671][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 681.617471][T17844] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 681.662784][T17831] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 681.676378][T17831] EXT4-fs (loop2): get root inode failed [ 681.684311][T17831] EXT4-fs (loop2): mount failed [ 681.745207][T17846] loop5: detected capacity change from 0 to 512 [ 681.789993][T17846] EXT4-fs (loop5): orphan cleanup on readonly fs [ 681.798867][T17846] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 681.814392][T17846] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 681.821571][T17846] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 681.832859][T17846] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100cb000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 02:45:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 682.456363][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 682.467321][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 682.477698][T17861] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/18, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 682.693433][T17868] loop2: detected capacity change from 0 to 512 02:45:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20048001) [ 682.867881][T17875] loop5: detected capacity change from 0 to 512 [ 682.892773][T17875] EXT4-fs (loop5): orphan cleanup on readonly fs [ 682.926746][T17868] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 682.937516][T17868] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 682.947999][T17868] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 682.977260][T17875] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 682.992643][T17875] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 682.999617][T17875] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 683.014204][T17875] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:05 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x6, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x7, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x9a4, 0xbf, &(0x7f0000000300)=""/191, 0x0, 0x0, '\x00', 0x0, 0x2b, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x0, 0x6}, 0x10, 0x0, r1}, 0x78) vmsplice(r3, 0x0, 0x0, 0x0) 02:45:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010040030000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 683.165127][T17868] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 683.177762][T17868] EXT4-fs (loop2): get root inode failed [ 683.184328][T17868] EXT4-fs (loop2): mount failed 02:45:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) fork() bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002ac0)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010003400000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 684.028408][T17895] loop2: detected capacity change from 0 to 512 [ 684.068511][T17896] loop5: detected capacity change from 0 to 512 [ 684.095587][T17895] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 684.108452][T17895] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 684.120375][T17895] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 684.255346][T17896] EXT4-fs (loop5): orphan cleanup on readonly fs [ 684.275804][T17896] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 684.291683][T17896] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 684.299346][T17896] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 684.310951][T17896] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 684.476659][T17895] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 684.489908][T17895] EXT4-fs (loop2): get root inode failed [ 684.496436][T17895] EXT4-fs (loop2): mount failed 02:45:06 executing program 4: syz_open_dev$evdev(&(0x7f0000000240), 0x1000, 0x0) 02:45:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) 02:45:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001ffffe00000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/19, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:07 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000540)=@raw=[@ldst], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 685.352427][T17926] loop2: detected capacity change from 0 to 512 [ 685.490152][T17931] loop5: detected capacity change from 0 to 512 [ 685.530591][T17931] EXT4-fs (loop5): orphan cleanup on readonly fs [ 685.573426][T17931] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 685.587826][T17931] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 685.595320][T17931] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 685.596499][T17926] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 685.606444][T17931] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 685.629159][T17926] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 685.640028][T17926] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 685.659327][T17926] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 685.674909][T17926] EXT4-fs (loop2): get root inode failed [ 685.680759][T17926] EXT4-fs (loop2): mount failed 02:45:08 executing program 0: prctl$PR_SET_TSC(0x2a, 0x0) 02:45:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000100000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700), 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x560d, 0x0) 02:45:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 686.274873][T17945] bond0: (slave bridge52): Enslaving as an active interface with an up link 02:45:08 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{0x0}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002da8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x8, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92e6725240b5b87cff1866be0bec480ebc5c2189e00", [0x0, 0x2d]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000780)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1b, 0x0, "0c7f70a167f6cc188cb61c00e740c14c32a9ab322fb8b57bba37c4d876ef58517c2cdde4c2a04a84ecfa7964b4f2f052f4a01d6fb697e016813b74913884da38", "941acb4e4d0917915e0930ccead6e91780ed6d9677f412287b88d52644d882c5", [0xffff8001, 0x64]}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x1, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x8, 0x6, 0x0, 0x0, 0x242dbf85, 0x17f, 0x4], 0x7, 0x800}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x1]}, 0x8, 0x180800) syncfs(0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)) [ 686.422820][T17951] loop5: detected capacity change from 0 to 512 02:45:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000200000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)) [ 686.637523][T17951] EXT4-fs (loop5): orphan cleanup on readonly fs [ 686.678864][T17951] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 686.693509][T17951] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 686.703374][T17951] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 686.715875][T17951] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:09 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0xa00000000000000) 02:45:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700), 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 686.836995][T17963] loop2: detected capacity change from 0 to 512 [ 686.911279][T17963] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 686.922203][T17963] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 686.932647][T17963] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 686.947320][T17963] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 686.960641][T17963] EXT4-fs (loop2): get root inode failed [ 686.967198][T17963] EXT4-fs (loop2): mount failed [ 687.141078][T17971] __nla_validate_parse: 16 callbacks suppressed [ 687.141155][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.160478][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.170586][T17971] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 687.273909][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.367885][T17979] bond0: (slave bridge53): Enslaving as an active interface with an up link [ 687.457809][T17983] loop5: detected capacity change from 0 to 512 [ 687.537441][T17987] loop2: detected capacity change from 0 to 512 02:45:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000540)={0x0, {0x0, 0x0, 0x0, 0x0, 0x100}}) [ 687.627793][T17983] EXT4-fs (loop5): orphan cleanup on readonly fs [ 687.670008][T17983] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 687.686566][T17983] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 687.694923][T17983] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 687.706629][T17983] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000300000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700), 0x0, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 687.815082][T17987] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 687.852466][T17987] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated 02:45:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 687.865849][T17987] EXT4-fs (loop2): get root inode failed [ 687.872436][T17987] EXT4-fs (loop2): mount failed 02:45:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0xff3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000280)) 02:45:10 executing program 4: stat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 688.275350][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.286064][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.297134][T17998] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.307590][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.380297][T18004] bond0: (slave bridge54): Enslaving as an active interface with an up link [ 688.425219][T18005] loop5: detected capacity change from 0 to 512 [ 688.496252][T18005] EXT4-fs (loop5): orphan cleanup on readonly fs [ 688.504664][T18005] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 688.520191][T18005] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 688.527671][T18005] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 688.538685][T18005] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000400000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a09", 0xb, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 688.977612][T18015] loop2: detected capacity change from 0 to 512 [ 689.089205][T18015] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:45:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 689.193186][T18015] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 689.206621][T18015] EXT4-fs (loop2): get root inode failed [ 689.213179][T18015] EXT4-fs (loop2): mount failed 02:45:11 executing program 4: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x21000c0, &(0x7f0000000440)=ANY=[]) [ 689.337075][T18023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.352802][T18023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 689.634957][T18026] bond0: (slave bridge55): Enslaving as an active interface with an up link 02:45:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000500000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 689.864045][T18033] loop5: detected capacity change from 0 to 512 02:45:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x14}, 0x14}}, 0x0) [ 690.113861][T18033] EXT4-fs (loop5): orphan cleanup on readonly fs [ 690.227044][T18033] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 690.238458][T18033] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 690.254250][T18033] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 690.262379][T18033] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 02:45:12 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x56, 0x0) [ 690.275300][T18033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000600000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 690.319144][T18043] loop2: detected capacity change from 0 to 512 [ 690.412597][T18043] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 690.444457][T18043] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 690.460791][T18043] EXT4-fs (loop2): get root inode failed [ 690.468583][T18043] EXT4-fs (loop2): mount failed 02:45:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:45:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a09", 0xb, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 691.015485][T18055] bond0: (slave bridge56): Enslaving as an active interface with an up link 02:45:13 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002440)={&(0x7f0000000040)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "cbf5875ef421780e214f088ea8126bb1d15b2d6f0a3a409112285a58b88e7d7ef8f3f1876e74d5cf12153e447e1815e1c3816288056764958ac746e8a21d142ef2a68465d67ab9cd356b1d6e50130b122093837933e4db4ee97c6038371e093ea1278a0b1d64038b1418501b79bc0056c785c9b0cf41deecead20498af7ab5846341bb16eeb61197a25af4444bdb73f072cd22dc8d84cbc8370d9bdfb94bd4b31b4cb134a8f7e775e9c81561b7"}, @INET_DIAG_REQ_BYTECODE={0xdf9, 0x1, "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"}]}, 0xec4}}, 0x0) 02:45:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000700000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:13 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) stat(&(0x7f0000000640)='./file0\x00', 0x0) [ 691.489275][T18066] loop2: detected capacity change from 0 to 512 [ 691.526240][T18067] loop5: detected capacity change from 0 to 512 [ 691.578399][T18067] EXT4-fs (loop5): orphan cleanup on readonly fs [ 691.630477][T18066] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 691.684377][T18067] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 691.694511][T18067] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 691.709528][T18067] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 691.718260][T18067] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 691.729551][T18067] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 691.766392][T18066] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated 02:45:14 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000001680), 0x492883, 0x0) [ 691.779853][T18066] EXT4-fs (loop2): get root inode failed [ 691.786934][T18066] EXT4-fs (loop2): mount failed 02:45:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\r'], 0x138}}, 0x0) 02:45:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000800000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 692.070258][T18082] bond0: (slave bridge57): Enslaving as an active interface with an up link 02:45:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a09", 0xb, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000071, 0x68001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0xff3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 02:45:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 692.542626][T18092] __nla_validate_parse: 13 callbacks suppressed [ 692.542702][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.560571][T18092] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.570518][T18092] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:15 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000040)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "cbf5875ef421780e214f088ea8126bb1d15b2d6f0a3a409112285a58b88e7d7ef8f3f1876e74d5cf12153e447e1815e1c3816288056764958ac746e8a21d142ef2a68465d67ab9cd356b1d6e50130b122093837933e4db4ee97c6038371e093ea1278a0b1d64038b1418501b79bc0056c785c9b0cf41deecead20498af7ab5846341bb16eeb61197a25af4444bdb73f072cd22dc8d84cbc8370d9bdfb94bd4b31b4cb134a8f7e775e9c81561b72974"}, @INET_DIAG_REQ_BYTECODE={0xdfa, 0x1, "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"}]}, 0xec4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) [ 692.792215][T18094] loop2: detected capacity change from 0 to 512 [ 692.918692][T18094] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 692.952524][T18094] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 692.968208][T18094] EXT4-fs (loop2): get root inode failed [ 692.975159][T18094] EXT4-fs (loop2): mount failed 02:45:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000900000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 693.247316][T18106] loop5: detected capacity change from 0 to 512 [ 693.293580][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:15 executing program 0: openat$null(0xffffffffffffff9c, 0x0, 0x5850c2, 0x0) [ 693.406821][T18106] EXT4-fs (loop5): orphan cleanup on readonly fs [ 693.459514][T18111] bond0: (slave bridge58): Enslaving as an active interface with an up link [ 693.484895][T18106] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). 02:45:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 693.495392][T18106] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 693.511271][T18106] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 693.519267][T18106] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 693.530692][T18106] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:15 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 02:45:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 693.808633][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 693.820098][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 693.831116][T18118] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 693.886823][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.894631][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 02:45:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a0900", 0x10, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 694.023496][T18123] loop2: detected capacity change from 0 to 512 02:45:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000001e005f0214f9f407faac470002000000000000000000080008000100000000ff", 0x24) 02:45:16 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 694.244065][T18123] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 694.285554][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.353251][T18123] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 694.368071][T18123] EXT4-fs (loop2): get root inode failed [ 694.376870][T18123] EXT4-fs (loop2): mount failed [ 694.422181][T18130] bond0: (slave bridge59): Enslaving as an active interface with an up link 02:45:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000a00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 694.835665][T18143] loop5: detected capacity change from 0 to 512 02:45:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 694.898416][T18143] EXT4-fs (loop5): orphan cleanup on readonly fs [ 694.951035][T18143] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 694.961241][T18143] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 694.976775][T18143] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 694.984027][T18143] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 694.996471][T18143] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:17 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0) fallocate(r0, 0x0, 0x0, 0x5) lseek(r0, 0x0, 0x3) 02:45:17 executing program 0: r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) lseek(r0, 0x0, 0x4) [ 695.216350][T18151] loop2: detected capacity change from 0 to 512 02:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000b00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 695.276109][T18151] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 695.338562][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.360081][T18151] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 695.374381][T18151] EXT4-fs (loop2): get root inode failed [ 695.380347][T18151] EXT4-fs (loop2): mount failed [ 695.403579][T18156] bond0: (slave bridge60): Enslaving as an active interface with an up link 02:45:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a0900", 0x10, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 695.730675][T18164] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 695.934608][T18169] bond0: (slave bridge61): Enslaving as an active interface with an up link 02:45:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5410, 0x0) 02:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000c00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:18 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x2404400d, 0x0, 0x41) [ 696.255171][T18176] loop5: detected capacity change from 0 to 512 [ 696.264138][T18178] loop2: detected capacity change from 0 to 512 02:45:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 696.346932][T18176] EXT4-fs (loop5): orphan cleanup on readonly fs [ 696.380237][T18178] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 696.405146][T18178] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 696.419274][T18178] EXT4-fs (loop2): get root inode failed [ 696.427088][T18178] EXT4-fs (loop2): mount failed [ 696.447514][T18176] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 696.457848][T18176] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 696.473359][T18176] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 696.480385][T18176] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 696.491599][T18176] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000d00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:19 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00') 02:45:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000540)={0x0, {0x401, 0xfffffe01, 0x9, 0x0, 0x100, 0x9}}) 02:45:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a0900", 0x10, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 697.074126][T18193] bond0: (slave bridge62): Enslaving as an active interface with an up link 02:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000e00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 697.409006][T18204] loop2: detected capacity change from 0 to 512 [ 697.531724][T18204] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:45:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000000000)=""/133) [ 697.620541][T18209] loop5: detected capacity change from 0 to 512 [ 697.707740][T18204] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 697.721129][T18204] EXT4-fs (loop2): get root inode failed [ 697.728996][T18204] EXT4-fs (loop2): mount failed 02:45:20 executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x10e9, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 697.811393][T18209] EXT4-fs (loop5): orphan cleanup on readonly fs [ 697.852800][T18209] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 697.866760][T18209] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 697.882573][T18209] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 697.890094][T18209] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 697.901164][T18209] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 698.008913][T18218] __nla_validate_parse: 10 callbacks suppressed [ 698.008984][T18218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 698.026240][T18218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 698.037278][T18218] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 698.086160][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 698.159278][T18226] bond0: (slave bridge63): Enslaving as an active interface with an up link 02:45:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a0900000000", 0x13, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x300}, 0x0) 02:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000f00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 698.706487][T18236] loop2: detected capacity change from 0 to 512 [ 698.748251][T18238] loop5: detected capacity change from 0 to 512 [ 698.896086][T18236] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 698.908118][T18236] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 698.918465][T18236] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 698.930048][T18238] EXT4-fs (loop5): orphan cleanup on readonly fs [ 698.941245][T18238] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 698.952052][T18238] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 698.967192][T18238] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 698.974833][T18238] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 698.987192][T18238] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 698.995021][T18236] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 699.014640][T18236] EXT4-fs (loop2): get root inode failed [ 699.021371][T18236] EXT4-fs (loop2): mount failed 02:45:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a0900000000", 0x13, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 699.730901][T18260] loop2: detected capacity change from 0 to 512 [ 699.800447][T18260] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 699.813610][T18260] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 699.825366][T18260] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 699.849509][T18263] loop5: detected capacity change from 0 to 512 [ 699.995373][T18263] EXT4-fs (loop5): orphan cleanup on readonly fs [ 700.053879][T18263] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 700.064521][T18263] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 700.079995][T18263] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 700.087151][T18263] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 700.098651][T18263] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 700.175461][T18260] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 700.188301][T18260] EXT4-fs (loop2): get root inode failed [ 700.194703][T18260] EXT4-fs (loop2): mount failed 02:45:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a0900000000", 0x13, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 700.875617][T18272] loop2: detected capacity change from 0 to 512 [ 701.028044][T18272] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 701.041376][T18272] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 701.052125][T18272] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 701.173590][T18278] loop5: detected capacity change from 0 to 512 [ 701.453776][T18278] EXT4-fs (loop5): orphan cleanup on readonly fs [ 701.472839][T18278] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 701.483585][T18278] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 701.499360][T18278] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 701.506760][T18278] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 701.517952][T18278] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}}, 0x0) [ 701.556382][T18272] EXT4-fs error (device loop2): ext4_fill_super:4943: inode #2: comm syz-executor.2: iget: root inode unallocated [ 701.570167][T18272] EXT4-fs (loop2): get root inode failed [ 701.576486][T18272] EXT4-fs (loop2): mount failed 02:45:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000", 0x14, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:24 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) [ 702.327461][T18291] loop2: detected capacity change from 0 to 512 [ 702.397235][T18295] loop5: detected capacity change from 0 to 512 [ 702.438507][T18291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 702.446501][T18291] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 702.458805][T18291] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 702.477532][T18295] EXT4-fs (loop5): orphan cleanup on readonly fs [ 702.532874][T18295] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 702.543123][T18295] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 702.558241][T18295] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 702.565580][T18295] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 02:45:24 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002440)={&(0x7f0000000040)={0x1ec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "cbf5875ef421780e214f088ea8126bb1d15b2d6f0a3a409112285a58b88e7d7ef8f3f1876e74d5cf12153e447e1815e1c3816288056764958ac746e8a21d142ef2a68465d67ab9cd356b1d6e50130b122093837933e4db4ee97c6038371e093ea1278a0b1d64038b1418501b79bc0056c785c9b0cf41deecead20498af7ab5846341bb16eeb61197a25af4444bdb73f072cd22dc8d84cbc8370d9bdfb94bd4b31b4cb134a8f7e775e9c81561b7"}, @INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "598ba99ab23179d2683d36924fec73f06d060c63bb809d30b5535d13f6866bfbedbf9cc118437dc5a7dcbed527c75594da2deae8817291f1478dc3006e752ed1decfcd0840bd833938228bc88f82a2aef34e940b94e508a67a677c9e70c26fe99a95709ada947713e12df4e12ac4b934ecbbd2a732ce26791ac627023ce06f062bd849aeaaf71780baf53b1b3c384c8afbcc5117e36a811dc5912169b0ed2d4d683a21198772684a42956f9a90fba1ec9a35f49d1ce866ddbdb87ab659b06196427f3f8970c2908d02a34d78f5786c7408c2ba8cd7f7e2ed5c066271b743612870ae15cd27c4a10ffb9c4c62a6b384951d81742376c06cf91506a904bc6eaa87b0f0cc3e348d34489d6e0defa3a2e8f17cafebe9612feaa10a979c8539dcbe37331cb3282a6743eab3be3ff07fae1cee6093c610a88396997ce49cfbb48ad525661eabde36a483e171758227abaae68e0d7ae1eb2e76c242075cb1abddc40e1a33dca57beed2d796b9d3d2c5d100b6dc62941b6935a2fafd64f849935b9f9c204abe3a0a62712690d68a598f1d7062b7add37c6c6014b4ac2f91dea2ff286e7f9c6100605dd886572b745d16f00ee24fc6775c7021161b7ab5f366cac70005db2d2c471cf874a1f45b3bb16da8e11ed56c119254c7b540a9a2e466cfdb7d7dd3d89e4d81d2bf9aff028af809f51d19dce13ee480eb9514b51b0dbde0e520e669706b6af184aff78a0354a8d18fc88c0f8a3c04e58e5006f048f33692b9547129cf689abdedf9df65568efbdd414fcb7449cabe0e1d6eb21f5da3310c125b3ca0ba28cbd3ab883de26e2fffe9ace932cd0cdb0774f4975cac55db5f1242e1974019b714941da8482a803eee019750b47b213f3f60fb8b038de916e6c94b3cfba39bfe5533adb267a1d923ce705ab033774d34a6bb7df3626d1e9a8ac8044b4241867bdbbc29e44deccfbb5a6d25a1d662cd306d9446667f00bfa712cdd860f87ce4361137059929fca8aad5908f8034f297ffd37aeb1eedbcba823dee4e18e74aadb5c03d4cdf36fb9fde00a308280879a029b531ec54dd5f9123f4a9f6236b821603576cf253df564a8ba74edb860c819e650986d9ea8cb5437d0a0181f05ece8ec9c575a71fde0994956c2b0b25c87aec8af571b4cfe73b6bb9ffb321a2773b235e98e5d2bf7eadbca906d7bf97f059212e4c4293188153e91734bc585771e3bdd9193c0129e0f91b63cb02b42bd314ef04a076c4084953c21cc327dd5687e797d46869c83f76b74c28076578672b5c37610efdb7444ce485761f83fa30d59996f913dd6000d5d3e3a0c23672ebd950bb68670a33ec2755498167373133bc093e73ab5b661efc38d4926de4cd8e3c5a11ffa047d9ff968ef5f13d302f2ca17fb0d10936eb11afc44614115a5eb1cf951d2a222051008b668d7d81ffcb76a7a5daa08a130972ac08d3ee39e5b8d87231fa737379820dcd954ab1566f4ee06139ade68101fa7bdee7f0f4ebb3e2a0c6cbdf201e8d2ae8c981edfb6548a889f9a0183a0cc8314fcfeac664c2f5d03b7e597907df837ae67499bb7a89ebf7a60061c48c1fd0f18ba284a791e9c384e466fb1fc2bea88c071a28ed51f684562654a37c89c28d70a36da0e2befa0577a8cad1b256e285d77a5ed35a7e341ac1b408e5850234ba85f426ba148560cc6c2dfde2749e6d0875bdad2baf42b304170a2cf307cffc84b27b16a7933782fe87e6afdd497ed4a7e769ace64fba5bb920c932d75866334df941a170b1c46298e063a3eeb3578c86294e7fcd5ed1dd16a6a1f25510f9e74b059eed5b21e7eaa7a1a2d975d54734d07a89736bb0e6bb1245b05556680baa7912ab0a75401f41e5ef83d2f93880606d20e83799692ee239ccc9eb74809f5e6b6d60e4685fee9e6d70b10299cace6bf81c0eae600dba0db9183cbe955cd073d2d75a3dbe2463c8657204279fc6ce13f9ba7d40e502b2926bb4e3b2f5c5e53766c86a11aebe597c01aa1fa1412d72fb775d58ded859e2711ba7efe4ed2f4b3bb54455281b7d6156f4b1b20d2a14d244c8d207480fd24842b823dd10bbbb8eda6e3155b7c88e7a44682fea1e1bf8a746c08dfccfd9c3575f60540fce46b2b1e89ce75d20f80e5620d4204b266a396664eb91462527e6d0475dc8b6fc3ae8c735ed87fe21626e21074f0280f1adbe78031a372cf436dd891f1cda5dac17e981a39aef76c147fd1dca89a0810b665608528478a83900677d4f7112910283ca42b64c7ecfad7ead7b8941ea9b5f089ea2c0af6bf8c672e5e0ed6ae31856dc3955e2756bc917824e479fc6918b6eb809d049f5e0a5ef876f7bd21645d43dd48548d00d75996531daed65750c7aae9216e473624f92ebffaa23a2258aa3c0b97b3a3a2cc62c42a43d1cd7425626485df50fceb69bb9efe495074c4e9bb213d2b633a23653748befa1bb0cc79d8ad9307e7a3667764b7da41a84ff9b8e848d9ba5bb35b663fa9cb197bd5cd6091fe0809c9537bf1746317b774371e2882930ab6d6d21eae0b80039ad479db48ac69971d855cfaaaa3429d1a421261f5a2e74f97dbafdb6964ed3886e5f88a6028a3bf596bd298a049b5d100259d6ea53d35963cd8a554cc51a18ebc4c91630d4b67fb6db57c9e09bfd9d0c508a9230e3ddf16f0286eec64e5954e85ad0888e0dbc8e2c246d265cfede34c8680a5ae576e7e1d6c4b44a5ca1ea1b30a6b160c29918cd7655e6b5f0f6ad32ce5fbd26313ff7ee2f32744fe0c233fa4bed489012d68c3c8a88e732573b748c505f4ad5f07f14bca52e68e1a610d87814475d6cbf52c351daa1c92d5db3935a8da13427c1ab4f7f9f15b6e1fed287fa3cfe9785a9ba30c6bb0da032920e42d3f69309d904c5ed0d10cbd84a7c154061aedccd3823949653447db236f3f128c8d281f0ffc0919b8255ffb3c401ff62fdb84ce989550a794a6da0c37b8ab2652897dfcec0dcb6d0d1eda77e5a10e825936c67232df736793e92ca3175e792ea41ffbc0b27dee7d1f0677d104450dfbd600b2d58da95b1d58bafe806a126f24290317179ec63ecb9d477adc70815d3bf2632e63394fb67814e38df1738c204dbeb82adf62372539c9c97b90c3334c0a32ce04ae9ff11cd9e008dd2f323bad989a5e02cdab3742b2d6975e06a5c9d2053f6db98fe11677bedccc676785ec14b005fe88f1a73b2939098d72271d7a3f718c5357b07a9333b59e2968388183090bd86a460a0bc0f4c7ae942f548cdf8be50e610126b4b2f2b0e4b02209a8ee5350524f6b6291cd3d5a7690a7820e889687d17698e8eb79c4a6bcb00cf351a3b4c7d07183c4b8518da9814f028d57ade844f16bf553ca4c9fc97516e82de3e72561aa10bafd905b5216625ab00eb1b55a09323ee4659bfb1a58143c8bd4dbaef85098e052c537835c425ce086ae5bc3775c5cafe91f920efed27af6b34d7520cb030d0298bbd1ee7cec0e51cc23563fddd1dc6af4cc427f828d35278ee82edce315db07d6bdd19e2eebe0e0213c1b971142d7200b1b469c031b9598de307c65a7c551b5fe6f2e3874f5cc4917ac0d4ffac6630069af0dc0dcb6007eebdd862ce502ae725f3a238e92a2a89140ad268db648b0974edf1b3939c8805722928a0086d4aa1455be85bca44e8b4796b01409fbeae1a6c5422e86e9627820ad4a67e9b1dc30bb89db54f63ecca0ae0b6b034ecc247ba05afc2f44048a05422905a6788205745aac82e416ab709a71d46cc5a54b2b8c87dd9e8fc994c74aba35d36df0d7e6865a5de461a514d27d6427c814eba5182c1daeeb5a983ae0e926ecce5706f9d9d5daacc51d6d6c0be1456e98fe73a31449c384cb8b454600c53b04e381cf6e71e1d82ba73a20fca193bd08833d3cc8b9268ddd54672cab7796ef608b5e8abb4a45fe3799e17567a06300754eb1c991aa38701937aed4b099d95a3a8b283d9da97e8defdbd632fa968f8c0faf10c23727d0b320ef2b306872ab75b072e8d42640a6c354ea065dec105fee6dc85c6c15b632639446c4fd6b811ae2af2c9c28b9f1e96a986c8d47cff2efea47cac4975b4e2f886bf47e88bbdce608e69cfe1c5aa49ec1aa66cd240bb32e24a6b5d5226d907685815145e6d79020cc7b8d5b29059d7af7fa7f5bbd241b57f23c345c0478a95d2f33496e365bd1827a57896bc9b38589bfe2574cd831bc3febb4447c4f5beb35db2e6711bd36d122d973527013e54d2504c12516ed5bb86b8539c698ebd890b0d63dc7a2547900de2f81d432358d51a9795314e7c36f08682d8dcc5ec5d717fa3f1dd998d047e297165dfa7f7cdc9ebcc13beb261bc0befb958d80cb060f6a14635a224b58b03fce0e743e8bf3e8022fa760f28d5a2c5962ccb1dc19fa16fd60a1de9b86197981b92e1eda2e0431676c30c2c28f49e337ca228ebc6c96ef2d025309962d5a0dd071cbc7cde7a9aa09c08eb28f83012b546e36b60d2aa4551b3bdd90b59006ec9c0a40c720b66bf717a4dc34070dfa2552e7c77c9f874703e734303a1906452f9c3bf53c942e1de0a954e70a983f9cf2fc8f9de56ad827fe2f25e4ac119b4152470e68f15accfe54d045e26e128dcd2dd152f7363907bb3f61d5029340eeabb4a6629158a7b770c25efb1eca9f6cc726e66505e796cfe75db97f4864adad12a4583f44fbd4d3489fbce297042b4704ec3937f5af5c6e12912662418cc7306c2c95e9f0790f503977e132401a9453380a53ecc691a17b54bd0e900d0bd82f38c1c338c3581056c5445cfba83bb010fdb9dc922e7cc0a3cfbe69e7857861973fd3cc81f4bdb6e9fa405dbae22eefc927f08d5c717ae8901ec17abcf16dedcfeb83c6da2eb99ed140e50bde80c7a7138c173c7a7809138cdc12397b4912f904797b403586e418b84148ed51dcacb760d6381f8683cff13b896c0031b0db7910eb79e905663ad37722cc9cf0c05b6935a6f4707ba51ed68d2a9ecb55d733a3f9556d5e9dde7491520d58ba69cf81ef0e02c70c98aed5a4ac201a2f8e3e5838c5b898b960cc8f4360736ce76961afa185eedee443e39968242f33d598110e15e87de60f02ab582f60536fb62b2366a3b49c24981b23b711fb28ca38c77007bce8cc48d8736eaad3d6f8a65677f311e39b8e4129f0c69fa6d63ded3e9c0971d49058d040f2f028ec4d706e6b3b13609e8d57fedf520f8578bcf96454b105047a388957be8bc0b006dc7820f1222de3fb37fc44e6939bfac398f84e55adbd2c5db08d1dd06a99423727be338e7a4e0ba232e7a14562c44340afa77e4b405b72ca116ea6a9eb5e51a79ae5832c8ef4406e8a3c4fd81fbb635577dc4e087a8175eb7022330ec132c5d5428432339789de41ae2ea845160a7e0bd855f49cea93e898242daef301c532f3c29cd97f0688c687d5c8b518574627677b6ea282cc15734ae2e835dd4d353e666678ff79c7f6238be3164f490648d45feaafc544c8be64554f6932972963db7e92bd77c547821f74841fb2adde5b056abb24b225aeec90cef64fd6707eec9b62ff75eacfc59034b8e97c920846a24c970edea6c0bcb7eaa10ab9ede8dfdb1ed5a234eaa694dba967b242dd34852d722b5b9986c10e2df6133409bf7db9ebac5188dd553a0de97d3d4b7a59a00ed759f606d6282b13e2bf92d216b4234a207b3d4ae005292d6f3b4bf201fc032b6636e1c66c50301dfcd2005a0e032a06c94a44a66cd81c8942388977975ebd76ca5652a164bdbd8cba82e2bb296eeddbfa23265d21434669875b596e6c4d3"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "fe201d7734fa1ba7e8229ae9a47fb9353178ea8e1d768b1726c1bcb80f5344540fbaa1ce15064dd177ada265d335a2f144a9d62681675db35ff1887aeaced05f39fbae53d1cc9236a6dae65de181c2b874e8e26adc5241a541854cf92235b72d0d3b62d36cf8b94a39ec1acea6e84c1f4135b9f3d2f41f90c96fd09fe7c6da216ac988233fb1b50a32ff1592401fffeb4100191917523a0345982828f660be1437fbe0d962bcb4c9027c397766541534e7"}, @INET_DIAG_REQ_BYTECODE={0xd3d, 0x1, "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"}]}, 0x1ec4}}, 0x0) [ 702.580353][T18295] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 704.881855][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.890232][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.713492][T18237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.474965][T18237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.773565][T18237] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.784297][T18237] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.795442][T18237] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.807372][T18237] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.529657][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.540424][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.553323][T18244] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.646201][T18243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 725.659941][T18243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.675522][T18243] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.697770][T18243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 725.718628][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.768630][T18252] bond0: (slave bridge64): Enslaving as an active interface with an up link 02:45:49 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) fstat(r0, &(0x7f00000027c0)) 02:45:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000", 0x14, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:49 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)=@secondary) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2b, 0x6, 0x81, 0x6, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080)}, 0x8020, 0x1, 0x4, 0x8, 0x0, 0xbf9, 0x3, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x2, r1, 0x0) pipe(&(0x7f0000000100)) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000001000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 727.519674][T18336] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.531054][T18336] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.542507][T18336] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.582064][T18337] loop2: detected capacity change from 0 to 512 [ 727.636644][T18337] EXT4-fs (loop2): orphan cleanup on readonly fs [ 727.636732][T18337] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 727.636903][T18337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 727.659696][T18340] loop5: detected capacity change from 0 to 512 [ 727.705596][T18340] EXT4-fs (loop5): orphan cleanup on readonly fs [ 727.708960][T18340] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 727.735495][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 727.741966][T18340] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 727.742110][T18340] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 727.742185][T18340] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 727.742309][T18340] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 727.903104][T18352] bond0: (slave bridge65): Enslaving as an active interface with an up link 02:45:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000", 0x14, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000001100000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000540)={0x0, {0x0, 0x0, 0x9, 0x0, 0x100}}) 02:45:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000001200000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 728.566150][T18363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 728.566244][T18363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 728.712470][T18367] loop2: detected capacity change from 0 to 512 [ 728.713213][T18366] loop5: detected capacity change from 0 to 512 [ 728.776743][T18366] EXT4-fs (loop5): orphan cleanup on readonly fs [ 728.778028][T18367] EXT4-fs (loop2): orphan cleanup on readonly fs [ 728.778118][T18367] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 02:45:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 728.778278][T18367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 728.778366][T18366] Quota error (device loop5): v2_read_file_info: Free block number too big (0 >= 0). [ 728.778487][T18366] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 02:45:51 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000007b40), 0x105c40, 0x0) [ 728.778628][T18366] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 728.778816][T18366] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 728.779032][T18366] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 729.416582][T18381] bond0: (slave bridge66): Enslaving as an active interface with an up link [ 729.598793][T18388] loop2: detected capacity change from 0 to 512 [ 729.715533][T18391] loop5: detected capacity change from 0 to 512 [ 729.740690][T18388] EXT4-fs (loop2): orphan cleanup on readonly fs [ 729.740774][T18388] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 729.740932][T18388] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 729.823331][T18391] EXT4-fs (loop5): orphan cleanup on readonly fs [ 729.828323][T18391] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 729.828464][T18391] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 729.828538][T18391] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 729.828690][T18391] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/37) 02:45:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000001c00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0xa\x00\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000071, 0x68001) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000280)) 02:45:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 731.015085][T18410] __nla_validate_parse: 5 callbacks suppressed [ 731.015161][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.031345][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.043596][T18410] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.114002][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.146576][T18413] loop5: detected capacity change from 0 to 512 [ 731.173220][T18423] bridge18: port 1(syz_tun) entered blocking state [ 731.180424][T18423] bridge18: port 1(syz_tun) entered disabled state [ 731.190720][T18423] device syz_tun entered promiscuous mode [ 731.213548][T18417] loop2: detected capacity change from 0 to 512 [ 731.233896][T18412] bond0: (slave bridge67): Enslaving as an active interface with an up link [ 731.277684][T18413] EXT4-fs (loop5): orphan cleanup on readonly fs [ 731.337193][T18417] EXT4-fs (loop2): orphan cleanup on readonly fs [ 731.346215][T18417] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 731.347328][T18413] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 731.357781][T18417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000002000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 731.372263][T18413] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 731.390422][T18413] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 731.401177][T18413] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:53 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x1, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:45:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 731.840181][T18431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.850297][T18431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.861587][T18431] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:54 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) perf_event_open(&(0x7f00000013c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff00d) 02:45:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:54 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 732.270686][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000002500000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 732.316012][T18439] bond0: (slave bridge68): Enslaving as an active interface with an up link [ 732.528475][ T35] audit: type=1804 audit(1620528354.862:13): pid=18444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir468080843/syzkaller.nzTIqg/421/bus" dev="sda1" ino=14126 res=1 errno=0 [ 732.596144][T18447] loop5: detected capacity change from 0 to 512 [ 732.733928][T18451] loop2: detected capacity change from 0 to 512 [ 732.769081][T18447] EXT4-fs (loop5): orphan cleanup on readonly fs 02:45:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 732.839238][T18447] EXT4-fs warning (device loop5): ext4_enable_quotas:6445: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 732.854806][T18447] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 732.862847][T18447] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 732.875045][T18447] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 732.896401][T18451] EXT4-fs (loop2): orphan cleanup on readonly fs [ 732.903405][T18451] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 732.912803][ T35] audit: type=1804 audit(1620528355.242:14): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir468080843/syzkaller.nzTIqg/421/bus" dev="sda1" ino=14126 res=1 errno=0 [ 732.914389][T18451] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 733.079728][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.094305][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:55 executing program 4: rt_sigtimedwait(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) [ 733.115473][ T35] audit: type=1800 audit(1620528355.312:15): pid=18444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=14126 res=0 errno=0 [ 733.139564][ T35] audit: type=1800 audit(1620528355.322:16): pid=18456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=14126 res=0 errno=0 02:45:55 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x10000000) 02:45:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000044000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 733.460843][T18463] bond0: (slave bridge69): Enslaving as an active interface with an up link 02:45:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x40000000007) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 733.917119][T18477] loop5: detected capacity change from 0 to 512 [ 733.976574][T18477] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 733.986592][T18477] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 733.996688][T18477] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 734.015534][T18477] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 734.028226][T18477] EXT4-fs (loop5): get root inode failed [ 734.034350][T18477] EXT4-fs (loop5): mount failed 02:45:56 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x0, 0x0) 02:45:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000004800000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 734.214088][T18484] loop2: detected capacity change from 0 to 512 02:45:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 734.378831][T18484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 734.386046][T18484] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 734.397547][T18484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 734.436345][T18488] bond0: (slave bridge70): Enslaving as an active interface with an up link 02:45:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:57 executing program 4: userfaultfd(0x1739700d9f92c25) 02:45:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000004c00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:57 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18}, 0x18) [ 734.970180][T18504] loop5: detected capacity change from 0 to 512 [ 735.065559][T18504] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 735.077139][T18504] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 735.087276][T18504] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 735.301325][T18504] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 735.314477][T18504] EXT4-fs (loop5): get root inode failed [ 735.320564][T18504] EXT4-fs (loop5): mount failed [ 735.497658][T18519] loop2: detected capacity change from 0 to 512 [ 735.709162][T18519] EXT4-fs (loop2): orphan cleanup on readonly fs [ 735.717991][T18519] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 735.730607][T18519] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:45:58 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:45:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:58 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x4) 02:45:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 736.358440][T18536] loop5: detected capacity change from 0 to 512 [ 736.455692][T18536] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 736.468717][T18536] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 736.479136][T18536] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:45:59 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 736.640833][T18536] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 736.655609][T18536] EXT4-fs (loop5): get root inode failed [ 736.668521][T18536] EXT4-fs (loop5): mount failed 02:45:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x42, 0x105}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/238, 0xf0}], 0x2, 0x0, 0x300, 0xac040000}}], 0x40000000000002e, 0x0, 0x0) [ 737.019339][T18523] bond0: (slave bridge71): Enslaving as an active interface with an up link [ 737.030147][T18521] __nla_validate_parse: 11 callbacks suppressed [ 737.030214][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.049136][T18521] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.059473][T18521] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:45:59 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:45:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:45:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000006000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:45:59 executing program 4: pselect6(0x40, &(0x7f0000000240)={0x3}, &(0x7f0000000280)={0x1}, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) [ 737.567866][T18554] loop2: detected capacity change from 0 to 512 [ 737.630365][T18558] loop5: detected capacity change from 0 to 512 [ 737.700578][T18554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 737.708536][T18554] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 737.722428][T18554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 737.729083][T18558] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 737.749247][T18558] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 737.760805][T18558] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:46:00 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 737.907118][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.966432][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:46:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000586500000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 738.024827][T18558] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 738.030679][T18574] bond0: (slave bridge72): Enslaving as an active interface with an up link [ 738.038272][T18558] EXT4-fs (loop5): get root inode failed [ 738.054159][T18558] EXT4-fs (loop5): mount failed 02:46:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 02:46:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 738.565990][T18582] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.576107][T18582] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.586259][T18582] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:46:01 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x4) [ 738.753597][T18586] loop2: detected capacity change from 0 to 512 [ 738.862827][T18586] EXT4-fs (loop2): orphan cleanup on readonly fs [ 738.870125][T18586] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 738.882636][T18586] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 738.952019][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:46:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000006800000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 739.016675][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 739.033080][T18594] loop5: detected capacity change from 0 to 512 02:46:01 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x40305828, 0x0) 02:46:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 739.189322][T18594] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 739.199761][T18594] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 739.211274][T18594] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 739.379322][T18594] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 739.393042][T18594] EXT4-fs (loop5): get root inode failed [ 739.399187][T18594] EXT4-fs (loop5): mount failed 02:46:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:02 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x4) 02:46:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {0x0, 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:02 executing program 4: alarm(0x4) alarm(0x1a3b) 02:46:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000006c00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 739.833178][T18613] loop2: detected capacity change from 0 to 512 [ 739.908063][T18613] EXT4-fs (loop2): orphan cleanup on readonly fs [ 739.915211][T18613] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 739.926365][T18613] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 740.465725][T18630] loop5: detected capacity change from 0 to 512 [ 740.619189][T18623] bond0: (slave bridge74): Enslaving as an active interface with an up link [ 740.651414][T18630] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 740.667369][T18630] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 740.679733][T18630] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:46:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000007400000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:03 executing program 4: alarm(0x4) alarm(0x1a3b) 02:46:03 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x4) [ 740.886381][T18630] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 740.900998][T18630] EXT4-fs (loop5): get root inode failed [ 740.907590][T18630] EXT4-fs (loop5): mount failed 02:46:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 741.332669][T18642] loop2: detected capacity change from 0 to 512 [ 741.464391][T18642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 741.471250][T18642] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 741.485706][T18642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 741.516945][T18651] loop5: detected capacity change from 0 to 512 [ 741.556426][T18651] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:46:03 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 741.567749][T18651] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 741.579570][T18651] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 741.650649][T18655] bond0: (slave bridge75): Enslaving as an active interface with an up link [ 741.763154][T18651] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 741.776243][T18651] EXT4-fs (loop5): get root inode failed [ 741.783018][T18651] EXT4-fs (loop5): mount failed 02:46:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:04 executing program 4: alarm(0x4) alarm(0x1a3b) 02:46:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000007a00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 742.177960][T18664] __nla_validate_parse: 13 callbacks suppressed [ 742.178029][T18664] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 742.194602][T18664] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 742.206396][T18664] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:46:04 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 742.429337][T18670] loop2: detected capacity change from 0 to 512 [ 742.436232][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 742.491661][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 742.540030][T18677] bond0: (slave bridge76): Enslaving as an active interface with an up link 02:46:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000008100000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:05 executing program 4: pipe2(&(0x7f0000000f80), 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) [ 742.616809][T18680] loop5: detected capacity change from 0 to 512 [ 742.661307][T18670] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:05 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 742.734301][T18680] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 742.745373][T18680] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 742.756273][T18680] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 742.797686][T18680] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 742.812212][T18680] EXT4-fs (loop5): get root inode failed [ 742.818500][T18680] EXT4-fs (loop5): mount failed 02:46:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 743.175083][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.185104][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.195254][T18690] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:46:05 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:05 executing program 0: setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001ffffff8100000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 743.691224][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.742212][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.778823][T18705] loop2: detected capacity change from 0 to 512 [ 743.843704][T18699] bond0: (slave bridge77): Enslaving as an active interface with an up link [ 743.935196][T18709] loop5: detected capacity change from 0 to 512 [ 743.973154][T18705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 744.001787][T11396] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 744.125342][T18709] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 744.136469][T18709] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 744.149920][T18709] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 744.251719][T11396] usb 5-1: Using ep0 maxpacket: 8 02:46:06 executing program 0: setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 744.372949][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.384783][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.395175][T11396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.408529][T11396] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 744.418066][T11396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:46:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 744.558453][T18709] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 744.572134][T18709] EXT4-fs (loop5): get root inode failed [ 744.578376][T18709] EXT4-fs (loop5): mount failed 02:46:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000478800000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 744.814350][T11396] usb 5-1: config 0 descriptor?? 02:46:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 745.073499][T18728] bond0: (slave bridge78): Enslaving as an active interface with an up link 02:46:07 executing program 0: setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 745.306039][T11396] hid-generic 0003:046D:4011.0002: collection stack underflow [ 745.314244][T11396] hid-generic 0003:046D:4011.0002: item 0 2 0 12 parsing failed 02:46:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 745.482390][T11396] hid-generic: probe of 0003:046D:4011.0002 failed with error -22 [ 745.532309][T18738] loop2: detected capacity change from 0 to 512 [ 745.582321][T11396] usb 5-1: USB disconnect, device number 10 [ 745.762432][T18738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000488800000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 745.802968][T18747] loop5: detected capacity change from 0 to 512 [ 745.880555][T18747] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 745.895978][T18747] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 745.909105][T18747] EXT4-fs (loop5): get root inode failed [ 745.915223][T18747] EXT4-fs (loop5): mount failed 02:46:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 746.301855][T11396] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 746.572177][T11396] usb 5-1: Using ep0 maxpacket: 8 [ 746.622337][T18765] bond0: (slave bridge79): Enslaving as an active interface with an up link [ 746.728577][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.741217][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.752650][T11396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.767399][T11396] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 746.777409][T11396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.088851][T18768] loop2: detected capacity change from 0 to 512 [ 747.227548][T11396] usb 5-1: config 0 descriptor?? [ 747.375870][T18768] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 747.411912][T11396] usb 5-1: can't set config #0, error -71 [ 747.423802][T11396] usb 5-1: USB disconnect, device number 11 02:46:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:09 executing program 0: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001ffffa88800000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:09 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) [ 747.570746][T18779] __nla_validate_parse: 13 callbacks suppressed [ 747.570901][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.587416][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.597297][T18779] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.904475][T18782] loop5: detected capacity change from 0 to 512 [ 748.065117][T18782] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:46:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 748.133677][T18782] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 748.150351][T18782] EXT4-fs (loop5): get root inode failed [ 748.156802][T18782] EXT4-fs (loop5): mount failed [ 748.225414][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:46:10 executing program 0: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001ffffff9e00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 748.284871][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 748.353450][T18794] bond0: (slave bridge80): Enslaving as an active interface with an up link [ 748.541844][T11396] usb 5-1: new high-speed USB device number 12 using dummy_hcd 02:46:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 748.766557][T18802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.776686][T18802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.786783][T18802] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.803286][T11396] usb 5-1: Using ep0 maxpacket: 8 [ 748.864316][T18804] loop2: detected capacity change from 0 to 512 [ 748.901055][T18804] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 748.962974][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.974814][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.985562][T11396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.999460][T11396] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 749.009358][T11396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:46:11 executing program 0: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 749.343994][T11396] usb 5-1: config 0 descriptor?? [ 749.421186][T18814] loop5: detected capacity change from 0 to 512 [ 749.432897][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:46:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000bc000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 749.609309][T18814] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 749.647241][T18819] bond0: (slave bridge81): Enslaving as an active interface with an up link [ 749.787831][T18814] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 749.801142][T18814] EXT4-fs (loop5): get root inode failed [ 749.805283][T18823] loop2: detected capacity change from 0 to 512 [ 749.807384][T18814] EXT4-fs (loop5): mount failed [ 749.846560][T11396] hid-generic 0003:046D:4011.0003: collection stack underflow [ 749.857169][T11396] hid-generic 0003:046D:4011.0003: item 0 2 0 12 parsing failed 02:46:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 750.019620][T18823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 750.135910][T11396] hid-generic: probe of 0003:046D:4011.0003 failed with error -22 [ 750.154419][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 750.199483][T18834] bond0: (slave bridge82): Enslaving as an active interface with an up link 02:46:12 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 750.295552][T11396] usb 5-1: USB disconnect, device number 12 02:46:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000bc100000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:13 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 751.204495][T18857] loop5: detected capacity change from 0 to 512 [ 751.217597][T18856] loop2: detected capacity change from 0 to 512 [ 751.286496][T18865] bond0: (slave bridge83): Enslaving as an active interface with an up link [ 751.314294][T18857] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 751.389455][T18856] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 751.432297][T18857] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 751.445172][T18857] EXT4-fs (loop5): get root inode failed [ 751.451150][T18857] EXT4-fs (loop5): mount failed 02:46:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000bc200000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 751.603046][T18319] usb 5-1: new high-speed USB device number 13 using dummy_hcd 02:46:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 751.842016][T18319] usb 5-1: Using ep0 maxpacket: 8 02:46:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 751.962858][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.974610][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.984998][T18319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.998779][T18319] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:46:14 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 752.009166][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:46:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000cb00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 752.154888][T18878] bond0: (slave bridge84): Enslaving as an active interface with an up link [ 752.223856][T18319] usb 5-1: config 0 descriptor?? [ 752.353523][T18885] loop5: detected capacity change from 0 to 512 [ 752.429891][T18890] loop2: detected capacity change from 0 to 512 02:46:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 752.498018][T18885] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 752.606691][T18885] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 752.624177][T18885] EXT4-fs (loop5): get root inode failed [ 752.631062][T18885] EXT4-fs (loop5): mount failed [ 752.653340][T18890] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 752.707232][T18319] hid-generic 0003:046D:4011.0004: collection stack underflow [ 752.716807][T18319] hid-generic 0003:046D:4011.0004: item 0 2 0 12 parsing failed [ 752.762711][T18319] hid-generic: probe of 0003:046D:4011.0004 failed with error -22 [ 752.932568][T18319] usb 5-1: USB disconnect, device number 13 [ 753.183719][T18910] __nla_validate_parse: 14 callbacks suppressed [ 753.183781][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 753.230952][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 753.273651][T18910] bond0: (slave bridge85): Enslaving as an active interface with an up link 02:46:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001fffffff000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:15 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 753.737708][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 753.798079][T18922] loop2: detected capacity change from 0 to 512 [ 753.806797][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 753.830890][T18925] loop5: detected capacity change from 0 to 512 [ 753.891025][T18933] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.904841][T18933] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.916180][T18933] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.099648][T18922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 754.192242][T18925] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 754.245220][T18925] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 754.257673][T18925] EXT4-fs (loop5): get root inode failed [ 754.263974][T18925] EXT4-fs (loop5): mount failed 02:46:16 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000188a8ffff00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402c", 0x5, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 754.735063][T10850] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 754.815505][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 754.882869][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 754.908443][T18953] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:46:17 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 754.937065][T18949] bond0: (slave bridge87): Enslaving as an active interface with an up link [ 754.982889][T10850] usb 5-1: Using ep0 maxpacket: 8 [ 755.026394][T18956] loop5: detected capacity change from 0 to 512 [ 755.082151][T18959] loop2: detected capacity change from 0 to 512 [ 755.102691][T10850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.114521][T10850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.125446][T10850] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.139240][T10850] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 755.149133][T10850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.161956][T10850] usb 5-1: config 0 descriptor?? [ 755.262746][T18956] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 755.326247][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.333063][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.366007][T18959] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 755.383069][T18956] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 755.396576][T18956] EXT4-fs (loop5): get root inode failed [ 755.402847][T18956] EXT4-fs (loop5): mount failed [ 755.646399][T10850] hid-generic 0003:046D:4011.0005: collection stack underflow [ 755.654492][T10850] hid-generic 0003:046D:4011.0005: item 0 2 0 12 parsing failed [ 755.711019][T10850] hid-generic: probe of 0003:046D:4011.0005 failed with error -22 [ 755.859734][T10850] usb 5-1: USB disconnect, device number 14 02:46:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:46:18 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100e0ffff00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402c", 0x5, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 756.506867][T18987] loop2: detected capacity change from 0 to 512 [ 756.609747][T18994] bond0: (slave bridge88): Enslaving as an active interface with an up link [ 756.655803][T18987] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 756.715553][T18998] loop5: detected capacity change from 0 to 512 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000017fffffff00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 756.797433][T18998] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 02:46:19 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) [ 756.921928][T18998] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 756.935532][T18998] EXT4-fs (loop5): get root inode failed [ 756.944911][T18998] EXT4-fs (loop5): mount failed 02:46:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402c", 0x5, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 757.381831][T18319] usb 5-1: new high-speed USB device number 15 using dummy_hcd 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000181ffffff00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 757.477306][T19015] bond0: (slave bridge89): Enslaving as an active interface with an up link [ 757.631928][T18319] usb 5-1: Using ep0 maxpacket: 8 [ 757.733621][T19019] loop2: detected capacity change from 0 to 512 [ 757.752689][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.767701][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.778932][T18319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.793101][T18319] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 757.803046][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.817083][T18319] usb 5-1: config 0 descriptor?? [ 757.845801][T19019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 758.033524][T19027] loop5: detected capacity change from 0 to 512 [ 758.167897][T19027] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 758.243748][T19033] __nla_validate_parse: 10 callbacks suppressed [ 758.243817][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.261820][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.275642][T19033] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.303949][T19027] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 758.317202][T19027] EXT4-fs (loop5): get root inode failed [ 758.323794][T19027] EXT4-fs (loop5): mount failed [ 758.356368][T18319] usbhid 5-1:0.0: can't add hid device: -71 [ 758.363150][T18319] usbhid: probe of 5-1:0.0 failed with error -71 [ 758.396695][T18319] usb 5-1: USB disconnect, device number 15 02:46:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:46:21 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x4) 02:46:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca867", 0x7, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000019effffff00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 758.987759][T19051] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.999483][T19051] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 759.009464][T19051] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 759.044670][T19053] loop2: detected capacity change from 0 to 512 [ 759.070427][T19056] loop5: detected capacity change from 0 to 512 [ 759.102818][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.151840][T19053] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:21 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ftruncate(r0, 0x4) [ 759.199590][T19066] bond0: (slave bridge90): Enslaving as an active interface with an up link [ 759.229162][T19056] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 759.240257][T19056] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 759.250724][T19056] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 759.331777][ T4686] usb 5-1: new high-speed USB device number 16 using dummy_hcd 02:46:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca867", 0x7, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 759.434660][T19056] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 759.447538][T19056] EXT4-fs (loop5): get root inode failed [ 759.453884][T19056] EXT4-fs (loop5): mount failed 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001f0ffffff00000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 759.583220][ T4686] usb 5-1: Using ep0 maxpacket: 8 [ 759.702888][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.716968][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.728145][ T4686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.741630][ T4686] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:46:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 759.751111][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:46:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 759.938444][ T4686] usb 5-1: config 0 descriptor?? 02:46:22 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ftruncate(r0, 0x4) [ 760.056845][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 760.095054][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.107676][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.150603][T19083] bond0: (slave bridge91): Enslaving as an active interface with an up link [ 760.176064][T19084] loop2: detected capacity change from 0 to 512 [ 760.274947][T19084] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 760.492458][ T4686] usbhid 5-1:0.0: can't add hid device: -71 [ 760.500660][ T4686] usbhid: probe of 5-1:0.0 failed with error -71 [ 760.598792][ T4686] usb 5-1: USB disconnect, device number 16 [ 760.689991][T19095] loop5: detected capacity change from 0 to 512 [ 760.816831][T19095] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 760.829855][T19095] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 760.842582][T19095] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 760.859331][T19095] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 760.873393][T19095] EXT4-fs (loop5): get root inode failed [ 760.879494][T19095] EXT4-fs (loop5): mount failed 02:46:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:46:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca867", 0x7, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000034000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:23 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ftruncate(r0, 0x4) 02:46:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 761.356815][T19107] bond0: (slave bridge92): Enslaving as an active interface with an up link 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000000ffffe000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 761.476111][T19114] loop2: detected capacity change from 0 to 512 [ 761.538121][T19114] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 761.571760][T19121] loop5: detected capacity change from 0 to 512 [ 761.590953][T19121] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 761.602116][T19121] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 761.612701][T19121] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 761.626579][T19121] EXT4-fs error (device loop5): ext4_fill_super:4943: inode #2: comm syz-executor.5: iget: root inode unallocated [ 761.641828][T19121] EXT4-fs (loop5): get root inode failed [ 761.647771][T19121] EXT4-fs (loop5): mount failed 02:46:24 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(0xffffffffffffffff, 0x4) 02:46:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b", 0x8, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 761.762379][ T3663] usb 5-1: new high-speed USB device number 17 using dummy_hcd 02:46:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 762.011885][ T3663] usb 5-1: Using ep0 maxpacket: 8 02:46:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 762.146052][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.157778][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.170126][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.184199][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000001000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 762.193968][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.302085][T19135] loop2: detected capacity change from 0 to 512 [ 762.326291][ T3663] usb 5-1: config 0 descriptor?? [ 762.364386][T19134] bond0: (slave bridge93): Enslaving as an active interface with an up link [ 762.433023][T19135] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 762.521237][T19145] loop5: detected capacity change from 0 to 512 [ 762.544731][T19145] EXT4-fs (loop5): orphan cleanup on readonly fs [ 762.551829][T19145] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 762.562648][T19145] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 762.873040][ T3663] usbhid 5-1:0.0: can't add hid device: -71 [ 762.879571][ T3663] usbhid: probe of 5-1:0.0 failed with error -71 [ 762.957645][ T3663] usb 5-1: USB disconnect, device number 17 02:46:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:25 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(0xffffffffffffffff, 0x4) 02:46:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b", 0x8, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000002000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 763.501947][T19168] __nla_validate_parse: 12 callbacks suppressed [ 763.502015][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 763.536138][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 763.546784][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 763.557153][T19170] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 763.565485][T19173] loop5: detected capacity change from 0 to 512 [ 763.587395][T19174] bond0: (slave bridge94): Enslaving as an active interface with an up link [ 763.729265][T19177] loop2: detected capacity change from 0 to 512 [ 763.910457][T19173] EXT4-fs (loop5): orphan cleanup on readonly fs [ 763.917290][T19173] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 763.928472][T19173] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000003000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 764.032993][T19177] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:26 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(0xffffffffffffffff, 0x4) 02:46:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b", 0x8, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 764.523822][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.534789][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.546793][T19191] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.561894][ T4686] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 764.823044][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 764.852476][ T4686] usb 5-1: Using ep0 maxpacket: 8 02:46:27 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x0) [ 764.899882][T19199] bond0: (slave bridge95): Enslaving as an active interface with an up link [ 764.993576][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.006482][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.018046][ T4686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.033940][ T4686] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 765.044007][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.149673][T19203] loop5: detected capacity change from 0 to 512 [ 765.208862][ T4686] usb 5-1: config 0 descriptor?? [ 765.233549][T19205] loop2: detected capacity change from 0 to 512 [ 765.269820][T19203] EXT4-fs (loop5): orphan cleanup on readonly fs [ 765.277257][T19203] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 765.290418][T19203] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 765.400533][T19205] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 765.742913][ T4686] usbhid 5-1:0.0: can't add hid device: -71 [ 765.752586][ T4686] usbhid: probe of 5-1:0.0 failed with error -71 [ 765.818113][ T4686] usb 5-1: USB disconnect, device number 18 02:46:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000004000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:28 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x0) 02:46:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 766.373704][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 766.402179][T19231] loop5: detected capacity change from 0 to 512 [ 766.411846][T19233] loop2: detected capacity change from 0 to 512 [ 766.438529][T19239] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.477562][T19231] EXT4-fs (loop5): orphan cleanup on readonly fs [ 766.484450][T19231] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 766.495249][T19231] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 766.523682][T19241] bond0: (slave bridge96): Enslaving as an active interface with an up link [ 766.606466][T19233] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:29 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') ftruncate(r0, 0x0) 02:46:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000005000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 767.003648][ T4686] usb 5-1: new high-speed USB device number 19 using dummy_hcd 02:46:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 767.251798][ T4686] usb 5-1: Using ep0 maxpacket: 8 [ 767.360632][T19255] bond0: (slave bridge97): Enslaving as an active interface with an up link [ 767.395198][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.408303][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.418980][ T4686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.434940][ T4686] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 767.444533][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.510914][T19263] loop2: detected capacity change from 0 to 512 [ 767.541250][T19264] loop5: detected capacity change from 0 to 512 [ 767.684658][T19263] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 767.836054][T19264] EXT4-fs (loop5): orphan cleanup on readonly fs [ 767.843558][T19264] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 767.857655][T19264] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 767.859775][ T4686] usb 5-1: config 0 descriptor?? 02:46:30 executing program 0: syz_usb_connect(0x2, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xdc, 0xaa, 0xf0, 0x10, 0x499, 0x1027, 0x1950, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe3, 0x8, 0x24, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x81, 0x2, 0x20}}]}}]}}]}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 768.413738][ T4686] usbhid 5-1:0.0: can't add hid device: -71 [ 768.421219][ T4686] usbhid: probe of 5-1:0.0 failed with error -71 [ 768.461732][ T4686] usb 5-1: USB disconnect, device number 19 [ 768.483125][ T18] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 768.872140][ T18] usb 1-1: New USB device found, idVendor=0499, idProduct=1027, bcdDevice=19.50 [ 768.883494][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:46:31 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000006000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {0x0, 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 768.961588][ T18] usb 1-1: config 0 descriptor?? [ 769.180768][T19306] __nla_validate_parse: 7 callbacks suppressed [ 769.180835][T19306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.198997][T19306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.210747][T19306] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.226425][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 769.245718][T19303] loop2: detected capacity change from 0 to 512 [ 769.273534][T19307] loop5: detected capacity change from 0 to 512 [ 769.294256][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 769.338097][T19307] EXT4-fs (loop5): orphan cleanup on readonly fs [ 769.341240][T19309] bond0: (slave bridge98): Enslaving as an active interface with an up link [ 769.345941][T19307] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 769.370779][T19307] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 769.502356][T19303] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 769.582113][ T3663] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 769.604980][T10850] usb 1-1: USB disconnect, device number 21 02:46:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000007000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 769.821721][ T3663] usb 5-1: Using ep0 maxpacket: 8 [ 769.966340][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.978681][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.986678][T19341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 769.990569][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.016046][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 770.027713][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.052370][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 770.112315][T19347] bond0: (slave bridge99): Enslaving as an active interface with an up link [ 770.146146][T19349] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 770.158693][T19349] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 770.170749][T19349] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:46:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 770.379404][ T3663] usb 5-1: config 0 descriptor?? [ 770.392061][T10850] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 770.498578][T19354] loop5: detected capacity change from 0 to 512 [ 770.506614][T19355] loop2: detected capacity change from 0 to 512 [ 770.528142][T19355] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000008000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 770.554036][T19354] EXT4-fs (loop5): orphan cleanup on readonly fs [ 770.563089][T19354] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 770.575053][T19354] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 770.763304][T10850] usb 1-1: New USB device found, idVendor=0499, idProduct=1027, bcdDevice=19.50 [ 770.776333][T10850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.883773][T10850] usb 1-1: config 0 descriptor?? [ 770.944736][ T3663] usbhid 5-1:0.0: can't add hid device: -71 [ 770.951324][ T3663] usbhid: probe of 5-1:0.0 failed with error -71 [ 771.027124][ T3663] usb 5-1: USB disconnect, device number 20 [ 771.129323][T10850] usb 1-1: USB disconnect, device number 22 [ 771.199721][T19389] bond0: (slave bridge100): Enslaving as an active interface with an up link 02:46:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000011780)={0x16, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x40) 02:46:33 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000009000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 771.741001][T19409] loop5: detected capacity change from 0 to 512 [ 771.805271][T19414] bond0: (slave bridge101): Enslaving as an active interface with an up link 02:46:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 771.857217][T19412] loop2: detected capacity change from 0 to 512 [ 771.896933][T19409] EXT4-fs (loop5): orphan cleanup on readonly fs [ 771.904139][T19409] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 771.915985][T19409] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {0x0}, {&(0x7f0000001880)="a6", 0x1}], 0x3, 0x0, 0x803e0000}, 0x0) [ 772.026360][T19412] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000000a000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:34 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000057c0)={&(0x7f0000005780)='./file0/../file0\x00'}, 0x10) [ 772.532595][T19432] bond0: (slave bridge102): Enslaving as an active interface with an up link 02:46:35 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) [ 772.780677][T19435] loop5: detected capacity change from 0 to 512 02:46:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000000b000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/18, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 772.901166][T19440] loop2: detected capacity change from 0 to 512 [ 772.941862][T19435] EXT4-fs (loop5): orphan cleanup on readonly fs [ 772.950343][T19435] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 772.962095][T19435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 773.096335][T19440] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:35 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)='O', 0x1}, {&(0x7f0000000440)='B', 0x1}, {&(0x7f0000000740)="f861e36c4b272c3a39716d63b3099ddb6b7b81461d8516dba459bc08512ec6ceae8c35bb0067590e440786ee0e6f9997cfa7d8227670c12d387cdc12f3608c57c28bce5586aa3d9a9ef4499ad988aababa88ec173a2c7fd78d42486c97aee0c66588136cf5492c0d7431d461082d90b12fd282d9f2160e4f734761843f510518255b86d54d273b39be253e1750fa801d196f7cebd434ee8f3481859df66444a84ba300745acef0ee20dbb50dbe13aec5cbf988c9d7c6ed9aa3672e18789c5afc5d37b6e619f52ba12df662e434d56e60e14ee76079f0b44d6cea290b15bbabd5585d6a8d4514b5a93fd49964278f76db10c16fed14c5bb859fdf22a9c8c5f1d318ddf88df3c7fa0ce1afbfa0b46c09a4d6dd300581e55dbd9188cfab6730212a0234f47ba7a3bfa7762c3114c7b23a0bb8930b853279b98c16e03359349fb4ecd1310fb50346049163b36fcd545b01fac8e39b15c614d74e50b5821d3c813c339aa17098760f159d72295a9d974b1b520850cba63ae430bcc5008154450e58894e21a1a7fc95f4a6951661930d50be6e2cc2f864898c654bc5fc2c8b2f0e9bc75931966dfb7f4a21c0cf4b0caa45a45463a8a19d7b23d1b389a96689b7c8211429096f8d8c5dd80477b0f1c762c99a87fd9ec3700ad7550533603b015937cf6af6567cc8742af98a71ac686b57f9bbf180e3ef328f4ac0efbc1f6c253ae5865266ec1f228de84d778e4b330f69fc3ebf2bd299011e2b8f93ae6c3c45340e821c7a67ca32b62bab4fdd43bf4418e45e296718a86883128c314a9ffd964daa15d709c2417224dc05a3a4e078b31f03ac7016f293ba8240656661633bc82e4735f95cab4fe63df34f10bfbe183527da5ca8af1be78e1d8debb9f72f32abcc5e19cade3d0bcb0e93f374c34bee90c4dea5273126441818bec22c23712955f49aa781fafb187e0ec72603400f970514d9c8564f4549d0997b57d863083be2ba8b0b0adc771596e7a73046e55e0b6fb6487a50e7abe361a39aad4c4cd834301868e2c0e3847410984611132a72778bfbd955e9d9724151fd62ba2e0bf64a5fcf9ba20794815749018038e1cb722d2a39e9ab524ceeb6f6e87a83f0debd64acacc4f99cf6e1b8b3f649ccbd8a1150701aa26f646b62c844236a791739074ed400c4b9b687d1a5ee7d38bccb06e3042425c485259878af5537df62a482c789407910d7c44e0f8086827c4d47152103f03538eb0cd68cb0d1cc9ab0e0998f69806548045fdca3978f32dd3461e62943fa5e0769d25deac33e44c7200955f7a4232f78ca775841db485e1c4f26e0923f7db1f5956f649610df93e61577b9c22cd386510d62f7c0dec0e0af18ca02bda6d22dd6dd145ba71d4f7b1864f64766b2507d0ed2c8728852e0f698414262ae6c4281d7d70f82dbe9fd9dfd92d61056fea79a96a0ae1b70e03dd047847afd5703f4a474f005b0361fd26dd334c28a31fbe4f25afed45bbb7b4254c17ffaa1d084c776464cf63bba52c38b4c4f001ec512aaa8ea0d65bae82a3c6f1cf5eac4a272a5cdbcb53a9a760335383e2879eb72093e09ac16eb12b89b3d3e8457f1f0b6d6f33db7cf0296e7109eb2120ffbb3526638feb7556574a1bf67fd77e98e2358d48264c4726c77850c1ba2be0f7f01e3bf91a473de73949f5ce81b4a6ac4e9cdabc426dbe9e06aecfb5e88c482b18a1c5b6ec5e6eef11bb37c4dd2e2f6d535d2f853ade3f9bd7edf4efb4dcb6910f93569733047a1bc5266732ce36e8d284136f6772e233603efb6a16a9eb9c564b38c0360dd2858d20a9b59f7c4c401d2e6a75c128162ecf0f464407ab82820e783393abe80b07fcd7cc5cd067a9e19192096a1b22d6caae57f3f1c1fdd010eccd3d6019d2f59062f7bafcbea099c60797296510d83fdd4e7d8fc39289f294a00e10f01414170c34abbf1c004b6711ff3eb189d4327b5fe63dac8af84b7c17536ae546282b83654c6e44f9b07e87fd0990d04c281da6e1cc1c73ce6e2d2768f2395722dd4461e7bf93d1c7489535f8a15620507e5552a9877ec44f594c87deeed8b730e24d4fda037f0ea737ddbd60b98d28e0c90a6b0f3c57ecc8548e883c38f649f525e9cb242d660166f81d9822d4f393d2fc77a9a1affa615a5b8f30378e21fe65926eff89b8f44cbfeff86eee0a6f7f30ab4567298bc681b7aeddeda3cba95137be3648fc5e4b1d2242129d1f222a52a0c67955dc4da759a15491fde946180d3e61ec0ff351c6ed11f13b71e43717a401882740768890b64ad68e89b7370d0703deba424abef57b8390a7023a44858e404a6b631757381dac42ed8ea34aa25e7fd8f9d25895a1e560a034537bc1606331cd8c9042d8f8036122653377fee5f1fae6a6ce8d4d7aaf27955ffc76054c60717fb91fb5815704152adc77bd875886c4411926c16aa2f878133191f6fdfa362664bdca400371f0189258febd1bfea39c60a48fc1667663d3382c0d211e7e83921b7220e1eb95c6c31123fe8012e32f9ced43b590eaf9e03fec0025ec862b0caaa7f02d8d9057b3f2987c3099f6ac25261cf9b4463b470e4684dd0d4b0728d8e6729c65d4c43c4ffce71ec92e1ec570f9d3daf36191640e8c6f9b8ac06d697774a1442f70324d30f3cbecd7d82f7fd7da1f5abcdd97324645c712de96e59172c83bf4e9114a0539832f133900b288292a3845635fef2394ee13fcdf1045440c6992afc480b08993b75e704540390ec07d14b31d034a83e4b201bc2b3b1f284b12d326840cfacd3e41a187f4ac84163c749586b544613063146081ee76fc48e25af6bc690cff073df0b39f48f551e3305e41e82316be486ba0871a45f85dfc4adbba17964bddea44d2005f84ff6a759150d68d69d085cd6d0f68571c9fe64333ade24fed4d0fbf39398c63ef14b54d5bfef7e7da210c9f0eebd045dcfa172f9cee208808e0ae180f52d50d093641511e0ec03dc0934ad5a3481a7f419e21a2987d718d8c935c02ce5a0bafc308f26bcf09d3a0cdd8648f0d10ec3acae2379ea0832f7684389418e9f523a4c69a4036c930fe84e1375c67278b95cc325b2b1538efa38e21a0f748d4f98001e6253842826e55a2a326579dab94f2d0548c57ed0058a46539a593f0cecb408b735238263c19dd256142f26640cee8a3b24922026676dff8ae1c8c7edcb601ef3529195ab8bb54d9150ebee477de25171b1a55c5150deae23afc0eb1a99e05ba9244ee4ff731827894d3b68d01da21fcd59a3bcae70109e642eb3799e297ebd00493f86d0774c7090147f008275c6b1e5add0eeb63c0acb237dd92fca79144df02f8f8bacc0d92a0496f6701fb478ed22e27a4c4e33980f12fbc390198b46c08ff5471513f85b1271e778d3c42ba6a318c59240f066709f12e6e302881959d2cc4c19e5cc4bd7cd3ccbf7fa25f6ec220efddc3191d3bcd6459a573ac541eaa6eea5120ac0f1cca96efc31505c544850ad2438eafb733b27512e57388916771caa883fc2fc72fb35132c0d7ea4695de2f2258e3baee780eb636bb483bf97fe221a474c14b2c9ecc43489d30116cf0a2e10f7a7d25c44b6b2959c588529bd65e7a574419264239b107e5758ff373bb5a30f5b16d2962da6806858f90f4ceb352269959b0784f8c97bf3aa42baabe4329ca5700dceab80e313016005f2df8eafbb403bcb04f49b5b8dfc8e6160ead3ebb9ad750e54396761528fc2759abe3fb9713d188ad3615c9b6ead1a579a610f10b78a8d597b50f21c5ae741e26c675cf1e494631a68ffdfe5ed4222afd4f1451eb6a26ebe12b4ae53585b46ad78ef5347bdb57212ed127ed798df7a47b26e47e8debfd1bf3b929709a473a3bd5e35fd0e45803c4bf4db98ad4805d876470a98da23cace022acb2e6a63789c6d9b1df6a3aa4c9628fbcfbecfcfffd93127fb79f3c247cdf8a0a3ad02cedf44fd6151aecf2890637bd0f9419ee1e4fb16323e78ea6b2f6af31298ee69eeaad79765ebec446cd833dd7a9433fffc94977f5d1b3b767146fcb5c26ff2f8535cbc7230850b0225ef3605b85960ce7463ed4e4c70c2df206de6981d54d3497e3cbd7a7bf9cb2f95ddfb590ec8518feb9fcb2a46b7605e86cae0d5394471fa009c6094f5c3dfcd1101ca142af29c63ac6e664264e22e0ed7926452d0a50aab086b1c527a4d05930ee532fa6bd28dd958ef51b7cc2c67406a9f30be6021aa8ee994a30b613db50778d307e6d333eda97a8bec778189dca0260a137c3c5b4b38c02ee9dafe61636aa670e4b3ce75a3fba62f709693920919b2a728c8bace8c94156a5713f768e51fe26759d8b8916f5670cb10945ab599fe7c4dc94d77433469f00f3b339f48b69595f46f2def8493237c1bb8563bce49cf3691676f8c61151e6268491b3ff51a5d91b89310688c5bb62ddd30be88ff8f39131d970961fd10126311bb727809d5a98595ae79fc40f0e3c8d695bdb2b7ae6e3ef0f4cdf03b6ed2f74499da7731ec82c81c66e859310deceeaadf1b3fdaf67c72820f98bfabd5b0640d735922f391e94f135e68476c0097a797cc7c3c4d38be4084f48733d334e0691b64ec750ce6d97e8329041fbcbd183b04eb3d6d714e6d92062d8236c64f4890bc6d59dedd7bc13489247c7c1c40397be3debdcb44801a0d152ff6677dc9fb57eddce886e6dac6cf25ba16da39a525748fb109823e51c3dfb327956b4f9a13ca14886fca57c3de7fb998be2810f17d6fc886833e3723da6063f699f81deef69c188853733271f41ccdba633e4a30e41e3b997017b8e8dca55fb133b4158e2a9571da910f37ceb8ca76996803a39cf1f75e27eeb1f0f441d9f088c011ebaadf8d9f6dfaa99ffb1a4772ce6e61233a6b668fc3f7f6b2a75ec9c4d129574b296148aa1c0fa04add1b6ca988c8f220794a13515bbfc9e4d3b25735ab7cbd1ab67ed465124875077ccd9c3bdd024f85631f803446aaa3d66b6da35e58624891b7bdb59c98e1014c3e606e5c1a5775d329fcb6f7ffd23b0dec525499dcf52187c748a49735590bd1d78fff400f9ac9f55622eaa9a4a915ee274466ffe31a3884c78fb9189a13463846c997e799fac959f9159fb78c09f9a6f7e9e99335d5197449b2ab59a384e5a2a2c94a4417c40f9b1895260daf1ce67d4b249c44957531cbdf454e754f91d9fdd7ca43fe3769c4236cfff5a6053547a8364b0693c410ac370c8d013292c73767868935481d7745a50f26fa45f6a8c8f26f31acafe15ad077429cd3b0ab03ec100f38175cd53ab5b301563e7968a50e3084f03904b3eac50232dd5bcfc4d3c99f8d584805afa7bdadfd7e546922c4ff2476bbbe9109cd3dbd575a63190fbddc905933890a47b194567da66894b7d7bcf7c9b1e27df4da024a838e0a2a5021c5cdf73b65b2022362211e6fe0701372a744901713f4c7436dfdd5bf3e4e951ab5fbc7a5c7900303d7f59c0393a455088495a5d8d0c469d0c118a18ad20c106be774672c730e0fb2f159adc4958a166fc965bcb0df793b7f41d997708202f63602c0441b49565b6faed7f054d4007ed2cf2ac1b77d6a94a2b95f3737147e15cf8c0a87b5049f51ed219db57c5687b6d1ff5a42e7ed2be21695349cab3f829969db3ae78bfe661220a4005b60d86d20c2bbd4edb497c88f895043de97c7190b77dcdde84f66d26cb68d62f4293c83bd76c4bde06748d0c6c093678c8b1ec263cb64fb3fbd2d8c006af17729beea2710056f83ee22f85b339efdbeb7c65085a358229913365b6b45e6fa7c9596df65ea1905", 0x1000}], 0x3}, 0x0) 02:46:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 773.618230][T19456] bond0: (slave bridge103): Enslaving as an active interface with an up link 02:46:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000000c000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:36 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x1}], 0x10}, 0x0) [ 773.781303][T19461] loop5: detected capacity change from 0 to 512 [ 773.864350][T19461] EXT4-fs (loop5): orphan cleanup on readonly fs [ 773.872354][T19461] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 773.883962][T19461] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/18, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 773.909979][T19464] loop2: detected capacity change from 0 to 512 02:46:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000000d000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 774.059093][T19464] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 774.352595][T19477] __nla_validate_parse: 23 callbacks suppressed [ 774.352667][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.388460][T19478] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.398784][T19478] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.409650][T19478] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 774.448494][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.499955][T19484] bond0: (slave bridge104): Enslaving as an active interface with an up link 02:46:36 executing program 0: socketpair(0xf, 0x0, 0x0, &(0x7f0000001200)) 02:46:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000000e000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 774.817459][T19488] loop2: detected capacity change from 0 to 512 02:46:37 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) [ 774.870910][T19491] loop5: detected capacity change from 0 to 512 02:46:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/18, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 774.924168][T19491] EXT4-fs (loop5): orphan cleanup on readonly fs [ 774.933269][T19491] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 774.946213][T19491] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 774.977396][T19488] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x13, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 775.390479][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.401807][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.412039][T19505] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.431929][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.509478][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.565826][T19504] bond0: (slave bridge105): Enslaving as an active interface with an up link 02:46:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000000f000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 775.719069][T19514] loop5: detected capacity change from 0 to 512 02:46:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 775.824121][T19514] EXT4-fs (loop5): orphan cleanup on readonly fs [ 775.831917][T19514] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 775.844502][T19514] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 775.895124][T19518] loop2: detected capacity change from 0 to 512 [ 775.940434][T19518] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/19, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000010000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:38 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)="9e", 0x1}, {&(0x7f00000001c0)="14", 0x1}], 0x3}, 0x24044000) [ 776.622472][T19530] bond0: (slave bridge106): Enslaving as an active interface with an up link [ 776.690562][T19536] loop2: detected capacity change from 0 to 512 [ 776.740312][T19536] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:39 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/19, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 777.185158][T19544] loop5: detected capacity change from 0 to 512 02:46:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000011000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 777.333709][T19544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:39 executing program 0: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) [ 777.668943][T19553] loop2: detected capacity change from 0 to 512 [ 777.695051][T19553] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 02:46:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 778.024503][T19565] bond0: (slave bridge107): Enslaving as an active interface with an up link 02:46:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000012000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:40 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:40 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)='B', 0x1}], 0x2}, 0x0) 02:46:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/19, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 778.356811][T19569] loop5: detected capacity change from 0 to 512 [ 778.510895][T19575] bond0: (slave bridge108): Enslaving as an active interface with an up link [ 778.555316][T19578] loop2: detected capacity change from 0 to 512 [ 778.578002][T19578] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 778.620921][T19569] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000001c000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 778.962038][ T56] usb 5-1: new high-speed USB device number 21 using dummy_hcd 02:46:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 779.174157][ T56] usb 5-1: device descriptor read/64, error 18 [ 779.252967][T19595] loop2: detected capacity change from 0 to 512 [ 779.333081][T19595] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 779.336638][T19601] bridge18: port 1(syz_tun) entered disabled state 02:46:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000020000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 779.452011][ T56] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 779.479264][T19607] loop5: detected capacity change from 0 to 512 [ 779.535854][T19601] bridge109: port 1(syz_tun) entered blocking state [ 779.538997][T19607] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 779.544111][T19601] bridge109: port 1(syz_tun) entered disabled state 02:46:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 779.662311][ T56] usb 5-1: device descriptor read/64, error 18 [ 779.794620][ T56] usb usb5-port1: attempt power cycle 02:46:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 779.914362][T19616] __nla_validate_parse: 19 callbacks suppressed [ 779.914423][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 779.933983][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 779.944870][T19616] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:46:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000013a40)={0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x40) [ 780.258858][T19620] loop5: detected capacity change from 0 to 512 [ 780.329000][T19623] loop2: detected capacity change from 0 to 512 [ 780.398042][T19620] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 780.417766][T19623] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 780.542525][ T56] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 780.633279][ T56] usb 5-1: Invalid ep0 maxpacket: 0 [ 780.821921][ T56] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 780.951103][ T56] usb 5-1: Invalid ep0 maxpacket: 0 [ 780.963588][ T56] usb usb5-port1: unable to enumerate USB device 02:46:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000025000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x803e000000000000}, {&(0x7f0000000280)="9b", 0x1}], 0x2}, 0x0) 02:46:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 781.855666][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.868670][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.880597][T19648] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 781.900789][T19646] loop2: detected capacity change from 0 to 512 [ 781.915626][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 781.943822][T19650] bridge109: port 1(syz_tun) entered disabled state [ 781.945195][T19649] loop5: detected capacity change from 0 to 512 [ 782.040395][T19646] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 782.082110][T19650] bridge110: port 1(syz_tun) entered blocking state [ 782.090239][T19650] bridge110: port 1(syz_tun) entered disabled state [ 782.105921][T19649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 782.291967][ T4686] usb 5-1: new high-speed USB device number 25 using dummy_hcd 02:46:44 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000061) 02:46:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000440000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 782.492519][ T4686] usb 5-1: device descriptor read/64, error 18 [ 782.762062][ T4686] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 782.785736][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 782.796782][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 782.807574][T19672] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 782.830898][T19673] loop5: detected capacity change from 0 to 512 [ 782.874772][T19675] loop2: detected capacity change from 0 to 512 [ 782.949104][T19675] EXT4-fs (loop2): invalid first ino: 0 [ 782.963656][T19682] bridge110: port 1(syz_tun) entered disabled state [ 782.971614][T19673] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 782.972361][ T4686] usb 5-1: device descriptor read/64, error 18 [ 782.999567][T19682] bridge111: port 1(syz_tun) entered blocking state [ 783.007411][T19682] bridge111: port 1(syz_tun) entered disabled state 02:46:45 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x12541, 0x0) [ 783.103165][ T4686] usb usb5-port1: attempt power cycle [ 783.822477][ T4686] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 783.912610][ T4686] usb 5-1: Invalid ep0 maxpacket: 0 [ 784.061837][ T4686] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 784.166567][ T4686] usb 5-1: Invalid ep0 maxpacket: 0 [ 784.177311][ T4686] usb usb5-port1: unable to enumerate USB device 02:46:47 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000048000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:47 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) [ 785.551970][T19704] __nla_validate_parse: 1 callbacks suppressed [ 785.552036][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 785.569621][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 785.579418][T19704] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 785.681774][T19706] loop5: detected capacity change from 0 to 512 [ 785.817481][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 785.842829][T19711] loop2: detected capacity change from 0 to 512 [ 785.872007][T19713] bridge111: port 1(syz_tun) entered disabled state [ 785.894947][T19713] bridge112: port 1(syz_tun) entered blocking state [ 785.902807][T19713] bridge112: port 1(syz_tun) entered disabled state [ 786.112830][T19711] EXT4-fs (loop2): invalid first ino: 0 [ 786.176867][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 786.187267][T19704] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 786.198416][T19704] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 786.226241][T19706] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:48 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x700) [ 786.621843][T18319] usb 5-1: new high-speed USB device number 29 using dummy_hcd 02:46:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 786.891793][T18319] usb 5-1: device descriptor read/64, error 18 02:46:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000004c000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 787.162350][T18319] usb 5-1: new high-speed USB device number 30 using dummy_hcd 02:46:49 executing program 0: socket$kcm(0x29, 0xc767bee6d5572d23, 0x0) [ 787.362088][T18319] usb 5-1: device descriptor read/64, error 18 [ 787.401742][T19729] loop2: detected capacity change from 0 to 512 [ 787.454197][T19729] EXT4-fs (loop2): invalid first ino: 0 [ 787.456199][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 787.472151][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 787.483419][T19733] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 787.496647][T18319] usb usb5-port1: attempt power cycle [ 787.608519][T19740] bridge112: port 1(syz_tun) entered disabled state [ 787.632815][T19738] loop5: detected capacity change from 0 to 512 [ 787.654181][T19740] bridge113: port 1(syz_tun) entered blocking state [ 787.665818][T19740] bridge113: port 1(syz_tun) entered disabled state [ 787.701222][T19738] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 788.211982][T18319] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 788.312443][T18319] usb 5-1: Invalid ep0 maxpacket: 0 [ 788.462540][T18319] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 788.563657][T18319] usb 5-1: Invalid ep0 maxpacket: 0 [ 788.577923][T18319] usb usb5-port1: unable to enumerate USB device 02:46:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000060000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0), 0x0, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0xc08}, 0x40) 02:46:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 789.834535][T19765] bridge113: port 1(syz_tun) entered disabled state [ 789.887886][T19761] loop2: detected capacity change from 0 to 512 [ 789.892037][T19762] loop5: detected capacity change from 0 to 512 [ 789.962891][T19765] bridge114: port 1(syz_tun) entered blocking state [ 789.970632][T19765] bridge114: port 1(syz_tun) entered disabled state [ 790.008069][T19761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 790.015556][T19761] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 790.032170][T19761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 790.126600][T19762] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:52 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 02:46:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000005865000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402c", 0x5, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 790.554634][T18319] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 790.802441][T18319] usb 5-1: Using ep0 maxpacket: 8 [ 790.923069][T18319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 790.940648][T18319] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 790.951699][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.014941][T19785] __nla_validate_parse: 8 callbacks suppressed [ 791.015015][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.034701][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.046629][T19785] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.063927][T19786] loop2: detected capacity change from 0 to 512 [ 791.094300][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:46:53 executing program 0: socketpair(0xa, 0x5, 0x0, &(0x7f0000000200)) [ 791.120120][T19787] bridge114: port 1(syz_tun) entered disabled state [ 791.132392][T18319] usb 5-1: config 0 descriptor?? [ 791.149932][T19787] bridge115: port 1(syz_tun) entered blocking state [ 791.158550][T19787] bridge115: port 1(syz_tun) entered disabled state [ 791.186911][T18319] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 791.232792][T19786] EXT4-fs (loop2): orphan cleanup on readonly fs [ 791.242185][T19786] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 791.258237][T19786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 791.279916][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.292124][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.304074][T19785] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.366920][T19796] loop5: detected capacity change from 0 to 512 [ 791.570534][T19796] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000068000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402c", 0x5, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002ec0)=[{0x0}, {&(0x7f00000019c0)=' ', 0x1}], 0x2}, 0x0) 02:46:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 793.286659][T11396] usb 5-1: USB disconnect, device number 33 [ 793.572602][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.582463][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.592142][T19819] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 793.627944][T19821] loop5: detected capacity change from 0 to 512 [ 793.684279][T19822] loop2: detected capacity change from 0 to 512 02:46:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x5}]}]}}, &(0x7f0000000100)=""/128, 0x3e, 0x80, 0x1}, 0x20) [ 793.816546][T19821] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:46:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 793.902796][T19822] EXT4-fs (loop2): orphan cleanup on readonly fs [ 793.910880][T19822] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 793.922724][T19822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:46:56 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)) 02:46:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000006c000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402c", 0x5, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 794.398857][ T4695] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 794.444218][T19848] bridge115: port 1(syz_tun) entered disabled state [ 794.561872][T19848] bridge117: port 1(syz_tun) entered blocking state [ 794.569719][T19848] bridge117: port 1(syz_tun) entered disabled state [ 794.646492][ T4695] usb 5-1: Using ep0 maxpacket: 8 [ 794.783212][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 794.797425][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 794.807116][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.819475][T19854] loop2: detected capacity change from 0 to 512 [ 794.841047][T19852] loop5: detected capacity change from 0 to 512 [ 794.960785][T19854] EXT4-fs (loop2): orphan cleanup on readonly fs [ 794.967706][T19854] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 794.978785][T19854] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 795.055534][ T4695] usb 5-1: config 0 descriptor?? [ 795.089308][T19852] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 795.108816][ T4695] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 02:46:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:46:59 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10}, {0x10}], 0x20}, 0x0) 02:46:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:46:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000074000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:46:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca867", 0x7, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:46:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 797.133094][ T4695] usb 5-1: USB disconnect, device number 34 [ 797.342716][T19882] __nla_validate_parse: 5 callbacks suppressed [ 797.342777][T19882] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.363362][T19882] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.374611][T19882] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 797.394947][T19884] loop2: detected capacity change from 0 to 512 [ 797.397256][T19881] loop5: detected capacity change from 0 to 512 [ 797.538798][T19884] EXT4-fs (loop2): orphan cleanup on readonly fs [ 797.547083][T19884] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 797.562048][T19884] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 797.589463][T19881] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 797.598759][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 797.651984][T19892] bridge117: port 1(syz_tun) entered disabled state [ 797.689552][T19892] bridge118: port 1(syz_tun) entered blocking state [ 797.701869][T19892] bridge118: port 1(syz_tun) entered disabled state 02:47:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca867", 0x7, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f000000a9c0)={0xe}, 0x40) [ 797.933681][T18319] usb 5-1: new high-speed USB device number 35 using dummy_hcd 02:47:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:47:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000000007a000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 798.181765][T18319] usb 5-1: Using ep0 maxpacket: 8 [ 798.302028][T18319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 798.327121][T18319] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 798.340936][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.369176][T19901] loop5: detected capacity change from 0 to 512 [ 798.423331][T18319] usb 5-1: config 0 descriptor?? [ 798.440655][T19901] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 798.482822][T18319] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 02:47:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000100)=""/6, 0x0, 0x6}, 0x20) [ 798.735078][T19913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 798.746353][T19913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 798.758645][T19913] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 798.770737][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.811803][T19918] bridge118: port 1(syz_tun) entered disabled state [ 798.840103][T19915] loop2: detected capacity change from 0 to 512 [ 798.874737][T19918] bridge119: port 1(syz_tun) entered blocking state [ 798.885825][T19918] bridge119: port 1(syz_tun) entered disabled state [ 798.936605][T19915] EXT4-fs (loop2): orphan cleanup on readonly fs [ 798.945332][T19915] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 798.959198][T19915] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:03 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca867", 0x7, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x100}, @func]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:47:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000080000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 800.697932][T18319] usb 5-1: USB disconnect, device number 35 [ 801.012449][T19948] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 801.023891][T19948] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 801.068883][T19949] loop5: detected capacity change from 0 to 512 [ 801.092241][T19947] bridge119: port 1(syz_tun) entered disabled state [ 801.120964][T19949] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 801.170486][T19955] loop2: detected capacity change from 0 to 512 [ 801.204317][T19947] bridge120: port 1(syz_tun) entered blocking state [ 801.214322][T19947] bridge120: port 1(syz_tun) entered disabled state 02:47:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x448, 0xc08}, 0x40) 02:47:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b", 0x8, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 801.430074][T19955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 801.438138][T19955] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 801.451620][T19955] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000081000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:47:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 802.022154][ T4695] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 802.046813][T19971] loop5: detected capacity change from 0 to 512 02:47:04 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x40, 0x0) [ 802.230115][T19971] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 802.302537][ T4695] usb 5-1: Using ep0 maxpacket: 8 [ 802.416569][T19979] __nla_validate_parse: 5 callbacks suppressed [ 802.416627][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 802.462099][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.474866][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.474996][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.475173][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 802.512969][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.537257][T19983] bridge120: port 1(syz_tun) entered disabled state [ 802.575020][T19984] loop2: detected capacity change from 0 to 512 [ 802.693224][T19984] EXT4-fs (loop2): orphan cleanup on readonly fs [ 802.700974][T19984] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 802.715981][T19984] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 802.787728][ T4695] usb 5-1: config 0 descriptor?? [ 802.804592][T19983] bridge121: port 1(syz_tun) entered blocking state [ 802.812550][T19983] bridge121: port 1(syz_tun) entered disabled state [ 802.840025][ T4695] usbhid 5-1:0.0: can't add hid device: -22 [ 802.847415][ T4695] usbhid: probe of 5-1:0.0 failed with error -22 02:47:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000000ffffff81000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b", 0x8, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:47:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000029c0)={&(0x7f00000003c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="a064e1b7b1c0f3e6db1e0c797470c95c78e99172516d25144a578990f3757b538d78bbad12d315b1d37ff1bf7140ca358960410414e9adf1667855443eb3595896149b04621c4ba3065b35ad66137b9b376621f3ea256d0bfb525ce6d47ec0f78249601dba0901c31b9f4b0f640f25f4071f4dbaea3a0a8daa3e052a146fc6f63a0eb7ec5d6be37e63130cdd6bc5c9d8433456431e85cb6d2140c747427a14219db2e9f85cc236750366b6c3427896bac54734d1e24daad24c6f4f57e8750a662608e3fa4d9f4e753e3a79afa326f2bedd30581cc04afd6bb47cc597ef5a762c43e1711459bc2b", 0xe7}, {&(0x7f0000001540)="c2e3fed5dae4469f051dece6fd38ffca0c913933c2a2259144a0b7b6c3be6622ef259d93cede48b55e811b183c23e29742a435ea5120f92f091773fd1f7cba5f24e26cd7d04bb7f98051cb785a14ae54205ad30e88e197b3921d2ce9b6642f4f8d6015216b9d2f9704e7a913ecbb74c6849eae5482bd99179ef1518d603d115860057ab4aca0125ee61fc21ace4550276472a591b1a739aa18d78ee99f6ef40f9d1d1225e5e52b6572bebd89153f97db9083b8718a6465ed39a9db99114468147eb0cd0b0f661de76931aa4845bda4dcc1bf90e00c5b", 0xd6}, {&(0x7f0000001640)="eb045427f8463e8a6a947df62a887d1ca16a620b58400c7f9d3316edd9b7aa1698d4eda4361988463fbe59d9aeb651a4e9337f54458329af41911271292b29a0b6f5a6c7cbe5", 0x46}, {&(0x7f00000016c0)="341cec3b743c258132f33a7a940c3e08", 0x10}, {&(0x7f0000001700)="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", 0xff}, {&(0x7f0000001800)="57377221816879b50ebce22e4be0dd7983d3b576702f60da6db0d5fbdd3cab1cad78150a20b603123d113e5904c608984874ccf548735802835a4ac93dbe0b553ce29acd", 0x44}, {&(0x7f0000001880)="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", 0xb6b}], 0x8, &(0x7f0000002900)=[{0x10}], 0x10}, 0x0) [ 804.724048][ T4695] usb 5-1: USB disconnect, device number 36 [ 804.954458][T20012] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.969412][T20012] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.982474][T20012] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 804.994411][T20014] loop5: detected capacity change from 0 to 512 [ 805.033983][T20015] loop2: detected capacity change from 0 to 512 [ 805.085181][T20015] EXT4-fs (loop2): orphan cleanup on readonly fs [ 805.092660][T20015] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 805.103533][T20015] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 805.106181][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 805.154755][T20013] bridge121: port 1(syz_tun) entered disabled state [ 805.219520][T20013] bridge122: port 1(syz_tun) entered blocking state [ 805.227269][T20013] bridge122: port 1(syz_tun) entered disabled state [ 805.239454][T20014] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:47:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000004788000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) 02:47:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:47:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b", 0x8, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 805.932766][ T8460] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 806.006601][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 806.017605][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 806.028360][T20035] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 806.122294][T20038] loop2: detected capacity change from 0 to 512 [ 806.140835][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 806.182058][ T8460] usb 5-1: Using ep0 maxpacket: 8 [ 806.228682][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 806.240484][T20046] bridge122: port 1(syz_tun) entered disabled state [ 806.283983][T20046] bridge123: port 1(syz_tun) entered blocking state [ 806.291333][T20046] bridge123: port 1(syz_tun) entered disabled state [ 806.317550][T20038] EXT4-fs (loop2): orphan cleanup on readonly fs [ 806.325204][T20038] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 806.336366][T20038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 806.350180][ T8460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.361770][ T8460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.366492][T20047] loop5: detected capacity change from 0 to 512 [ 806.372403][ T8460] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.372590][ T8460] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 806.403949][ T8460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.435316][ T8460] usb 5-1: config 0 descriptor?? [ 806.481731][ T8460] usbhid 5-1:0.0: can't add hid device: -22 [ 806.488089][ T8460] usbhid: probe of 5-1:0.0 failed with error -22 02:47:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000004888000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 806.626257][T20047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:47:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008940)={0x18, 0x12, &(0x7f0000000140)=@framed={{}, [@generic, @map, @exit, @map, @map, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @generic, @btf_id, @map]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xff38, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000088c0), 0x8, 0x10, &(0x7f0000008900), 0x10}, 0x78) 02:47:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) 02:47:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000000ffffa888000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 808.626566][ T4695] usb 5-1: USB disconnect, device number 37 [ 808.917813][T20076] __nla_validate_parse: 5 callbacks suppressed [ 808.917886][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 809.015988][T20082] loop5: detected capacity change from 0 to 512 [ 809.023316][T20083] loop2: detected capacity change from 0 to 512 [ 809.076587][T20081] bridge123: port 1(syz_tun) entered disabled state [ 809.143306][T20081] bridge124: port 1(syz_tun) entered blocking state [ 809.150610][T20081] bridge124: port 1(syz_tun) entered disabled state [ 809.168361][T20080] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.179213][T20080] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.189160][T20080] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.202532][T20082] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 809.232505][T20083] EXT4-fs (loop2): orphan cleanup on readonly fs [ 809.238992][T20083] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 809.249963][T20083] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:11 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)}, {0x0}], 0x3}, 0x4000884) 02:47:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000000ffffff9e000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) [ 809.852395][ T4695] usb 5-1: new high-speed USB device number 38 using dummy_hcd 02:47:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000029c0)={&(0x7f00000003c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002880)=[{0x0}, {&(0x7f0000001440)="a0", 0x1}, {&(0x7f0000001540)="c2", 0x1}], 0x3, &(0x7f0000002900)=[{0x24}], 0x10}, 0x0) [ 810.081606][T20103] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 810.093878][T20103] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 810.104657][T20103] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 810.120621][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 810.148365][ T4695] usb 5-1: Using ep0 maxpacket: 8 [ 810.170923][T20104] loop2: detected capacity change from 0 to 512 [ 810.187274][T20110] bridge124: port 1(syz_tun) entered disabled state [ 810.225065][T20104] EXT4-fs (loop2): orphan cleanup on readonly fs [ 810.231957][T20104] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 69 [ 810.243374][T20104] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 810.262980][T20110] bridge125: port 1(syz_tun) entered blocking state [ 810.270475][T20110] bridge125: port 1(syz_tun) entered disabled state [ 810.286183][T20109] loop5: detected capacity change from 0 to 512 [ 810.304268][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.316862][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.328163][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.343357][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 810.355043][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.503307][T20109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 810.554011][ T4695] usb 5-1: config 0 descriptor?? [ 810.601794][ T4695] usbhid 5-1:0.0: can't add hid device: -22 [ 810.608383][ T4695] usbhid: probe of 5-1:0.0 failed with error -22 02:47:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, 0x0, 0x0) 02:47:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000bc0000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 812.469683][ T4695] usb 5-1: USB disconnect, device number 38 02:47:14 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000180)=""/180, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 812.744375][T20145] loop2: detected capacity change from 0 to 512 [ 812.778822][T20145] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 812.810854][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.835360][T20147] loop5: detected capacity change from 0 to 512 [ 812.885091][T20157] bridge125: port 1(syz_tun) entered disabled state [ 812.905057][T20157] bridge126: port 1(syz_tun) entered blocking state [ 812.912792][T20157] bridge126: port 1(syz_tun) entered disabled state 02:47:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 812.996362][T20147] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 02:47:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000bc1000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:15 executing program 0: clone3(&(0x7f0000000200)={0x28102400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:47:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 02:47:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 813.480409][T20168] loop2: detected capacity change from 0 to 512 [ 813.481783][ T4686] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 813.583413][T20173] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 813.662714][T20168] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 813.744438][ T4686] usb 5-1: Using ep0 maxpacket: 8 [ 813.779323][T20175] bridge126: port 1(syz_tun) entered disabled state [ 813.821326][T20175] bridge127: port 1(syz_tun) entered blocking state [ 813.829832][T20175] bridge127: port 1(syz_tun) entered disabled state [ 813.892933][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.905430][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.916430][ T4686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.930130][ T4686] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 813.940275][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:47:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 814.095520][ T4686] usb 5-1: config 0 descriptor?? [ 814.300461][T20185] loop5: detected capacity change from 0 to 512 [ 814.374244][T20185] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 814.494589][T20191] loop2: detected capacity change from 0 to 512 [ 814.512296][T20191] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 814.625423][ T4686] usbhid 5-1:0.0: can't add hid device: -71 [ 814.632774][ T4686] usbhid: probe of 5-1:0.0 failed with error -71 [ 814.683395][ T4686] usb 5-1: USB disconnect, device number 39 02:47:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000000000bc2000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 02:47:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xac, &(0x7f0000000280)=""/172, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:47:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)=ANY=[]) [ 815.284628][T20209] __nla_validate_parse: 3 callbacks suppressed [ 815.284690][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.300899][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.312184][T20209] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.344429][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 815.380235][T20212] loop2: detected capacity change from 0 to 512 [ 815.407272][T20219] bridge127: port 1(syz_tun) entered disabled state [ 815.427463][T20216] loop5: detected capacity change from 0 to 512 [ 815.452917][T20212] EXT4-fs warning (device loop2): read_mmp_block:107: Error -117 while reading MMP block 0 [ 815.517967][T20219] bridge128: port 1(syz_tun) entered blocking state [ 815.525223][T20219] bridge128: port 1(syz_tun) entered disabled state [ 815.597051][T20216] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:47:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000000000000cb000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:18 executing program 0: clone3(&(0x7f0000000400)={0x32000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) 02:47:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)=ANY=[]) 02:47:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 816.097677][T20229] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 816.107799][T20229] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 816.117584][T20229] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 816.159470][ T4695] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 816.257303][T20233] loop2: detected capacity change from 0 to 512 [ 816.345326][T20233] EXT4-fs warning (device loop2): read_mmp_block:107: Error -117 while reading MMP block 0 02:47:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000000fffffff0000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 816.393256][T20238] loop5: detected capacity change from 0 to 512 [ 816.421850][ T4695] usb 5-1: Using ep0 maxpacket: 8 [ 816.552862][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.564383][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.567025][T20238] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 816.575881][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.576071][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 816.605837][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.685947][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 816.767148][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.773863][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.814210][T20248] bridge128: port 1(syz_tun) entered disabled state [ 816.842978][T20248] bridge129: port 1(syz_tun) entered blocking state [ 816.852488][T20248] bridge129: port 1(syz_tun) entered disabled state [ 816.869666][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 816.879643][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 816.935697][ T4695] usb 5-1: config 0 descriptor?? [ 817.481918][ T4695] usbhid 5-1:0.0: can't add hid device: -71 [ 817.488387][ T4695] usbhid: probe of 5-1:0.0 failed with error -71 [ 817.524400][ T4695] usb 5-1: USB disconnect, device number 40 02:47:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)=ANY=[]) 02:47:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000007fffffff000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 02:47:20 executing program 0: sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x89) [ 818.138662][T20271] loop2: detected capacity change from 0 to 512 [ 818.162790][T20272] loop5: detected capacity change from 0 to 512 [ 818.170850][T20271] EXT4-fs warning (device loop2): read_mmp_block:107: Error -117 while reading MMP block 0 [ 818.293899][T20279] bridge129: port 1(syz_tun) entered disabled state [ 818.305987][T20272] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 818.326261][T20279] bridge130: port 1(syz_tun) entered blocking state [ 818.334526][T20279] bridge130: port 1(syz_tun) entered disabled state 02:47:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb4, &(0x7f0000000180)=""/180, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:47:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, 0x0) 02:47:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010002000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 818.982054][T11396] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 819.027475][T20295] loop2: detected capacity change from 0 to 512 02:47:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@initr0, @exit, @jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000180)=""/180, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 819.178244][T20301] loop5: detected capacity change from 0 to 512 [ 819.222516][T20301] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 819.232295][T20306] bridge130: port 1(syz_tun) entered disabled state [ 819.234904][T11396] usb 5-1: Using ep0 maxpacket: 8 [ 819.253656][T20306] bridge131: port 1(syz_tun) entered blocking state [ 819.261063][T20306] bridge131: port 1(syz_tun) entered disabled state [ 819.412885][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.424720][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.435142][T11396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 819.448794][T11396] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 819.458807][T11396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.658249][T11396] usb 5-1: config 0 descriptor?? [ 820.228585][T11396] usbhid 5-1:0.0: can't add hid device: -71 [ 820.237061][T11396] usbhid: probe of 5-1:0.0 failed with error -71 [ 820.280737][T11396] usb 5-1: USB disconnect, device number 41 02:47:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010003000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, 0x0) 02:47:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 02:47:23 executing program 0: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000000)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 820.831213][T20333] __nla_validate_parse: 9 callbacks suppressed [ 820.831279][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 820.876007][T20334] loop2: detected capacity change from 0 to 512 [ 820.892814][T20340] bridge131: port 1(syz_tun) entered disabled state [ 820.924472][T20340] bridge132: port 1(syz_tun) entered blocking state [ 820.932161][T20340] bridge132: port 1(syz_tun) entered disabled state [ 820.955890][T20342] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 820.965912][T20342] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 820.975809][T20342] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 821.000015][T20343] loop5: detected capacity change from 0 to 512 02:47:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901", 0x5, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, 0x0) [ 821.193704][T20343] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:47:23 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:47:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010004000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000180)=""/180, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 821.655739][ T3663] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 821.820176][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 821.830262][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 821.840178][T20359] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 821.866735][T20358] loop2: detected capacity change from 0 to 512 [ 821.874612][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 821.942850][ T3663] usb 5-1: Using ep0 maxpacket: 8 [ 821.969412][T20365] bridge132: port 1(syz_tun) entered disabled state [ 822.021025][T20365] bridge133: port 1(syz_tun) entered blocking state [ 822.028692][T20365] bridge133: port 1(syz_tun) entered disabled state [ 822.063612][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.075983][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.086215][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.100827][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 822.111588][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:47:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 822.423290][T20370] loop5: detected capacity change from 0 to 512 [ 822.514708][ T3663] usb 5-1: config 0 descriptor?? [ 822.532270][T20370] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 822.876976][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 822.918832][T20379] bridge133: port 1(syz_tun) entered disabled state [ 822.935894][T20379] bridge134: port 1(syz_tun) entered blocking state [ 822.943044][T20379] bridge134: port 1(syz_tun) entered disabled state [ 823.053318][ T3663] usbhid 5-1:0.0: can't add hid device: -71 [ 823.060234][ T3663] usbhid: probe of 5-1:0.0 failed with error -71 [ 823.102556][ T3663] usb 5-1: USB disconnect, device number 42 02:47:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010005000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 02:47:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000180)=""/180, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:47:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 823.712670][T20397] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 823.762027][T20399] loop5: detected capacity change from 0 to 512 [ 823.829001][T20399] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 823.843176][T20400] bridge134: port 1(syz_tun) entered disabled state [ 823.858048][T20406] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.906466][T20400] bridge135: port 1(syz_tun) entered blocking state [ 823.916388][T20400] bridge135: port 1(syz_tun) entered disabled state 02:47:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000180)=""/180, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:47:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010006000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f000000a2c0)={0x77359400}) 02:47:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 824.491771][T18319] usb 5-1: new high-speed USB device number 43 using dummy_hcd 02:47:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010007000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 824.732891][T18319] usb 5-1: Using ep0 maxpacket: 8 [ 824.757060][T20426] bridge135: port 1(syz_tun) entered disabled state [ 824.775272][T20423] loop5: detected capacity change from 0 to 512 [ 824.853048][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.864412][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.874923][T18319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.888521][T18319] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 824.896893][T20423] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 824.898225][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.902358][T18319] usb 5-1: config 0 descriptor?? [ 824.924085][T20426] bridge136: port 1(syz_tun) entered blocking state [ 824.931211][T20426] bridge136: port 1(syz_tun) entered disabled state [ 825.472005][T18319] usbhid 5-1:0.0: can't add hid device: -71 [ 825.478691][T18319] usbhid: probe of 5-1:0.0 failed with error -71 [ 825.514664][T18319] usb 5-1: USB disconnect, device number 43 02:47:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:28 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x10}], 0x10}}], 0x1, 0x0) 02:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 02:47:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010008000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff44, 0x0, 0x0, &(0x7f0000007700), 0x18}, 0x0) [ 826.160966][T20452] __nla_validate_parse: 10 callbacks suppressed [ 826.161030][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 826.179275][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 826.189000][T20452] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 826.205959][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 826.231776][T20454] loop5: detected capacity change from 0 to 512 [ 826.260515][T20456] bridge136: port 1(syz_tun) entered disabled state 02:47:28 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f000000a0c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d80)=""/47, 0x2f}], 0x1}}], 0x1, 0x40, 0x0) [ 826.287894][T20454] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 826.357555][T20456] bridge137: port 1(syz_tun) entered blocking state [ 826.364754][T20456] bridge137: port 1(syz_tun) entered disabled state 02:47:28 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x10, 0x104}], 0x10}}], 0x1, 0x0) 02:47:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010009000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 826.592383][T18319] usb 5-1: new high-speed USB device number 44 using dummy_hcd 02:47:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 826.852149][T18319] usb 5-1: Using ep0 maxpacket: 8 [ 826.980447][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.994350][T18319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.006393][T18319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 827.020338][T18319] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:47:29 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/194) [ 827.030490][T18319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.039621][T20473] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 827.049737][T20473] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 827.060023][T20473] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 827.171401][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 827.205044][T20475] loop5: detected capacity change from 0 to 512 [ 827.224493][T18319] usb 5-1: config 0 descriptor?? [ 827.259226][T20475] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 827.260155][T20480] bridge137: port 1(syz_tun) entered disabled state [ 827.306648][T20480] bridge138: port 1(syz_tun) entered blocking state [ 827.315798][T20480] bridge138: port 1(syz_tun) entered disabled state [ 827.762079][T18319] usbhid 5-1:0.0: can't add hid device: -71 [ 827.770064][T18319] usbhid: probe of 5-1:0.0 failed with error -71 [ 827.849642][T18319] usb 5-1: USB disconnect, device number 44 02:47:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:47:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000a000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 02:47:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x100) 02:47:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}}, 0x20}}, 0x0) 02:47:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 828.490800][T20504] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 828.501402][T20504] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 828.524612][T20505] loop5: detected capacity change from 0 to 512 [ 828.574401][T20506] bridge138: port 1(syz_tun) entered disabled state 02:47:31 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) getsockopt(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 02:47:31 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f000000a0c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d80)=""/47, 0x2f}], 0x1, &(0x7f0000001e00)=""/18, 0x12}}], 0x1, 0x40, &(0x7f000000a2c0)={0x77359400}) [ 828.647764][T20505] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:47:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000b000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}}, 0x20}}, 0x0) 02:47:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 829.086514][ T4695] usb 5-1: new high-speed USB device number 45 using dummy_hcd 02:47:31 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = dup2(r0, r0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) [ 829.372510][ T4695] usb 5-1: Using ep0 maxpacket: 8 [ 829.491055][T20529] loop5: detected capacity change from 0 to 512 [ 829.502424][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.515130][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.527340][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.544758][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 829.555607][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.606579][T20531] bridge139: port 1(syz_tun) entered blocking state [ 829.614977][T20531] bridge139: port 1(syz_tun) entered disabled state [ 829.653072][T20529] EXT4-fs (loop5): invalid first ino: 0 [ 829.886108][ T4695] usb 5-1: config 0 descriptor?? [ 830.422384][ T4695] usbhid 5-1:0.0: can't add hid device: -71 [ 830.429216][ T4695] usbhid: probe of 5-1:0.0 failed with error -71 [ 830.467532][ T4695] usb 5-1: USB disconnect, device number 45 02:47:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:33 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 02:47:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}}, 0x20}}, 0x0) 02:47:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) [ 831.300867][T20559] __nla_validate_parse: 5 callbacks suppressed [ 831.300930][T20559] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.318908][T20559] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.330107][T20559] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.482534][T20560] loop5: detected capacity change from 0 to 512 [ 831.488020][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.791986][T20560] EXT4-fs (loop5): invalid first ino: 0 02:47:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x424, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x408, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b07233c547962e7c91932f789bde2ab12d641e01c94327aa88aa9c1c81f4ffee"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "74c7096e9494c9e834b44aa91d8f48be14a083f378e13ba09fee36cd19e28e48"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x258, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast2, 0x891}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x70, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d435dd6eb03cb769fc3bcf6462d7f4c591a1a03b93fdc46c99c8069ef843b1c3"}]}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x404c004}, 0x4c000) 02:47:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 832.053025][ T4686] usb 5-1: new high-speed USB device number 46 using dummy_hcd 02:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:47:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000d000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 832.335893][ T4686] usb 5-1: Using ep0 maxpacket: 8 [ 832.462956][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.476363][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.488309][ T4686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.502904][ T4686] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 832.512498][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.756513][ T4686] usb 5-1: config 0 descriptor?? 02:47:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x44c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x430, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b07233c547962e7c91932f789bde2ab12d641e01c94327aa88aa9c1c81f4ffee"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "74c7096e9494c9e834b44aa91d8f48be14a083f378e13ba09fee36cd19e28e48"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x258, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @mcast2, 0x891}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x104, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d435dd6eb03cb769fc3bcf6462d7f4c591a1a03b93fdc46c99c8069ef843b1c3"}]}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x404c004}, 0x4c000) [ 832.849755][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.859805][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.870364][T20585] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.951878][T20587] loop5: detected capacity change from 0 to 512 [ 832.954120][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 832.982501][T20587] EXT4-fs (loop5): invalid first ino: 0 02:47:35 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb00}}}, 0x4c}}, 0x0) [ 833.093872][T20593] bridge139: port 1(syz_tun) entered disabled state [ 833.203945][T20593] bridge141: port 1(syz_tun) entered blocking state [ 833.210898][T20593] bridge141: port 1(syz_tun) entered disabled state [ 833.304834][ T4686] usbhid 5-1:0.0: can't add hid device: -71 [ 833.311973][ T4686] usbhid: probe of 5-1:0.0 failed with error -71 [ 833.345397][ T4686] usb 5-1: USB disconnect, device number 46 02:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 833.797501][T20605] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 02:47:36 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:47:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000e000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 02:47:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000006d80)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private2, 0x6}, 0x80, 0x0}}], 0x1, 0x0) 02:47:36 executing program 2: set_mempolicy(0x2, &(0x7f0000000080)=0xfff, 0x7ff) [ 833.985350][T20608] loop5: detected capacity change from 0 to 512 [ 834.056559][T20608] EXT4-fs (loop5): orphan cleanup on readonly fs [ 834.063524][T20608] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 834.074754][T20608] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 834.109811][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 834.240947][T20615] bridge141: port 1(syz_tun) entered disabled state [ 834.317998][T20615] bridge142: port 1(syz_tun) entered blocking state [ 834.325185][T20615] bridge142: port 1(syz_tun) entered disabled state 02:47:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000f000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000800)) 02:47:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 834.711953][T18325] usb 5-1: new high-speed USB device number 47 using dummy_hcd 02:47:37 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x101}}, {@allow_other}, {@default_permissions}, {}, {}], [{@subj_user={'subj_user', 0x3d, 'fuse\x00'}}, {@subj_type}, {@fowner_gt}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, 'B \xf5\xb3a \x13?\xa3p\xaa\xcb:\xb1\xbe=\x1e\x06d^X\x8e\x9b{j\xc2\x9c\xda\xebT\x1f\x9a\xba\x06\x8c\xa4\x93\x1c\xdb\xf6o\xba\xe3\x8dC\n\x99(\x8e\xf7\x06\x16:\v1\xc7\x8c!\xb2\xe2\xd49\xa5D\x89\xcd\x19\x9cU\x8f\xd1\xc3\xdd \f\xfd\xd9 \"\xc5\x86\xd7\x8f\xac\xcb\xcf\xfa\b\x96\xa8\x9e\xe5S\xf5n$\xe6\x03\xcd\x13\x95\xaf\x12\x8d}a\x89\xf38P{\x1f\xdb\x95\xd8y\xcf\xd8\'a\xb0\x1eER(\xff\xe5LC\xfcr)\xc1\x99\xc7;32f\xa5\xf8\xfc\xe6\xa9\xc2\xaemm\x81b\xe0\xb5\xa3S\xb3\xee\xf7=\x94\x163\x96^\xc1\xd7\xfahJZ\xb7f\xf1J4\x02\xd5\xb0I|\xd0\xb0!K\xa5\x89\xc1\a\xc0\xfc\x82\xd1g07\x81+\xba\x89\x06\xae\x12\x81\xed\xd02S\xf1\xf0W\xc5#\xbb\xf0\xa6\xe9\xbb\x17\xa4\xd0\xe2\xbe{\a\xa6/WR\x82\xfb\x9a3\xab%\xe1\xaeP\f~RQ\xef\xc4FxP\\\xed\xea\xbd\xa3\v\xa2\xab\xd6AK\xbe!\x9c\xd4CF\xf5E\x17\xe4\xd0\xf0k\x90\xe0\xb3\xfb#_1h9\xc2g \xa11f\x9c\x04\xd8\xcd\x87nD\x94k0\xce\xa5\xffi\n\xdf\xa0\x16.\x0e_\x04V\xda\xe1\x7f<\n(\ta\xd0\t\xc6\xe0\xb0\'\xb0W\xbaD\t\x99\xcd'}}]}}) 02:47:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010010000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 834.945576][T20631] loop5: detected capacity change from 0 to 512 [ 834.953453][T18325] usb 5-1: Using ep0 maxpacket: 8 [ 835.075654][T18325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.078427][T20631] EXT4-fs (loop5): orphan cleanup on readonly fs [ 835.087323][T18325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.087454][T18325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.087638][T18325] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 835.087772][T18325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.102100][T18325] usb 5-1: config 0 descriptor?? [ 835.106251][T20631] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 835.157651][T20631] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 835.390659][T20649] bridge142: port 1(syz_tun) entered disabled state [ 835.458433][T20649] bridge143: port 1(syz_tun) entered blocking state [ 835.466065][T20649] bridge143: port 1(syz_tun) entered disabled state 02:47:37 executing program 2: socket(0x10, 0x3, 0x7) [ 835.663106][T18325] usbhid 5-1:0.0: can't add hid device: -71 [ 835.671269][T18325] usbhid: probe of 5-1:0.0 failed with error -71 [ 835.752924][T18325] usb 5-1: USB disconnect, device number 47 02:47:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010011000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000dc0)={'ip6_vti0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x14}, 0xfff, 0x0, 0x0, 0x400, 0x5, 0x2400000, r3}) 02:47:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:47:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'vlan1\x00'}) 02:47:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '8ig', 0x44, 0x2f, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}, 0x0) 02:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 836.574454][T20667] __nla_validate_parse: 10 callbacks suppressed [ 836.574523][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 836.591552][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 836.601336][T20667] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 836.603735][T20669] loop5: detected capacity change from 0 to 512 [ 836.705551][T20669] EXT4-fs (loop5): orphan cleanup on readonly fs [ 836.714752][T20669] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 836.726604][T20669] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') read$char_raw(r0, 0x0, 0x0) 02:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000008080)='net/udp6\x00') read$char_raw(r0, &(0x7f0000000000)={""/32667}, 0x8000) 02:47:39 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 02:47:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010012000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 837.282390][ T56] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 837.395430][T20691] loop5: detected capacity change from 0 to 512 02:47:39 executing program 2: socket(0x11, 0x2, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, 0x0) [ 837.479627][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 837.491331][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 837.503213][T20694] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 837.568315][T20691] EXT4-fs (loop5): orphan cleanup on readonly fs [ 837.576432][T20691] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 837.588404][T20691] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 837.601007][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 837.743445][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.756037][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.767799][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.784131][ T56] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:47:40 executing program 2: modify_ldt$write2(0x11, &(0x7f0000000080)={0x722}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) [ 837.794381][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:47:40 executing program 0: select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x9}, 0x0) [ 838.075550][ T56] usb 5-1: config 0 descriptor?? [ 838.632438][ T56] usbhid 5-1:0.0: can't add hid device: -71 [ 838.639972][ T56] usbhid: probe of 5-1:0.0 failed with error -71 [ 838.676052][ T56] usb 5-1: USB disconnect, device number 48 02:47:41 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:47:41 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 02:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001001c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$char_raw(r0, &(0x7f000000c340)=ANY=[], 0xc200) read$char_raw(r0, 0x0, 0x0) 02:47:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$char_raw(r0, &(0x7f0000000200)={""/55508}, 0xda00) [ 839.776204][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 839.788944][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 839.792755][T20728] loop5: detected capacity change from 0 to 512 [ 839.800861][T20730] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 840.027909][T20728] EXT4-fs (loop5): orphan cleanup on readonly fs [ 840.036248][T20728] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 840.048208][T20728] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:42 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b0e101", 0x14, 0x11, 0x0, @empty, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0x1}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 840.162258][ T4686] usb 5-1: new high-speed USB device number 49 using dummy_hcd 02:47:42 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 02:47:42 executing program 3: syz_emit_ethernet(0x8e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x11, 0xf989, "f0c58af199204733c2aa298fff"}, @md5sig={0x13, 0x12, "eb40bc196c7a8d6b524f69347ebd447e"}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 840.402715][ T4686] usb 5-1: Using ep0 maxpacket: 8 [ 840.521830][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.534562][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.545132][ T4686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.560267][ T4686] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:47:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000", 0x60, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 840.570592][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.583768][ T4686] usb 5-1: config 0 descriptor?? 02:47:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010025000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:43 executing program 2: syz_open_dev$char_raw(&(0x7f0000000180), 0x0, 0x41c002) [ 841.117997][ T4686] usbhid 5-1:0.0: can't add hid device: -71 [ 841.127274][ T4686] usbhid: probe of 5-1:0.0 failed with error -71 [ 841.171809][T20751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 841.208615][ T4686] usb 5-1: USB disconnect, device number 49 [ 841.309331][T20755] loop5: detected capacity change from 0 to 512 [ 841.466109][T20755] EXT4-fs (loop5): orphan cleanup on readonly fs [ 841.474028][T20755] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 841.484865][T20755] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:44 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 02:47:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='schedstat\x00') read$char_raw(r0, 0x0, 0x4200) 02:47:44 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x345800, 0x0) 02:47:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010048000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xfffffffffffffed0, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}}, 0x0) 02:47:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 841.993938][T20766] __nla_validate_parse: 2 callbacks suppressed [ 841.994004][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.012910][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.022804][T20766] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:47:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') read$char_raw(r0, 0x0, 0xd600) read$char_raw(r0, &(0x7f0000000200)={""/63478}, 0xf800) 02:47:44 executing program 3: r0 = getpgrp(0x0) ptrace$setopts(0x4206, r0, 0x800, 0x0) 02:47:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x35, &(0x7f0000000080)}) [ 842.602148][ T4695] usb 5-1: new high-speed USB device number 50 using dummy_hcd 02:47:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001004c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 842.771018][T20777] loop5: detected capacity change from 0 to 512 [ 842.842804][ T4695] usb 5-1: Using ep0 maxpacket: 8 02:47:45 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000080)={'veth1\x00', @ifru_hwaddr=@broadcast}) [ 842.968264][T20777] EXT4-fs (loop5): orphan cleanup on readonly fs [ 842.976087][T20777] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 842.988947][T20777] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 843.001005][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.014007][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.026294][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.041401][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 843.052973][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:47:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="ee"]) [ 843.230268][T20788] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 843.241178][T20788] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 843.251233][T20788] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 843.381959][ T4695] usb 5-1: config 0 descriptor?? [ 843.921985][ T4695] usbhid 5-1:0.0: can't add hid device: -71 [ 843.928444][ T4695] usbhid: probe of 5-1:0.0 failed with error -71 [ 843.969523][ T4695] usb 5-1: USB disconnect, device number 50 02:47:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}]}}, 0x0}, 0x0) 02:47:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) 02:47:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') read$char_raw(r0, 0x0, 0x425a) 02:47:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x5, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x40810) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0x6, 0x0, &(0x7f0000001000)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x882, 0x0) sched_setattr(r0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x964, 0x0, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x1}, 0x3, 0x5, 0x3ff, 0xff, 0xa, 'syz1\x00', "0384f800dd1dbddd03b44b3674a5ff6d254ec57f2914d7237b86ba176d5ebbc4", "a62475852906bd5a3d66c527d5a3236bf3c1e3805b29882f97b5ef85d2f6dce6", [{0x7, 0x0, {0x3, 0x3aa}}, {0x1, 0x98, {0x1, 0x4}}, {0xf801, 0x5, {0x0, 0xf8fe}}, {0xfd, 0xffff, {0x3, 0x3}}, {0x0, 0x9, {0x3, 0x4}}, {0x1, 0x7}, {0xe30, 0x8, {0x2, 0x8}}, {0x9, 0x4, {0x1, 0x7}}, {0x2, 0x6, {0x3, 0x1}}, {0x0, 0x1d2, {0x0, 0x8}}, {0x2, 0xa44, {0xb67d47ba09189750, 0x9}}, {0xce2, 0x0, {0x0, 0x100}}, {0xff, 0x8001}, {0x6, 0x200, {0x2, 0x9}}, {0x0, 0x100, {0x2, 0x8000}}, {0x8, 0x9, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0x1000}}, {0x1, 0x2771, {0x0, 0x3ff}}, {0x2, 0x8, {0x3, 0x101}}, {0x2, 0xa3d0, {0x2, 0x80}}, {0xff, 0x0, {0x3, 0x7fffffff}}, {0x2, 0x8, {0x1, 0x1000}}, {0x1, 0x20, {0x0, 0x3}}, {0xfff9, 0x6, {0x1, 0x80}}, {0x8001, 0x8000, {0x3}}, {0x1, 0x2, {0x2, 0x1}}, {0x0, 0x1f, {0x2, 0x6}}, {0x0, 0x1, {0x1, 0x3000000}}, {0x5, 0x6, {0x1, 0x2}}, {0x200, 0x8, {0x0, 0x1}}, {0x6, 0x1, {0x3, 0x40}}, {0xffff, 0x1f, {0x0, 0x9}}, {0x74, 0x3, {0x0, 0x400}}, {0x0, 0x2, {0x1, 0x5}}, {0x3397, 0x3e35, {0x3, 0xf3}}, {0x7, 0x5, {0x0, 0x1}}, {0x1, 0xffff, {0x3, 0xfffffffd}}, {0x3, 0x3, {0x0, 0x6}}, {0x3ff, 0x6, {0x1, 0x200}}, {0x9, 0x1, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x5e, 0xf5, 0x4, 0x5ed7, 0x24, 'syz0\x00', "11614eb13f46473cff0c618b491a0e196b7fef0e6a64ae711bc62606689ca108", "43aa8c79f830d4125d1735dd75aee10e384d3e12c11f1fc622df98284e107d9c", [{0xee, 0x3, {0x2, 0xcd64}}, {0x4, 0x1, {0x3}}, {0xff, 0x1, {0x3, 0x8000}}, {0x0, 0x20, {0x1, 0x366}}, {0x0, 0xfff8, {0x1, 0x4}}, {0x0, 0x1f, {0x0, 0xffff}}, {0x27, 0xaaa, {0x2, 0x777a}}, {0x2, 0x4, {0x0, 0x4}}, {0x0, 0x0, {0x2, 0x3c6c3402}}, {0xfffd, 0x6, {0x1, 0x7}}, {0x91c, 0x8, {0x1, 0x8000}}, {0xfff9, 0x8, {0x1, 0x50}}, {0x1, 0x6, {0x1, 0x9}}, {0x1, 0x0, {0x3, 0x8be}}, {0x2, 0x8, {0x3, 0x7}}, {0x7f2, 0x16c, {0x3}}, {0x3, 0x0, {0x2}}, {0xea, 0xd35b, {0x3, 0x4}}, {0x8, 0x1, {0x3, 0x7f}}, {0x8, 0x2, {0x0, 0xfffffff8}}, {0x5, 0x47, {0x2, 0x1}}, {0x3, 0x6c, {0x2, 0xfffffffe}}, {0x3f, 0x29b, {0x0, 0x3}}, {0x582c, 0x9, {0x2, 0xffffffff}}, {0x2, 0x8, {0x2, 0x7}}, {0x7f, 0x660e, {0x0, 0x4}}, {0x0, 0x8, {0x2, 0xbd7}}, {0x1, 0x7, {0x3}}, {0x401, 0xa0, {0x3, 0x3f}}, {0x9, 0x7, {0x2, 0x7}}, {0x7, 0xfffe, {0x0, 0x8}}, {0x40, 0x74, {0x0, 0xffffffff}}, {0x0, 0x7fff, {0x1, 0x2}}, {0x0, 0x3}, {0x140b, 0x4, {0x3, 0x2}}, {0x800, 0x1, {0x0, 0x2}}, {0xff, 0x834e, {0x3, 0x7ff}}, {0x0, 0x3, {0x1, 0xfffffe01}}, {0x8, 0x6, {0x0, 0x7ff}}, {0x2, 0x8, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x2}, 0x2, 0x81, 0x2, 0x7, 0xe, 'syz1\x00', "d5659cc6b6961e69c65022b530b84360b070b0d0b1f1af1311ec983f534359a7", "d8e698a4d906bfa18745ec9bed695d333d4ffcb9142b3083f60ad8bb8686aa15", [{0x7, 0xfffc, {0x2, 0x1}}, {0x100, 0x3, {0x0, 0xfff}}, {0x8, 0x6, {0x3, 0xffff}}, {0x3, 0x8, {0x1, 0x3d3}}, {0x80, 0x0, {0x0, 0xff}}, {0x1ff, 0x5, {0x0, 0x800}}, {0x6, 0x200, {0x2, 0x4}}, {0x0, 0x106, {0x0, 0x4}}, {0x8000, 0x5b30, {0x1, 0x9}}, {0xd55, 0x7, {0x3, 0x2}}, {0x4, 0xfff, {0x0, 0x6}}, {0x6, 0xc3, {0x3, 0x9}}, {0x7fff, 0x800, {0x1, 0x101}}, {0x5, 0x400, {0x3, 0x2}}, {0x0, 0x0, {0x2}}, {0x4, 0x6}, {0x7, 0x1, {0x3, 0xe7ac}}, {0x3ff, 0x0, {0x2}}, {0x0, 0x0, {0x0, 0x1f}}, {0x0, 0x800, {0x1}}, {0x0, 0x9, {0x0, 0xfff}}, {0xaf, 0x401, {0x2, 0x704}}, {0x3, 0x535d, {0x1, 0x2}}, {0x0, 0x2}, {0x2, 0x1, {0x2, 0x43313a52}}, {0x4, 0x2, {0x2, 0x7ff}}, {0x9, 0x0, {0xc1224ccae8e9f43e, 0x1df}}, {0xf, 0x515b, {0x2, 0x1000}}, {0x3, 0xfff9, {0x1}}, {0x8000, 0x401, {0x0, 0x1}}, {0x4, 0x0, {0x3, 0x3}}, {0x1, 0x2, {0x3, 0x4}}, {0x0, 0x6}, {0x6, 0x0, {0x2, 0x6}}, {0x4, 0x4, {0x1, 0x10001}}, {0x2, 0x7f, {0x0, 0x1}}, {0x200, 0x4, {0x3, 0x7fffffff}}, {0x1ff, 0x9, {0x1, 0x8}}, {0x101, 0x1, {0x0, 0x3}}, {0xdc, 0x3, {0x2, 0x80000000}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0xb9, 0x40, 0x9, 0x200, 0x28, 'syz1\x00', "a26d770f1c427aba9061f711267946cc5c230a82962a1cc2f94d48951ed0c539", "85c36b15d23857ea260558feb5e92684bac2ecb045193d95a19b83a1ebd36150", [{0x4, 0x703, {0x0, 0xf39}}, {0x1, 0x0, {0x2, 0x4}}, {0x2, 0x2, {0x2}}, {0x2, 0x22, {0x0, 0xff}}, {0x3ff, 0xfff, {0x1, 0x3}}, {0x100, 0x0, {0x0, 0x28cd}}, {0x7fff, 0x4, {0x2, 0xffffffff}}, {0x6, 0x401, {0x1, 0x7ff}}, {0x6, 0x0, {0x3, 0x6}}, {0x0, 0x3, {0x0, 0x2}}, {0x20, 0xfe56, {0x3, 0x10000}}, {0x200, 0xf2e1, {0x2, 0x2}}, {0x1, 0x0, {0x3, 0x80000000}}, {0x0, 0x401, {0x2, 0x5}}, {0xff, 0x4, {0x3, 0x9}}, {0x45c5, 0x5, {0x2, 0x3}}, {0x1c, 0x1f, {0x1, 0x4008}}, {0x2, 0x7, {0x0, 0x9fe1}}, {0x80b, 0x8000, {0x0, 0x9}}, {0x1, 0x800, {0x1, 0x2}}, {0x6, 0x80, {0x1, 0x3}}, {0xfffd, 0x40, {0x3, 0x18c}}, {0x81, 0x1, {0x1, 0x9}}, {0x5, 0x1, {0x3, 0x4}}, {0x1, 0x0, {0x3, 0x400}}, {0x4, 0x7, {0x1, 0x20}}, {0x0, 0x81, {0x3, 0x51c}}, {0x1, 0x9701}, {0x100, 0x800, {0x3, 0x3}}, {0x100, 0x3, {0x1}}, {0x81, 0x7, {0x2, 0xffff7fff}}, {0x200, 0x1, {0x1, 0x40}}, {0x7, 0x2, {0x1}}, {0xfff7, 0x4f, {0x3, 0x10001}}, {0x101, 0x7, {0x3, 0x40}}, {0x0, 0x9, {0x1, 0xffffffff}}, {0x9, 0x3, {0x1, 0x401}}, {0x40, 0xfff, {0x0, 0xff}}, {0x1, 0xcd88, {0x1, 0x5}}, {0x7f, 0x2, {0x1, 0x4}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) close(r1) sendfile(r5, r3, 0x0, 0x20000000000000d8) 02:47:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010060000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8929, &(0x7f00000000c0)={'sit0\x00', @ifru_hwaddr=@broadcast}) [ 844.659706][ T35] audit: type=1326 audit(1620528466.992:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=20810 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=40000003 syscall=403 compat=1 ip=0xf7f86549 code=0x0 [ 844.712707][T20816] loop5: detected capacity change from 0 to 512 [ 844.785133][T20816] EXT4-fs (loop5): orphan cleanup on readonly fs [ 844.792124][T20816] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 844.805678][T20816] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:47 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ba5023", 0x10, 0x3a, 0x0, @private1, @mcast2, {[@dstopts], @mlv2_report}}}}}, 0x0) 02:47:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 02:47:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010068000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:47 executing program 2: syz_emit_ethernet(0x148, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa11810028000800472e0136219078"], 0x0) [ 845.302297][ T3663] usb 5-1: new high-speed USB device number 51 using dummy_hcd 02:47:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 845.542537][ T3663] usb 5-1: Using ep0 maxpacket: 8 02:47:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000180)={'wlan0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) [ 845.648308][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.658932][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.671923][T20838] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 845.688584][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.701860][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.714224][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.730897][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 845.741162][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.985609][ T3663] usb 5-1: config 0 descriptor?? [ 846.038028][T20843] loop5: detected capacity change from 0 to 512 [ 846.096050][T20843] EXT4-fs (loop5): orphan cleanup on readonly fs [ 846.103801][T20843] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 846.115966][T20843] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 846.761858][ T3663] usbhid 5-1:0.0: can't add hid device: -71 [ 846.768645][ T3663] usbhid: probe of 5-1:0.0 failed with error -71 [ 846.822515][ T3663] usb 5-1: USB disconnect, device number 51 02:47:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}]}}, 0x0}, 0x0) 02:47:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xd2, 0x1000, 0x655}) 02:47:49 executing program 0: epoll_create(0x4) select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x9}, &(0x7f0000000240)={0x0, 0x2710}) 02:47:49 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7220b7", 0x0, 0x21, 0x0, @private1, @local}}}}, 0x0) 02:47:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001006c000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 847.436863][T20868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 847.448077][T20868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 847.459921][T20868] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 847.564069][T20872] loop5: detected capacity change from 0 to 512 [ 847.803736][T20872] EXT4-fs (loop5): orphan cleanup on readonly fs [ 847.811200][T20872] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 847.824146][T20872] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:50 executing program 0: pselect6(0x8d, &(0x7f0000000400)={0x0, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0) 02:47:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010074000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:50 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7220b7", 0x0, 0x21, 0x0, @private1, @local}}}}, 0x0) 02:47:50 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 848.171927][T10850] usb 5-1: new high-speed USB device number 52 using dummy_hcd 02:47:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 848.414574][T10850] usb 5-1: Using ep0 maxpacket: 8 [ 848.498106][T20885] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 848.508284][T20885] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 848.518678][T20885] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 848.552907][T10850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.564853][T10850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.575214][T10850] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.591889][T10850] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 848.602473][T10850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:47:51 executing program 0: socket$inet6(0xa, 0x0, 0x80000000) [ 848.911368][T10850] usb 5-1: config 0 descriptor?? [ 848.918698][T20892] loop5: detected capacity change from 0 to 512 [ 849.120003][T20892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 849.127571][T20892] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 849.139757][T20892] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 849.643298][T10850] usbhid 5-1:0.0: can't add hid device: -71 [ 849.649910][T10850] usbhid: probe of 5-1:0.0 failed with error -71 [ 849.680436][T10850] usb 5-1: USB disconnect, device number 52 02:47:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xc, "c74c"}]}}, 0x0}, 0x0) 02:47:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000080)={'team_slave_0\x00', @ifru_hwaddr=@broadcast}) 02:47:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001007a000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:52 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7220b7", 0x0, 0x21, 0x0, @private1, @local}}}}, 0x0) 02:47:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x8}]}) 02:47:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247000062", 0x65, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 850.598651][T20916] loop5: detected capacity change from 0 to 512 [ 850.667763][T20920] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.678601][T20920] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.690174][T20920] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:47:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100cb000000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:53 executing program 0: syz_emit_ethernet(0x102, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fe3e1b", 0xcc, 0x2f, 0x0, @mcast1, @empty, {[@srh={0x2e, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @dev, @remote, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @remote, @loopback, @mcast2]}]}}}}}, 0x0) [ 850.895220][T20916] EXT4-fs (loop5): orphan cleanup on readonly fs [ 850.902036][T20916] EXT4-fs error (device loop5): ext4_orphan_get:1412: comm syz-executor.5: bad orphan inode 69 [ 850.913442][T20916] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 02:47:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$char_raw(r0, 0x0, 0x0) 02:47:53 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7220b7", 0x0, 0x21, 0x0, @private1, @local}}}}, 0x0) [ 851.171890][ T3663] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 851.441802][ T3663] usb 5-1: Using ep0 maxpacket: 8 02:47:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 851.562740][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.574391][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.584820][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 851.599209][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 851.608757][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.705258][T20933] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:47:54 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7220b7", 0x0, 0x21, 0x0, @empty, @mcast2}}}}, 0x0) [ 852.018552][ T3663] usb 5-1: config 0 descriptor?? [ 852.217114][T20939] loop5: detected capacity change from 0 to 512 [ 852.279713][T20939] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 852.768783][ T3663] usbhid 5-1:0.0: can't add hid device: -71 [ 852.775626][ T3663] usbhid: probe of 5-1:0.0 failed with error -71 [ 852.817744][ T3663] usb 5-1: USB disconnect, device number 53 02:47:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000001640)={'veth1_virt_wifi\x00', @ifru_names}) 02:47:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000030000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:55 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 02:47:55 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') read$char_raw(r0, &(0x7f00000000c0)=ANY=[], 0xf800) 02:47:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 853.566590][T20964] __nla_validate_parse: 2 callbacks suppressed [ 853.566653][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.585739][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.596068][T20964] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 853.624375][T20962] loop5: detected capacity change from 0 to 512 02:47:56 executing program 2: r0 = socket(0x1, 0x2, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 02:47:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$char_raw(r0, &(0x7f0000000200)={""/59266}, 0xe800) [ 853.764437][T20962] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 02:47:56 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 02:47:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010040040000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, &(0x7f0000013c00)=ANY=[]) [ 854.332265][ T56] usb 5-1: new high-speed USB device number 54 using dummy_hcd 02:47:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffdcc, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev}]}, 0x3c}}, 0x0) [ 854.457210][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 854.467768][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 854.478201][T20982] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 854.544117][T20983] loop5: detected capacity change from 0 to 512 [ 854.588579][T20983] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 854.596844][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 854.732037][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.745125][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.756435][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 854.770806][ T56] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 854.780767][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.948680][ T56] usb 5-1: config 0 descriptor?? [ 855.690109][ T56] usbhid 5-1:0.0: can't add hid device: -71 [ 855.698305][ T56] usbhid: probe of 5-1:0.0 failed with error -71 [ 855.745253][ T56] usb 5-1: USB disconnect, device number 54 02:47:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:47:58 executing program 0: r0 = epoll_create(0x1) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 02:47:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$char_raw(r0, 0x0, 0x0) 02:47:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000050000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:47:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)=ANY=[]) 02:47:58 executing program 2: r0 = socket(0xa, 0x3, 0x7) bind$bt_rfcomm(r0, 0x0, 0x0) [ 856.620385][T21014] loop5: detected capacity change from 0 to 512 [ 856.658478][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 856.671101][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 856.683508][T21019] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 856.733824][T21014] EXT4-fs warning (device loop5): read_mmp_block:107: Error -117 while reading MMP block 0 02:47:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_pwait(r0, &(0x7f0000001440)=[{}], 0x1, 0x0, 0x0, 0x0) 02:47:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)=ANY=[]) 02:47:59 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @broadcast}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 02:47:59 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e811", 0x8, 0x3a, 0x0, @private1, @mcast2, {[], @echo_reply}}}}}, 0x0) [ 857.101772][T18325] usb 5-1: new high-speed USB device number 55 using dummy_hcd 02:47:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000060000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 857.362248][T18325] usb 5-1: Using ep0 maxpacket: 8 [ 857.440553][T21031] loop5: detected capacity change from 0 to 512 [ 857.492092][T18325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.506464][T18325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.517441][T18325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.531193][T18325] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:47:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0xfffffffffffffe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 857.540824][T18325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.579075][T21031] EXT4-fs warning (device loop5): read_mmp_block:107: Error -117 while reading MMP block 0 [ 857.707580][T21037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 857.833843][T18325] usb 5-1: config 0 descriptor?? [ 858.562170][T18325] usbhid 5-1:0.0: can't add hid device: -71 [ 858.569156][T18325] usbhid: probe of 5-1:0.0 failed with error -71 [ 858.596419][T18325] usb 5-1: USB disconnect, device number 55 02:48:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x0, &(0x7f0000013c00)=ANY=[]) 02:48:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000070000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)) 02:48:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000580)={'veth1_to_bridge\x00', @ifru_map}) 02:48:01 executing program 2: syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "395813", 0x54, 0x6, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x11, 0xf989, "f0c58af199204733c2aa298fff"}, @md5sig={0x13, 0x12, "eb40bc196c7a8d6b524f69347ebd447e"}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) [ 859.267940][T21060] loop5: detected capacity change from 0 to 512 [ 859.388930][T21066] __nla_validate_parse: 2 callbacks suppressed [ 859.388995][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.407446][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.417354][T21066] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 859.447332][T21060] EXT4-fs warning (device loop5): read_mmp_block:107: Error -117 while reading MMP block 0 02:48:01 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) 02:48:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'netdevsim0\x00', @link_local}) [ 859.672109][ T3663] usb 5-1: new high-speed USB device number 56 using dummy_hcd 02:48:02 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ba5023", 0x40, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bb36e9", 0x0, 0x0, 0x0, @loopback, @empty, [@dstopts={0x32}], "80b90a9a7894f7ca"}}}}}}}, 0x0) 02:48:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000090000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, 0x0) [ 859.933075][ T3663] usb 5-1: Using ep0 maxpacket: 8 [ 860.062689][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.075303][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.086563][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.100376][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 860.110210][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.166697][T21079] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 860.176690][T21079] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 860.186911][T21079] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='status\x00') read$char_raw(r0, 0x0, 0x0) [ 860.287269][T21082] loop5: detected capacity change from 0 to 512 [ 860.477958][ T3663] usb 5-1: config 0 descriptor?? [ 861.222626][ T3663] usbhid 5-1:0.0: can't add hid device: -71 [ 861.229534][ T3663] usbhid: probe of 5-1:0.0 failed with error -71 [ 861.267551][ T3663] usb 5-1: USB disconnect, device number 56 02:48:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x0, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:04 executing program 3: r0 = epoll_create(0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) 02:48:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x2}]}) epoll_create(0x1) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sync() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 02:48:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000a0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, 0x0) 02:48:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$char_raw(r0, &(0x7f0000000200)={""/8564}, 0x2200) [ 862.164405][T21109] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.175366][T21109] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.185182][T21109] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 862.271766][T21110] loop5: detected capacity change from 0 to 512 02:48:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xf800) 02:48:05 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 02:48:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f00000000c0)="1a5e7b402ca8679b45", 0x9, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x6800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d", 0x3d, 0x11100}], 0x1, 0x0) 02:48:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') read$char_raw(r0, 0x0, 0x0) 02:48:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000b0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 862.922180][ T56] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 863.204608][T21131] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 863.234386][ T56] usb 5-1: Using ep0 maxpacket: 8 02:48:05 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x1e, 0x0, 0x10, 0x0, 0x7f}) [ 863.350352][T21133] loop5: detected capacity change from 0 to 512 [ 863.383809][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.395848][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.407038][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 863.421245][ T56] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 863.431675][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.791290][ T56] usb 5-1: config 0 descriptor?? [ 864.278823][ T56] hid-generic 0003:046D:4011.0006: unknown main item tag 0x0 [ 864.286850][ T56] hid-generic 0003:046D:4011.0006: item fetching failed at offset 3/6 [ 864.324549][ T56] hid-generic: probe of 0003:046D:4011.0006 failed with error -22 [ 864.479167][ T3663] usb 5-1: USB disconnect, device number 57 02:48:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x0, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:07 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='THAWED\x00', 0x7) 02:48:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100c00b0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') read$char_raw(r0, 0x0, 0x0) 02:48:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$char_raw(r0, 0x0, 0x0) 02:48:07 executing program 2: syz_open_dev$rtc(&(0x7f0000000580), 0x3, 0x123a41) [ 865.354315][T21165] __nla_validate_parse: 2 callbacks suppressed [ 865.354386][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.373697][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 865.386480][T21165] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:48:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') read$char_raw(r0, &(0x7f0000001200)={""/18180}, 0x4800) 02:48:08 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udp6\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100c10b0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 865.971895][ T56] usb 5-1: new high-speed USB device number 58 using dummy_hcd 02:48:08 executing program 5: rt_sigpending(&(0x7f0000000000), 0x32) [ 866.218229][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 866.343246][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.355522][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.366562][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.381363][ T56] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 866.391238][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.504807][T21181] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 866.517108][T21181] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 866.528133][T21181] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 866.712775][ T56] usb 5-1: config 0 descriptor?? [ 867.186146][ T56] hid-generic 0003:046D:4011.0007: unknown main item tag 0x0 [ 867.195000][ T56] hid-generic 0003:046D:4011.0007: item fetching failed at offset 3/6 [ 867.232551][ T56] hid-generic: probe of 0003:046D:4011.0007 failed with error -22 [ 867.390260][ T3663] usb 5-1: USB disconnect, device number 58 02:48:10 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x0, "c74c"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:10 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') read$char_raw(r0, &(0x7f0000000200)={""/49575}, 0xc200) 02:48:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 02:48:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100c20b0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:10 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) write$ppp(r0, 0x0, 0x0) [ 868.363451][T21205] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.375914][T21205] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 868.386506][T21205] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:11 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b0e101", 0x14, 0x11, 0x0, @empty, @mcast2, {[@srh], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 02:48:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_UIE_ON(r0, 0x7003) 02:48:11 executing program 5: r0 = socket(0xa, 0x3, 0x7) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) 02:48:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000c0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') read$char_raw(r0, &(0x7f0000000200)={""/16491}, 0x4200) [ 869.041806][T18325] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 869.281765][T18325] usb 5-1: Using ep0 maxpacket: 8 [ 869.402872][T18325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.415169][T18325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.425467][T18325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 869.438841][T18325] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 869.448773][T18325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:48:11 executing program 2: socket(0x0, 0x8000d, 0x0) [ 869.538724][T21222] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 869.843068][T18325] usb 5-1: config 0 descriptor?? [ 870.315877][T18325] hid-generic 0003:046D:4011.0008: unknown main item tag 0x0 [ 870.323805][T18325] hid-generic 0003:046D:4011.0008: item fetching failed at offset 3/6 [ 870.372234][T18325] hid-generic: probe of 0003:046D:4011.0008 failed with error -22 [ 870.517190][T18325] usb 5-1: USB disconnect, device number 59 02:48:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000d0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') read$char_raw(r0, &(0x7f0000000200)={""/16491}, 0x4200) 02:48:13 executing program 5: syz_emit_ethernet(0x83, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b0e101", 0x4d, 0x11, 0x0, @empty, @mcast2, {[@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x2890, [@dev, @private2]}], {0x0, 0x0, 0x25, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "baa8bbaf939eacfb6e3785d3b71b77623e9b989eda8b9af3ad"}}}}}}}, 0x0) 02:48:13 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$CHAR_RAW_IOOPT(0xffffffffffffffff, 0x1279, 0x0) [ 871.386558][ T35] audit: type=1326 audit(1620528493.722:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21248 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f10549 code=0x0 02:48:13 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') read$char_raw(r0, &(0x7f0000000200)={""/16491}, 0x4200) 02:48:13 executing program 5: syz_emit_ethernet(0x102, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "038205", 0xcc, 0x2f, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@loopback, @dev, @private0, @dev, @private1, @local, @private1, @mcast1]}]}}}}}, 0x0) 02:48:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000e0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 871.891960][ T4695] usb 5-1: new high-speed USB device number 60 using dummy_hcd 02:48:14 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) [ 872.139455][T21267] __nla_validate_parse: 2 callbacks suppressed [ 872.139674][T21267] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 872.158902][T21267] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 872.168930][T21267] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 872.188095][ T4695] usb 5-1: Using ep0 maxpacket: 8 [ 872.201880][ T35] audit: type=1326 audit(1620528494.532:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21248 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f10549 code=0x0 [ 872.349145][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.362009][ T4695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.374833][ T4695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.389155][ T4695] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 02:48:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$char_raw(r0, 0x0, 0x4200) [ 872.399442][ T4695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.649483][ T4695] usb 5-1: config 0 descriptor?? [ 873.116534][ T4695] hid-generic 0003:046D:4011.0009: collection stack underflow [ 873.127557][ T4695] hid-generic 0003:046D:4011.0009: item 0 0 0 12 parsing failed [ 873.138679][ T4695] hid-generic: probe of 0003:046D:4011.0009 failed with error -22 [ 873.320705][T18319] usb 5-1: USB disconnect, device number 60 02:48:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:16 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') read$char_raw(r0, &(0x7f0000000200)={""/16491}, 0x4200) 02:48:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100000f0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') read$char_raw(r0, 0x0, 0x0) 02:48:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') read$char_raw(r0, 0x0, 0x0) 02:48:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$char_raw(r0, 0x0, 0x4200) [ 874.416441][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.426471][T21299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.436324][T21299] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:17 executing program 0: syz_open_dev$loop(0xfffffffffffffffe, 0x0, 0x0) 02:48:17 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 02:48:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000ac0)=ANY=[], 0x5b0}}, 0x0) 02:48:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') read$char_raw(r0, &(0x7f0000000080)=ANY=[], 0xf800) read$char_raw(r0, &(0x7f0000011c40)=ANY=[], 0xe800) read$char_raw(r0, &(0x7f000000ec00)={""/10905}, 0x2c00) read$char_raw(r0, 0x0, 0x0) 02:48:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000110000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 875.071821][ T3663] usb 5-1: new high-speed USB device number 61 using dummy_hcd 02:48:17 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c3a652", 0x8, 0x3a, 0x0, @remote, @private1, {[], @mlv2_report}}}}}, 0x0) [ 875.325339][ T3663] usb 5-1: Using ep0 maxpacket: 8 [ 875.444014][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 875.454157][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 875.463913][T21315] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 875.474655][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.486299][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.496564][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.510087][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 875.519923][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.663544][ T3663] usb 5-1: config 0 descriptor?? [ 876.155944][ T3663] hid-generic 0003:046D:4011.000A: collection stack underflow [ 876.163992][ T3663] hid-generic 0003:046D:4011.000A: item 0 0 0 12 parsing failed [ 876.206889][ T3663] hid-generic: probe of 0003:046D:4011.000A failed with error -22 [ 876.388661][ T3663] usb 5-1: USB disconnect, device number 61 02:48:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='cpuset\x00') read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0xf800) 02:48:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 02:48:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') read$char_raw(r0, 0x0, 0x0) 02:48:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000120000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') read$char_raw(r0, &(0x7f0000000200)={""/54812}, 0xd800) 02:48:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) [ 877.297553][ T35] audit: type=1326 audit(1620528499.632:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21338 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f10549 code=0x0 [ 877.379975][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 877.390385][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 877.400161][T21345] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) 02:48:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:48:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newae={0x130, 0x1e, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@empty}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote}, @in=@broadcast}}, @offload={0xc}]}, 0x130}}, 0x0) 02:48:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100001c0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 877.956222][ T35] audit: type=1326 audit(1620528500.292:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21350 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f7c549 code=0x0 [ 877.973633][T21355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 878.012321][ T3663] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 878.185688][ T35] audit: type=1326 audit(1620528500.412:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21338 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f10549 code=0x0 [ 878.213627][ T3124] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.213789][ T3124] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.228311][ T35] audit: type=1326 audit(1620528500.472:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21351 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f86549 code=0x0 [ 878.300172][ T3663] usb 5-1: Using ep0 maxpacket: 8 02:48:20 executing program 3: r0 = socket(0x1, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) [ 878.452734][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.465124][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.476752][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.492996][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 878.503902][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.563264][T21360] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 878.574280][T21360] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 878.584639][T21360] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73666e6c9200080101000440002000f801", 0x17}, {0x0, 0x0, 0x1000}, {0x0}], 0x0, &(0x7f0000010f00)) [ 878.661930][ T3663] usb 5-1: config 0 descriptor?? [ 878.766322][ T35] audit: type=1326 audit(1620528501.102:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21350 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f7c549 code=0x0 02:48:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000200000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 878.943827][ T35] audit: type=1326 audit(1620528501.282:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21351 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=403 compat=1 ip=0xf7f86549 code=0x0 [ 879.147571][ T3663] hid-generic 0003:046D:4011.000B: collection stack underflow [ 879.155708][ T3663] hid-generic 0003:046D:4011.000B: item 0 0 0 12 parsing failed [ 879.230590][ T3663] hid-generic: probe of 0003:046D:4011.000B failed with error -22 [ 879.347666][ T56] usb 5-1: USB disconnect, device number 62 [ 879.467414][T21379] loop2: detected capacity change from 0 to 16 [ 879.486594][T21380] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 879.497359][T21380] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 879.506993][T21380] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 879.525235][T21379] FAT-fs (loop2): Directory bread(block 5) failed [ 879.641807][T21385] loop2: detected capacity change from 0 to 16 [ 879.679780][T21385] FAT-fs (loop2): Directory bread(block 5) failed 02:48:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "c7"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:22 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 02:48:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') read$char_raw(r0, &(0x7f0000000080)=ANY=[], 0xf800) read$char_raw(r0, 0x0, 0x0) 02:48:22 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0xa7d7}) 02:48:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000250000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x0) 02:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 02:48:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$char_raw(r0, &(0x7f0000000200)={""/49575}, 0xc200) 02:48:22 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) select(0x40, &(0x7f00000003c0), &(0x7f0000000400)={0x2}, &(0x7f0000000440)={0x8}, &(0x7f0000000480)={0x77359400}) 02:48:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010004400000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f000000c400)=ANY=[], 0xc200) [ 880.792284][ T3663] usb 5-1: new high-speed USB device number 63 using dummy_hcd 02:48:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0x4, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000ac9f131d7e5da521a3af487237a75396184840ab38a66781cdc1bdac54fbcf9f11c1c8d3b451c8e513c2c713824f346bd2c865518780e9a99f48b5ba8c32f1b6315f959c", @ANYRES16=0x0, @ANYBLOB="00010000000000000add89117a0f484125534e13b3970c66008161cff698a5ed54fecd306e7cd4e37cde9dab84324114d72d58000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080c4}, 0x0) [ 881.062105][ T3663] usb 5-1: Using ep0 maxpacket: 8 [ 881.219195][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.232658][ T3663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.244650][ T3663] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.258235][ T3663] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 881.268086][ T3663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.453796][ T3663] usb 5-1: config 0 descriptor?? [ 881.939485][ T3663] hid-generic 0003:046D:4011.000C: collection stack underflow [ 881.947521][ T3663] hid-generic 0003:046D:4011.000C: item 0 1 0 12 parsing failed [ 881.964126][ T3663] hid-generic: probe of 0003:046D:4011.000C failed with error -22 [ 882.159040][ T3663] usb 5-1: USB disconnect, device number 63 02:48:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "c7"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:25 executing program 2: r0 = socket(0x2, 0x3, 0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:48:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010088470000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:25 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "395813", 0x18, 0x6, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0) 02:48:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x650081, 0x0) [ 883.045825][T21448] __nla_validate_parse: 6 callbacks suppressed [ 883.045894][T21448] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 883.063786][T21448] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 883.074158][T21448] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:25 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') 02:48:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xffffffffffffff95) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x452101, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x2, @none, 0xff, 0x2}, 0xe) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x581, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000a60000007b9a6040012399eda1d3991aa08235b72ec1c45673c8a7e9eac6f511ad81f868c8a701d50f302c978cd8800e09d50a8160152b2461b19b181a1cbfb4dda9cbca6dc7532090500b987a9206189cab23ce4ba21044b45b176f5e588fc43e8418b65281b4f23717cf6cf6098e265755c4918065f86ea897ef90eba4c179fe44eec765cd1e467dc788ca9d0ef9379a795a1866251bbc436793e3c405cd1976e298168cec23593f00"]) 02:48:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r0) 02:48:26 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 02:48:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000480000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 883.992343][ T18] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 884.232630][ T18] usb 5-1: Using ep0 maxpacket: 8 [ 884.373202][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.386148][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.398257][ T18] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.415031][ T18] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 884.426421][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:48:26 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0xf7, 0x65002) [ 884.645054][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 884.656139][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 884.668646][T21467] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 884.826151][ T18] usb 5-1: config 0 descriptor?? [ 885.326118][ T18] hid-generic 0003:046D:4011.000D: collection stack underflow [ 885.334301][ T18] hid-generic 0003:046D:4011.000D: item 0 1 0 12 parsing failed [ 885.388664][ T18] hid-generic: probe of 0003:046D:4011.000D failed with error -22 [ 885.568212][T11396] usb 5-1: USB disconnect, device number 64 02:48:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x4011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "c7"}, @global=@item_4={0x3, 0x1, 0x0, "640880a2"}]}}, 0x0}, 0x0) 02:48:28 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') read$char_raw(r0, &(0x7f000000c400)={""/30522}, 0x7800) 02:48:28 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c3a652", 0x8, 0x3a, 0x0, @loopback, @private1, {[], @mlv2_report}}}}}, 0x0) 02:48:28 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 02:48:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010088480000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') read$char_raw(r0, &(0x7f0000000200)={""/11486}, 0x2e00) [ 886.430761][T21493] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 886.442234][T21493] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 886.454457][T21493] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:29 executing program 0: socket(0x2, 0x2, 0x5) 02:48:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xffffffffffffffb8, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e504bcd5", @ANYRES16, @ANYBLOB="04002dbd7000ffdbdf251074a284cbc6cb0000000800d5cfcf7ffecedc0807e6733f412fa5f29477933ee5f5bd"], 0x1c}, 0x1, 0x0, 0x0, 0x24008004}, 0x1000000c) 02:48:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) 02:48:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') read$char_raw(r0, &(0x7f0000000080)=ANY=[], 0xf800) read$char_raw(r0, 0x0, 0x0) 02:48:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100004c0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 887.033080][T11396] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 887.292014][T11396] usb 5-1: Using ep0 maxpacket: 8 [ 887.423386][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.436092][T11396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.448522][T11396] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.462575][T11396] usb 5-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 887.473021][T11396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:48:29 executing program 0: syz_emit_ethernet(0xffffffffffffffd2, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b0e101", 0x29, 0x11, 0x0, @empty, @mcast2, {[@hopopts={0x0, 0x0, '\x00', [@enc_lim, @enc_lim, @jumbo, @enc_lim, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@private1, @mcast1, @dev, @mcast1, @mcast2, @local, @empty, @local, @local]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@private1, @mcast1, @mcast1, @remote, @dev]}], {0x0, 0x0, 0x29, 0x0, @gue={{0x1}, "baa8bbaf939eacfb6e3785d3b71b77623e9b989eda8b9af3ad9dd9352e"}}}}}}}, 0x0) [ 887.629532][T21516] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 887.766203][T11396] usb 5-1: config 0 descriptor?? [ 888.246257][T11396] hid-generic 0003:046D:4011.000E: collection stack underflow [ 888.254953][T11396] hid-generic 0003:046D:4011.000E: item 0 1 0 12 parsing failed [ 888.316794][T11396] hid-generic: probe of 0003:046D:4011.000E failed with error -22 [ 888.458335][T11396] usb 5-1: USB disconnect, device number 65 02:48:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$char_raw(r0, 0x0, 0x0) read$char_raw(r0, &(0x7f0000000200)={""/50519}, 0xc600) 02:48:31 executing program 3: r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 02:48:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 02:48:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 02:48:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010065580000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 889.432864][T21544] __nla_validate_parse: 2 callbacks suppressed [ 889.432929][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 889.452110][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 889.463706][T21544] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:31 executing program 4: r0 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000180)) 02:48:32 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x40) 02:48:32 executing program 2: syz_open_dev$rtc(&(0x7f0000000040), 0x80, 0x230000) 02:48:32 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select(0x40, &(0x7f00000003c0), &(0x7f0000000400)={0x2}, &(0x7f0000000440)={0x8}, 0x0) 02:48:32 executing program 0: r0 = socket(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) 02:48:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000600000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 02:48:32 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) 02:48:32 executing program 5: sync() prctl$PR_GET_SECCOMP(0x15) socket$inet6(0xa, 0x0, 0x80000000) 02:48:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') read$char_raw(r0, 0x0, 0xf800) read$char_raw(r0, &(0x7f000000ea40)=ANY=[], 0xe800) [ 890.540365][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 890.552131][T21560] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 890.563038][T21560] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') read$char_raw(r0, &(0x7f0000000200)={""/49575}, 0xc200) read$char_raw(r0, 0x0, 0x0) 02:48:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@empty}}, 0x40}}, 0x0) 02:48:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010058650000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') read$char_raw(r0, &(0x7f0000000080)=ANY=[], 0xf800) read$char_raw(r0, 0x0, 0x0) [ 891.245958][T21575] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 891.256457][T21575] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 891.266501][T21575] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 02:48:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000001240)={'veth1_vlan\x00', @ifru_hwaddr=@broadcast}) 02:48:33 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'ip6erspan0\x00', @ifru_data=0x0}) 02:48:34 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) 02:48:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000680000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/arp\x00') read$char_raw(r0, &(0x7f0000000400)={""/63609}, 0xfa00) 02:48:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$char_raw(r0, 0x0, 0x0) [ 892.150483][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xf8}, {}]}) 02:48:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100006c0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:34 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "395813", 0x58, 0x6, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x11, 0xf989, "f0c58af199204733c2aa298fff"}, @md5sig={0x13, 0x12, "eb40bc196c7a8d6b524f69347ebd447e"}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 02:48:35 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @dev}}}}}, 0x0) 02:48:35 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @loopback}}}}}, 0x0) 02:48:35 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @private=0xa010102, {[@lsrr={0x83, 0x3, 0x2c}]}}, @redirect={0x5, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 02:48:35 executing program 0: syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "13a329", 0x24, 0x6, 0x0, @private0, @mcast2, {[@dstopts={0x0, 0x0, '\x00', [@generic={0x0, 0x3, "3a41fc"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:48:35 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 02:48:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000740000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x3, 0x0, &(0x7f0000000280)) 02:48:35 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback}, {0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 02:48:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') read$char_raw(r0, 0x0, 0x0) 02:48:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read$char_raw(r0, 0x0, 0x0) 02:48:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100007a0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:36 executing program 4: syz_emit_ethernet(0x40, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d3055a", 0xa, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @remote, {[@srh={0x33}], "95b4"}}}}}, 0x0) 02:48:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, 0x0, 0x0) 02:48:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)) 02:48:36 executing program 3: syz_emit_ethernet(0x102, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6003820500cc3c00fe8000000000000000000000000000aafe"], 0x0) 02:48:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000810000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:36 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') read$char_raw(r0, 0x0, 0x4200) 02:48:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') read$char_raw(r0, &(0x7f0000000200)={""/28104}, 0x6e00) 02:48:37 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xffffffffffffff3b) 02:48:37 executing program 5: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='J', 0x1, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 02:48:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') read$char_raw(r0, 0x0, 0x4200) [ 894.859249][T21645] __nla_validate_parse: 11 callbacks suppressed [ 894.859312][T21645] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 894.880661][T21645] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 894.891190][T21645] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') read$char_raw(r0, 0x0, 0xf800) read$char_raw(r0, &(0x7f0000000200)={""/54812}, 0xd800) 02:48:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010047880000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4}, 0x1c}}, 0x0) 02:48:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$char_raw(r0, 0x0, 0xe800) 02:48:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_raw(r0, 0x0, 0x0) 02:48:37 executing program 3: socket$inet6(0xa, 0x3, 0xd) [ 895.770084][T21662] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 895.779853][T21662] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 895.790200][T21662] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:38 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000840)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c4a300", 0x4c, 0x2f, 0x0, @local, @local, {[@fragment={0x1d}]}}}}}, 0x0) 02:48:38 executing program 4: r0 = socket(0x1, 0x801, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 02:48:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 02:48:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@empty}}, 0x40}}, 0x0) select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x9}, &(0x7f0000000240)={0x0, 0x2710}) 02:48:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010048880000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:38 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 02:48:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7837e90f9bc527f98c2f31a1639642e14c97abde91b53a3a0073c7217a558b55ce418d8b867293163bba246c55e7a0732d078c955a1b7425bba2d359b3fa14ca"}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 02:48:39 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) [ 896.735681][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 896.745959][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 896.756206][T21681] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:39 executing program 2: r0 = epoll_create(0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xe0002006}) 02:48:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') read$char_raw(r0, 0x0, 0x0) 02:48:39 executing program 3: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 02:48:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000bc00000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 02:48:39 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) 02:48:40 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 897.691363][T21707] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') read$char_raw(r0, 0x0, 0xf800) read$char_raw(r0, 0x0, 0xe800) 02:48:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000bc10000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:40 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ed0270", 0x8, 0x0, 0x0, @local, @private2, {[@dstopts]}}}}}, 0x0) 02:48:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$char_raw(r0, &(0x7f000000c440)=ANY=[], 0xc200) 02:48:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 02:48:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$char_raw(r0, 0x0, 0x0) 02:48:41 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') read$char_raw(r0, 0x0, 0x4200) read$char_raw(r0, &(0x7f0000000200)={""/62868}, 0xf600) 02:48:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000bc20000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:41 executing program 4: msgsnd(0x0, &(0x7f0000000040)={0x3, "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"}, 0xfd1, 0x0) 02:48:41 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ed0270", 0x0, 0x87, 0x0, @local, @private2}}}}, 0x0) 02:48:41 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 02:48:41 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @loopback}}}}}, 0x0) 02:48:41 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @random="c8d3bc661592", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private, @broadcast}}}}, 0x0) 02:48:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000cb0000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:41 executing program 4: syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7220b7", 0x30, 0x0, 0x0, @empty, @mcast2, {[@hopopts={0x0, 0x5, '\x00', [@calipso={0x7, 0x8}, @pad1, @enc_lim, @hao={0xc9, 0x10, @mcast2}, @enc_lim, @enc_lim]}]}}}}}, 0x0) 02:48:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1}}}}}, 0x0) 02:48:42 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8e800, 0x0) [ 899.869675][T21748] __nla_validate_parse: 8 callbacks suppressed [ 899.869743][T21748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 899.894883][T21748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 899.907246][T21748] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') read$char_raw(r0, 0x0, 0xf800) read$char_raw(r0, &(0x7f0000000400)={""/4818}, 0x1400) 02:48:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$char_usb(r0, 0x0, 0x0) 02:48:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000580), 0x4) 02:48:42 executing program 2: syz_emit_ethernet(0x137, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60b0e1010101110000000000000000000000000000000000ff02"], 0x0) 02:48:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000400300000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:42 executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ff27", 0x28, 0x3a, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 02:48:43 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}}, 0x0) 02:48:43 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x0, 0x7ff}]}) 02:48:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000200)=0x3fc, 0x4) [ 900.968498][T21768] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 900.978635][T21768] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 900.989076][T21768] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$char_raw(r0, &(0x7f0000004540)=ANY=[@ANYBLOB='\x00'], 0x4200) 02:48:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$char_raw(r0, &(0x7f0000004540)=ANY=[], 0x4200) 02:48:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000034000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') read$char_raw(r0, 0x0, 0x0) 02:48:44 executing program 5: syz_open_dev$rtc(&(0x7f0000000080), 0x1, 0x80903) openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) 02:48:44 executing program 3: r0 = epoll_create(0x4) r1 = socket(0x11, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 02:48:44 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x452101, 0x0) [ 901.999486][T21785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 902.010227][T21785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 902.022331][T21785] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:44 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$char_raw(r0, &(0x7f0000004540)=ANY=[], 0x4200) 02:48:44 executing program 4: r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1, &(0x7f0000000040)={[0xfff]}, 0x8) 02:48:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8804000030000100ffffe000000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') read$char_raw(r0, 0x0, 0x0) 02:48:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={0x0, 0xffffffffffffff62}}, 0x0) 02:48:45 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, 0x0) [ 902.899833][T21800] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$char_raw(r0, &(0x7f0000004540)=ANY=[], 0x4200) 02:48:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4}, 0x6c) 02:48:45 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5457, &(0x7f0000000080)) 02:48:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000001000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:45 executing program 3: syz_io_uring_setup(0x27f0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:48:46 executing program 2: r0 = socket(0x11, 0xa, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 02:48:46 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$char_raw(r0, &(0x7f0000004540)=ANY=[], 0x4200) 02:48:46 executing program 4: syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)) 02:48:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000002000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000001900000028000180090003000004"], 0x3c}}, 0x0) 02:48:46 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000400)={0x8}, &(0x7f0000000440)={0x2}, 0x0, 0x0, 0x0) 02:48:46 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) setuid(0x0) [ 904.617031][T21827] fuse: Bad value for 'fd' [ 904.672635][T21827] fuse: Bad value for 'fd' 02:48:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000640)=""/191, 0x32, 0xbf, 0x1}, 0x20) 02:48:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000003000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:47 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540b, 0x0) [ 904.935475][T21830] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 904.996058][T21832] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 905.230371][T21836] __nla_validate_parse: 8 callbacks suppressed [ 905.230438][T21836] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 905.250237][T21836] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 905.262120][T21836] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 02:48:47 executing program 2: io_setup(0x5, &(0x7f0000000200)=0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 02:48:48 executing program 3: r0 = syz_io_uring_setup(0x377, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 02:48:48 executing program 0: r0 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 02:48:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000004000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)) 02:48:48 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5408, &(0x7f0000000080)) 02:48:48 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f00009d6000/0x2000)=nil) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xffdffffe, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000bc7000/0x3000)=nil) open(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) [ 906.386328][T21855] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 906.398734][T21855] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 906.410739][T21855] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)={0x2, 'vlan1\x00'}) 02:48:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540c, 0x0) 02:48:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x8982, &(0x7f0000000000)) 02:48:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000005000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:49 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000080)='dctcp\x00', 0x6) [ 907.306485][T21871] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 907.318294][T21871] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 907.334515][T21871] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 02:48:49 executing program 0: syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x900) 02:48:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000005802"], &(0x7f0000000080)=""/213, 0x75, 0xd5, 0x1}, 0x20) 02:48:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000006000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5425, 0x0) 02:48:50 executing program 3: socketpair(0xa, 0x803, 0x87, &(0x7f0000000040)) [ 908.360172][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:51 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xbc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:51 executing program 0: bpf$PROG_LOAD(0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:48:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5456, &(0x7f0000000080)) 02:48:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000007000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:51 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r2, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x0) 02:48:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x802c542a, &(0x7f0000000080)) 02:48:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000008000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x609}) 02:48:52 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0xc0285443, 0x0) 02:48:52 executing program 3: io_setup(0x5, &(0x7f0000000200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000000c0)="e4a3", 0x5c}]) 02:48:52 executing program 2: socketpair(0xa, 0x803, 0xa0, &(0x7f0000000040)) 02:48:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5419, &(0x7f0000000080)) 02:48:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="880400003000010000000009000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 02:48:52 executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0) 02:48:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={0x0, 0x64, &(0x7f00000004c0)={&(0x7f00000001c0)={0x3c, r1, 0x201, 0x0, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x0) 02:48:53 executing program 3: r0 = socket(0x10, 0x3, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 02:48:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01020000000000000000190000002800018008"], 0x3c}}, 0x0) [ 911.005569][T21930] __nla_validate_parse: 11 callbacks suppressed [ 911.005633][T21930] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 911.022998][T21930] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 911.032655][T21930] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 911.108362][T21933] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 911.270686][T21937] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 02:48:53 executing program 0: r0 = socket(0x2c, 0x3, 0x0) connect$vsock_stream(r0, 0x0, 0x0) 02:48:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x0) fstat(r0, &(0x7f0000000200)) 02:48:53 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) openat$full(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) 02:48:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000a000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:54 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5441, 0x0) 02:48:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 912.087360][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 912.098174][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 912.108277][T21949] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000080)) 02:48:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 02:48:54 executing program 2: sysfs$2(0x2, 0x8, &(0x7f00000001c0)=""/174) 02:48:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) 02:48:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000b000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 912.786442][T21959] ===================================================== [ 912.791557][T21959] BUG: KMSAN: uninit-value in hsr_addr_subst_dest+0x626/0x860 [ 912.796255][T21959] CPU: 1 PID: 21959 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 912.796255][T21959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.796255][T21959] Call Trace: [ 912.796255][T21959] dump_stack+0x24c/0x2e0 [ 912.796255][T21959] kmsan_report+0xfb/0x1e0 [ 912.796255][T21959] __msan_warning+0x5c/0xa0 [ 912.796255][T21959] hsr_addr_subst_dest+0x626/0x860 [ 912.839955][T21959] hsr_forward_skb+0x1d27/0x27f0 [ 912.839955][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.839955][T21959] hsr_dev_xmit+0x133/0x230 [ 912.839955][T21959] ? is_hsr_master+0xb0/0xb0 [ 912.839955][T21959] xmit_one+0x2b6/0x760 [ 912.839955][T21959] __dev_queue_xmit+0x3432/0x4600 [ 912.839955][T21959] dev_queue_xmit+0x4b/0x60 [ 912.839955][T21959] __bpf_redirect+0x1461/0x16b0 [ 912.839955][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.892222][T21959] bpf_clone_redirect+0x4a1/0x660 [ 912.892222][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 912.892222][T21959] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 912.892222][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 912.892222][T21959] ? bpf_csum_level+0x760/0x760 [ 912.921657][T21959] __bpf_prog_run512+0x12e/0x190 [ 912.921657][T21959] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 02:48:55 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) [ 912.921657][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.921657][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.921657][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.921657][T21959] ? __msan_get_context_state+0x9/0x20 [ 912.921657][T21959] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 912.921657][T21959] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 912.921657][T21959] ? should_fail+0x72/0x9e0 [ 912.921657][T21959] ? psi_task_change+0x330/0x7e0 [ 912.981692][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.981740][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 912.981740][T21959] ? ktime_get+0x390/0x470 [ 912.981740][T21959] ? kmsan_get_metadata+0x4f/0x180 [ 912.981740][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.981740][T21959] ? __bpf_prog_run480+0x190/0x190 [ 912.981740][T21959] bpf_test_run+0x53f/0xe60 [ 912.981740][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.981740][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 912.981740][T21959] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 912.981740][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 912.981740][T21959] ? ctx_sched_in+0x975/0x980 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_internal_set_origin+0x85/0xc0 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_internal_check_memory+0xb5/0x520 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] ? kmsan_get_metadata+0x116/0x180 [ 912.981740][T21959] __se_sys_bpf+0x8e/0xa0 [ 912.981740][T21959] __ia32_sys_bpf+0x4a/0x70 [ 912.981740][T21959] __do_fast_syscall_32+0x127/0x180 [ 912.981740][T21959] do_fast_syscall_32+0x6a/0xc0 [ 912.981740][T21959] do_SYSENTER_32+0x73/0x90 [ 912.981740][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.981740][T21959] RIP: 0023:0xf7fdd549 [ 912.981740][T21959] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 912.981740][T21959] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 912.981740][T21959] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 912.981740][T21959] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 912.981740][T21959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 912.981740][T21959] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 912.981740][T21959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 912.981740][T21959] [ 912.981740][T21959] Uninit was stored to memory at: [ 912.981740][T21959] kmsan_internal_chain_origin+0xad/0x130 [ 912.981740][T21959] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 912.981740][T21959] kmsan_memmove_metadata+0xe/0x10 [ 912.981740][T21959] __msan_memmove+0x46/0x60 [ 912.981740][T21959] hsr_create_tagged_frame+0x855/0x11b0 [ 912.981740][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 912.981740][T21959] hsr_dev_xmit+0x133/0x230 [ 912.981740][T21959] xmit_one+0x2b6/0x760 [ 912.981740][T21959] __dev_queue_xmit+0x3432/0x4600 [ 912.981740][T21959] dev_queue_xmit+0x4b/0x60 [ 912.981740][T21959] __bpf_redirect+0x1461/0x16b0 [ 912.981740][T21959] bpf_clone_redirect+0x4a1/0x660 [ 912.981740][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 912.981740][T21959] __bpf_prog_run512+0x12e/0x190 [ 912.981740][T21959] bpf_test_run+0x53f/0xe60 [ 912.981740][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 912.981740][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 912.981740][T21959] __se_sys_bpf+0x8e/0xa0 [ 912.981740][T21959] __ia32_sys_bpf+0x4a/0x70 [ 912.981740][T21959] __do_fast_syscall_32+0x127/0x180 [ 912.981740][T21959] do_fast_syscall_32+0x6a/0xc0 [ 912.981740][T21959] do_SYSENTER_32+0x73/0x90 [ 912.981740][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.981740][T21959] [ 912.981740][T21959] Uninit was created at: [ 912.981740][T21959] kmsan_internal_poison_shadow+0x5c/0xf0 [ 912.981740][T21959] kmsan_slab_alloc+0x8e/0xe0 [ 912.981740][T21959] __kmalloc_node_track_caller+0xa4f/0x1470 [ 912.981740][T21959] __alloc_skb+0x4dd/0xe90 [ 912.981740][T21959] __pskb_copy_fclone+0x188/0x1920 [ 912.981740][T21959] hsr_create_tagged_frame+0x4aa/0x11b0 [ 912.981740][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 912.981740][T21959] hsr_dev_xmit+0x133/0x230 [ 912.981740][T21959] xmit_one+0x2b6/0x760 [ 912.981740][T21959] __dev_queue_xmit+0x3432/0x4600 [ 912.981740][T21959] dev_queue_xmit+0x4b/0x60 [ 912.981740][T21959] __bpf_redirect+0x1461/0x16b0 [ 912.981740][T21959] bpf_clone_redirect+0x4a1/0x660 [ 912.981740][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 912.981740][T21959] __bpf_prog_run512+0x12e/0x190 [ 912.981740][T21959] bpf_test_run+0x53f/0xe60 [ 912.981740][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 912.981740][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 912.981740][T21959] __se_sys_bpf+0x8e/0xa0 [ 912.981740][T21959] __ia32_sys_bpf+0x4a/0x70 [ 912.981740][T21959] __do_fast_syscall_32+0x127/0x180 [ 912.981740][T21959] do_fast_syscall_32+0x6a/0xc0 [ 912.981740][T21959] do_SYSENTER_32+0x73/0x90 [ 912.981740][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 912.981740][T21959] ===================================================== [ 912.981740][T21959] Disabling lock debugging due to kernel taint [ 913.509618][T21959] ===================================================== [ 913.516961][T21959] BUG: KMSAN: uninit-value in hsr_addr_subst_dest+0x333/0x860 [ 913.519528][T21959] CPU: 1 PID: 21959 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 913.519528][T21959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.519528][T21959] Call Trace: [ 913.519528][T21959] dump_stack+0x24c/0x2e0 [ 913.519528][T21959] kmsan_report+0xfb/0x1e0 [ 913.519528][T21959] __msan_warning+0x5c/0xa0 [ 913.519528][T21959] hsr_addr_subst_dest+0x333/0x860 [ 913.571916][T21959] hsr_forward_skb+0x1d27/0x27f0 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] hsr_dev_xmit+0x133/0x230 [ 913.571916][T21959] ? is_hsr_master+0xb0/0xb0 [ 913.571916][T21959] xmit_one+0x2b6/0x760 [ 913.571916][T21959] __dev_queue_xmit+0x3432/0x4600 [ 913.571916][T21959] dev_queue_xmit+0x4b/0x60 [ 913.571916][T21959] __bpf_redirect+0x1461/0x16b0 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] bpf_clone_redirect+0x4a1/0x660 [ 913.571916][T21959] ___bpf_prog_run+0x2b78/0xb950 02:48:56 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) 02:48:56 executing program 5: set_mempolicy(0x1, &(0x7f0000000340)=0x2, 0x570) [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 913.571916][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 913.571916][T21959] ? bpf_csum_level+0x760/0x760 [ 913.571916][T21959] __bpf_prog_run512+0x12e/0x190 [ 913.571916][T21959] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.571916][T21959] ? __msan_get_context_state+0x9/0x20 [ 913.571916][T21959] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 913.571916][T21959] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 913.571916][T21959] ? should_fail+0x72/0x9e0 [ 913.571916][T21959] ? psi_task_change+0x330/0x7e0 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.571916][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 913.571916][T21959] ? ktime_get+0x390/0x470 [ 913.571916][T21959] ? kmsan_get_metadata+0x4f/0x180 [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.571916][T21959] ? __bpf_prog_run480+0x190/0x190 [ 913.571916][T21959] bpf_test_run+0x53f/0xe60 [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.571916][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 913.571916][T21959] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 913.571916][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 913.571916][T21959] ? ctx_sched_in+0x975/0x980 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_internal_set_origin+0x85/0xc0 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_internal_check_memory+0xb5/0x520 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] ? kmsan_get_metadata+0x116/0x180 [ 913.571916][T21959] __se_sys_bpf+0x8e/0xa0 [ 913.571916][T21959] __ia32_sys_bpf+0x4a/0x70 [ 913.571916][T21959] __do_fast_syscall_32+0x127/0x180 [ 913.571916][T21959] do_fast_syscall_32+0x6a/0xc0 [ 913.571916][T21959] do_SYSENTER_32+0x73/0x90 [ 913.571916][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.571916][T21959] RIP: 0023:0xf7fdd549 [ 913.571916][T21959] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 913.571916][T21959] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 913.571916][T21959] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 913.571916][T21959] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.571916][T21959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.571916][T21959] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 913.571916][T21959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.571916][T21959] [ 913.571916][T21959] Uninit was stored to memory at: [ 913.571916][T21959] kmsan_internal_chain_origin+0xad/0x130 [ 913.571916][T21959] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 913.571916][T21959] kmsan_memmove_metadata+0xe/0x10 [ 913.571916][T21959] __msan_memmove+0x46/0x60 [ 913.571916][T21959] hsr_create_tagged_frame+0x855/0x11b0 [ 913.571916][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 913.571916][T21959] hsr_dev_xmit+0x133/0x230 [ 913.571916][T21959] xmit_one+0x2b6/0x760 [ 913.571916][T21959] __dev_queue_xmit+0x3432/0x4600 [ 913.571916][T21959] dev_queue_xmit+0x4b/0x60 [ 913.571916][T21959] __bpf_redirect+0x1461/0x16b0 [ 913.571916][T21959] bpf_clone_redirect+0x4a1/0x660 [ 913.571916][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 913.571916][T21959] __bpf_prog_run512+0x12e/0x190 [ 913.571916][T21959] bpf_test_run+0x53f/0xe60 [ 913.571916][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 913.571916][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 913.571916][T21959] __se_sys_bpf+0x8e/0xa0 [ 913.571916][T21959] __ia32_sys_bpf+0x4a/0x70 [ 913.571916][T21959] __do_fast_syscall_32+0x127/0x180 [ 913.571916][T21959] do_fast_syscall_32+0x6a/0xc0 [ 913.571916][T21959] do_SYSENTER_32+0x73/0x90 [ 913.571916][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.571916][T21959] [ 913.571916][T21959] Uninit was created at: [ 913.571916][T21959] kmsan_internal_poison_shadow+0x5c/0xf0 [ 913.571916][T21959] kmsan_slab_alloc+0x8e/0xe0 [ 913.571916][T21959] __kmalloc_node_track_caller+0xa4f/0x1470 [ 913.571916][T21959] __alloc_skb+0x4dd/0xe90 [ 913.571916][T21959] __pskb_copy_fclone+0x188/0x1920 [ 913.571916][T21959] hsr_create_tagged_frame+0x4aa/0x11b0 [ 913.571916][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 913.571916][T21959] hsr_dev_xmit+0x133/0x230 [ 913.571916][T21959] xmit_one+0x2b6/0x760 [ 913.571916][T21959] __dev_queue_xmit+0x3432/0x4600 [ 913.571916][T21959] dev_queue_xmit+0x4b/0x60 [ 913.571916][T21959] __bpf_redirect+0x1461/0x16b0 [ 913.571916][T21959] bpf_clone_redirect+0x4a1/0x660 [ 913.571916][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 913.571916][T21959] __bpf_prog_run512+0x12e/0x190 [ 913.571916][T21959] bpf_test_run+0x53f/0xe60 [ 913.571916][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 913.571916][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 913.571916][T21959] __se_sys_bpf+0x8e/0xa0 [ 913.571916][T21959] __ia32_sys_bpf+0x4a/0x70 [ 913.571916][T21959] __do_fast_syscall_32+0x127/0x180 [ 913.571916][T21959] do_fast_syscall_32+0x6a/0xc0 [ 913.571916][T21959] do_SYSENTER_32+0x73/0x90 [ 913.571916][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 913.571916][T21959] ===================================================== [ 914.250206][T21959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 914.256774][T21959] ===================================================== [ 914.263723][T21959] BUG: KMSAN: uninit-value in eth_type_trans+0x3e8/0xc10 [ 914.266692][T21959] CPU: 1 PID: 21959 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 914.266692][T21959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.266692][T21959] Call Trace: [ 914.266692][T21959] dump_stack+0x24c/0x2e0 [ 914.266692][T21959] kmsan_report+0xfb/0x1e0 [ 914.266692][T21959] __msan_warning+0x5c/0xa0 [ 914.266692][T21959] eth_type_trans+0x3e8/0xc10 [ 914.266692][T21959] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 914.266692][T21959] __dev_forward_skb2+0x478/0xb90 [ 914.266692][T21959] __dev_forward_skb+0x70/0x80 [ 914.266692][T21959] veth_xmit+0x4a6/0xd90 [ 914.266692][T21959] ? veth_close+0x170/0x170 [ 914.266692][T21959] xmit_one+0x2b6/0x760 [ 914.266692][T21959] __dev_queue_xmit+0x3432/0x4600 [ 914.266692][T21959] dev_queue_xmit+0x4b/0x60 [ 914.266692][T21959] hsr_forward_skb+0x1f60/0x27f0 [ 914.266692][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.266692][T21959] hsr_dev_xmit+0x133/0x230 [ 914.266692][T21959] ? is_hsr_master+0xb0/0xb0 [ 914.266692][T21959] xmit_one+0x2b6/0x760 [ 914.266692][T21959] __dev_queue_xmit+0x3432/0x4600 [ 914.266692][T21959] dev_queue_xmit+0x4b/0x60 [ 914.266692][T21959] __bpf_redirect+0x1461/0x16b0 [ 914.266692][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.266692][T21959] bpf_clone_redirect+0x4a1/0x660 [ 914.266692][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 914.266692][T21959] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 914.266692][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 914.266692][T21959] ? bpf_csum_level+0x760/0x760 [ 914.266692][T21959] __bpf_prog_run512+0x12e/0x190 [ 914.266692][T21959] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 914.266692][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.266692][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.266692][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.266692][T21959] ? __msan_get_context_state+0x9/0x20 [ 914.266692][T21959] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 914.266692][T21959] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 914.266692][T21959] ? should_fail+0x72/0x9e0 [ 914.492684][T21959] ? psi_task_change+0x330/0x7e0 [ 914.492684][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.492684][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.492684][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.492684][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.492684][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 914.492684][T21959] ? ktime_get+0x390/0x470 [ 914.492684][T21959] ? kmsan_get_metadata+0x4f/0x180 [ 914.492684][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.492684][T21959] ? __bpf_prog_run480+0x190/0x190 [ 914.492684][T21959] bpf_test_run+0x53f/0xe60 [ 914.492684][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.492684][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 914.492684][T21959] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 914.492684][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 914.492684][T21959] ? ctx_sched_in+0x975/0x980 [ 914.492684][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.492684][T21959] ? kmsan_internal_set_origin+0x85/0xc0 [ 914.602973][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.602973][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.602973][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.602973][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.602973][T21959] ? kmsan_internal_check_memory+0xb5/0x520 [ 914.602973][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.602973][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 914.602973][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.602973][T21959] ? kmsan_get_metadata+0x116/0x180 [ 914.602973][T21959] __se_sys_bpf+0x8e/0xa0 [ 914.602973][T21959] __ia32_sys_bpf+0x4a/0x70 [ 914.602973][T21959] __do_fast_syscall_32+0x127/0x180 [ 914.602973][T21959] do_fast_syscall_32+0x6a/0xc0 [ 914.602973][T21959] do_SYSENTER_32+0x73/0x90 [ 914.602973][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.602973][T21959] RIP: 0023:0xf7fdd549 [ 914.602973][T21959] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 914.602973][T21959] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 914.602973][T21959] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 914.602973][T21959] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 914.602973][T21959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 914.602973][T21959] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 914.602973][T21959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 914.602973][T21959] [ 914.602973][T21959] Uninit was stored to memory at: [ 914.602973][T21959] kmsan_internal_chain_origin+0xad/0x130 [ 914.602973][T21959] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 914.602973][T21959] kmsan_memmove_metadata+0xe/0x10 [ 914.602973][T21959] __msan_memmove+0x46/0x60 [ 914.602973][T21959] hsr_create_tagged_frame+0x855/0x11b0 [ 914.602973][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 914.602973][T21959] hsr_dev_xmit+0x133/0x230 [ 914.602973][T21959] xmit_one+0x2b6/0x760 [ 914.602973][T21959] __dev_queue_xmit+0x3432/0x4600 [ 914.602973][T21959] dev_queue_xmit+0x4b/0x60 [ 914.602973][T21959] __bpf_redirect+0x1461/0x16b0 [ 914.602973][T21959] bpf_clone_redirect+0x4a1/0x660 [ 914.602973][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 914.602973][T21959] __bpf_prog_run512+0x12e/0x190 [ 914.602973][T21959] bpf_test_run+0x53f/0xe60 [ 914.602973][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 914.602973][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 914.602973][T21959] __se_sys_bpf+0x8e/0xa0 [ 914.602973][T21959] __ia32_sys_bpf+0x4a/0x70 [ 914.602973][T21959] __do_fast_syscall_32+0x127/0x180 [ 914.602973][T21959] do_fast_syscall_32+0x6a/0xc0 [ 914.602973][T21959] do_SYSENTER_32+0x73/0x90 [ 914.602973][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.602973][T21959] [ 914.602973][T21959] Uninit was created at: [ 914.602973][T21959] kmsan_internal_poison_shadow+0x5c/0xf0 [ 914.602973][T21959] kmsan_slab_alloc+0x8e/0xe0 [ 914.602973][T21959] __kmalloc_node_track_caller+0xa4f/0x1470 [ 914.602973][T21959] __alloc_skb+0x4dd/0xe90 [ 914.602973][T21959] __pskb_copy_fclone+0x188/0x1920 [ 914.602973][T21959] hsr_create_tagged_frame+0x4aa/0x11b0 [ 914.602973][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 914.602973][T21959] hsr_dev_xmit+0x133/0x230 [ 914.602973][T21959] xmit_one+0x2b6/0x760 [ 914.602973][T21959] __dev_queue_xmit+0x3432/0x4600 [ 914.602973][T21959] dev_queue_xmit+0x4b/0x60 [ 914.602973][T21959] __bpf_redirect+0x1461/0x16b0 [ 914.602973][T21959] bpf_clone_redirect+0x4a1/0x660 [ 914.602973][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 914.602973][T21959] __bpf_prog_run512+0x12e/0x190 [ 914.602973][T21959] bpf_test_run+0x53f/0xe60 [ 914.602973][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 914.602973][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 914.602973][T21959] __se_sys_bpf+0x8e/0xa0 [ 914.602973][T21959] __ia32_sys_bpf+0x4a/0x70 [ 914.602973][T21959] __do_fast_syscall_32+0x127/0x180 [ 914.602973][T21959] do_fast_syscall_32+0x6a/0xc0 [ 914.602973][T21959] do_SYSENTER_32+0x73/0x90 [ 914.602973][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 914.602973][T21959] ===================================================== [ 915.079986][T21959] ===================================================== [ 915.087345][T21959] BUG: KMSAN: uninit-value in eth_type_trans+0x99f/0xc10 [ 915.089935][T21959] CPU: 1 PID: 21959 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 915.089935][T21959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.089935][T21959] Call Trace: [ 915.089935][T21959] dump_stack+0x24c/0x2e0 [ 915.089935][T21959] kmsan_report+0xfb/0x1e0 [ 915.089935][T21959] __msan_warning+0x5c/0xa0 [ 915.089935][T21959] eth_type_trans+0x99f/0xc10 [ 915.089935][T21959] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 915.089935][T21959] __dev_forward_skb2+0x478/0xb90 [ 915.089935][T21959] __dev_forward_skb+0x70/0x80 [ 915.089935][T21959] veth_xmit+0x4a6/0xd90 [ 915.089935][T21959] ? veth_close+0x170/0x170 [ 915.089935][T21959] xmit_one+0x2b6/0x760 [ 915.089935][T21959] __dev_queue_xmit+0x3432/0x4600 [ 915.089935][T21959] dev_queue_xmit+0x4b/0x60 [ 915.089935][T21959] hsr_forward_skb+0x1f60/0x27f0 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] hsr_dev_xmit+0x133/0x230 [ 915.089935][T21959] ? is_hsr_master+0xb0/0xb0 [ 915.089935][T21959] xmit_one+0x2b6/0x760 [ 915.089935][T21959] __dev_queue_xmit+0x3432/0x4600 [ 915.089935][T21959] dev_queue_xmit+0x4b/0x60 [ 915.089935][T21959] __bpf_redirect+0x1461/0x16b0 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] bpf_clone_redirect+0x4a1/0x660 [ 915.089935][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 915.089935][T21959] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 915.089935][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 915.089935][T21959] ? bpf_csum_level+0x760/0x760 [ 915.089935][T21959] __bpf_prog_run512+0x12e/0x190 [ 915.089935][T21959] ? __bpf_trace_sched_kthread_work_execute_start+0xd0/0x140 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.089935][T21959] ? __msan_get_context_state+0x9/0x20 [ 915.089935][T21959] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 915.089935][T21959] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 915.089935][T21959] ? should_fail+0x72/0x9e0 [ 915.089935][T21959] ? psi_task_change+0x330/0x7e0 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.089935][T21959] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 915.089935][T21959] ? ktime_get+0x390/0x470 [ 915.089935][T21959] ? kmsan_get_metadata+0x4f/0x180 [ 915.089935][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.089935][T21959] ? __bpf_prog_run480+0x190/0x190 [ 915.089935][T21959] bpf_test_run+0x53f/0xe60 [ 915.089935][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.089935][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 915.089935][T21959] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 915.089935][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 915.089935][T21959] ? ctx_sched_in+0x975/0x980 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_internal_set_origin+0x85/0xc0 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.089935][T21959] ? kmsan_internal_check_memory+0xb5/0x520 [ 915.089935][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.481808][T21959] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 915.481808][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.481808][T21959] ? kmsan_get_metadata+0x116/0x180 [ 915.481808][T21959] __se_sys_bpf+0x8e/0xa0 [ 915.481808][T21959] __ia32_sys_bpf+0x4a/0x70 [ 915.481808][T21959] __do_fast_syscall_32+0x127/0x180 [ 915.481808][T21959] do_fast_syscall_32+0x6a/0xc0 [ 915.481808][T21959] do_SYSENTER_32+0x73/0x90 [ 915.481808][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.481808][T21959] RIP: 0023:0xf7fdd549 [ 915.481808][T21959] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 915.556535][T21959] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 915.556535][T21959] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 915.556535][T21959] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.556535][T21959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.556535][T21959] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 915.556535][T21959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.556535][T21959] [ 915.556535][T21959] Uninit was stored to memory at: [ 915.556535][T21959] kmsan_internal_chain_origin+0xad/0x130 [ 915.556535][T21959] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 915.556535][T21959] kmsan_memmove_metadata+0xe/0x10 [ 915.556535][T21959] __msan_memmove+0x46/0x60 [ 915.556535][T21959] hsr_create_tagged_frame+0x855/0x11b0 [ 915.556535][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 915.556535][T21959] hsr_dev_xmit+0x133/0x230 [ 915.556535][T21959] xmit_one+0x2b6/0x760 [ 915.556535][T21959] __dev_queue_xmit+0x3432/0x4600 [ 915.556535][T21959] dev_queue_xmit+0x4b/0x60 [ 915.556535][T21959] __bpf_redirect+0x1461/0x16b0 [ 915.556535][T21959] bpf_clone_redirect+0x4a1/0x660 [ 915.556535][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 915.556535][T21959] __bpf_prog_run512+0x12e/0x190 [ 915.556535][T21959] bpf_test_run+0x53f/0xe60 [ 915.556535][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 915.556535][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 915.556535][T21959] __se_sys_bpf+0x8e/0xa0 [ 915.556535][T21959] __ia32_sys_bpf+0x4a/0x70 [ 915.556535][T21959] __do_fast_syscall_32+0x127/0x180 [ 915.556535][T21959] do_fast_syscall_32+0x6a/0xc0 [ 915.556535][T21959] do_SYSENTER_32+0x73/0x90 [ 915.556535][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.556535][T21959] [ 915.556535][T21959] Uninit was created at: [ 915.556535][T21959] kmsan_internal_poison_shadow+0x5c/0xf0 [ 915.556535][T21959] kmsan_slab_alloc+0x8e/0xe0 [ 915.556535][T21959] __kmalloc_node_track_caller+0xa4f/0x1470 [ 915.556535][T21959] __alloc_skb+0x4dd/0xe90 [ 915.556535][T21959] __pskb_copy_fclone+0x188/0x1920 [ 915.556535][T21959] hsr_create_tagged_frame+0x4aa/0x11b0 [ 915.556535][T21959] hsr_forward_skb+0x16e5/0x27f0 [ 915.556535][T21959] hsr_dev_xmit+0x133/0x230 [ 915.556535][T21959] xmit_one+0x2b6/0x760 [ 915.556535][T21959] __dev_queue_xmit+0x3432/0x4600 [ 915.556535][T21959] dev_queue_xmit+0x4b/0x60 [ 915.556535][T21959] __bpf_redirect+0x1461/0x16b0 [ 915.556535][T21959] bpf_clone_redirect+0x4a1/0x660 [ 915.556535][T21959] ___bpf_prog_run+0x2b78/0xb950 [ 915.556535][T21959] __bpf_prog_run512+0x12e/0x190 [ 915.556535][T21959] bpf_test_run+0x53f/0xe60 [ 915.556535][T21959] bpf_prog_test_run_skb+0x1914/0x3500 [ 915.556535][T21959] __do_sys_bpf+0xbe6f/0x1aba0 [ 915.556535][T21959] __se_sys_bpf+0x8e/0xa0 [ 915.556535][T21959] __ia32_sys_bpf+0x4a/0x70 [ 915.556535][T21959] __do_fast_syscall_32+0x127/0x180 [ 915.556535][T21959] do_fast_syscall_32+0x6a/0xc0 [ 915.556535][T21959] do_SYSENTER_32+0x73/0x90 [ 915.881652][T21959] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 915.881652][T21959] ===================================================== 02:48:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0)=0xfffffff8, 0x4) [ 916.167347][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.178843][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.189019][T21969] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000c000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:58 executing program 5: r0 = socket(0x2c, 0x3, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) 02:48:59 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 02:48:59 executing program 4: socketpair(0xa, 0x803, 0x3a, &(0x7f0000000040)) [ 917.036407][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 917.047329][T21983] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 917.057353][T21983] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. 02:48:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000031000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf435857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fa2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135482dae93c7e33bdef00400000d8fd8c79a5d0967ab7e43686b4d3c43e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044708eb55b73c522cbdac753e77aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e041c7bb7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773ea6f1e9fe8cd2b532c080700051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4e19545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc04c613d794745ae750f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c08f2c686ca2ab5f8c623537c8161e5c9398552720395df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428e85322f9fd317b29ec23b193b1d87625ac35fa05bf29e079d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e0eb4e1c7427fdcdfbde1cd99203cc1f28fb06e5f5a6c96ef934e80000b8000000000000004571078a2c4f9ee9ec3fe625c7b7be04cb1a741e14fa7c185cf19d4b6a3c8b91b373bf1b58196fac0b7d1120c4506252d131b1e6dfd0ff077c598d6b4dea000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 02:48:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x8912, &(0x7f0000000000)) 02:48:59 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x402c542c, &(0x7f0000000080)) 02:48:59 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5424, &(0x7f0000000080)) 02:48:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000d000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) 02:48:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xaa, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x193242, 0x0) r1 = memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0\xfb\xff\xff\xff\xff\xff\xff\xffvelindf\xda\xf7\xe7VP]\x87\xbb\xbd\tJP\x98\rM\xea\x90r\r\xa6R\xb4\xb8\xa1\x98\xb43\xa6,\xe2x\x12\xfaw\xaa\xef\x96\xfbi\xf8\x00\bbQ\xd8gC\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xd2\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17\x7f\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\xb1m\x11\x03J\x7f\xe4m\xe6T\xe9\x04\x00\x00\x19Y\x92$O_\xf6\xb6\x1cePR\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xde\xf8&\x1d\xadUg\xb5S5\xefD\x04\x160\xafy\x02\\\xcb1\x8f\xaeh\x8c~8\x9f\xf3\xd5\x0f\xef\xb0\x0fZ\xfd\x05\xed\xfd\x82\xbd*\x192\x06\xcb1t\xd0\x7f\x8c\x9f?\xd4x0\\\x1b\xe2Po\xef\xe1\xc4J\xcbz\x17\a\xf6\xac\xc1y\xe1\x8f\x17\\\xbcp\xaa\xa6\xc6\xd5\r\xbbm\x83e\xa1\xb1e\xc1\x88\xfe\xb8=\x1d\xc1(\xb7\xb7\"\xb8\x143r\xd5gL\xd2\xf7;#\xb4\x10d\xe9\xed\x19\xa3y\xe1\x80k\xbb;\xf7U\x13U\x0e\xd1{\xcb\xa6H\n\x7f,B\x93\xe4`d\x95zL\xee[w\x06(\xb1\x84\x11\xd9\x04\x99\x01\x192\xe3\xa88~4\x99\xd0U\xcd\xfa\x1d%e*\x02\xa0\x9b^\xa6\xcf9W\x9d\xcd \xb8K\xbe\xb1-\xad\xaay\x1ee\xba\b\xe8\x12\xa0\xb6Z7\x8f\x05j\x8a\xe9\xdf\x1c\xa0\xfc\x90\xb9\x00\x14', 0x0) ftruncate(r1, 0x40000) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2008000fffffffe) 02:49:00 executing program 0: io_setup(0x5, &(0x7f0000000200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x7, 0x7, 0x0, r1, 0x0}]) [ 917.946899][T22000] ===================================================== [ 917.951509][T22000] BUG: KMSAN: uninit-value in hsr_addr_subst_dest+0x626/0x860 [ 917.951509][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 917.951509][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.951509][T22000] Call Trace: [ 917.951509][T22000] dump_stack+0x24c/0x2e0 [ 917.951509][T22000] kmsan_report+0xfb/0x1e0 [ 917.951509][T22000] __msan_warning+0x5c/0xa0 [ 917.951509][T22000] hsr_addr_subst_dest+0x626/0x860 [ 917.951509][T22000] hsr_forward_skb+0x1d27/0x27f0 [ 917.951509][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.023937][T22001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 917.951509][T22000] hsr_dev_xmit+0x133/0x230 [ 917.951509][T22000] ? is_hsr_master+0xb0/0xb0 [ 917.951509][T22000] xmit_one+0x2b6/0x760 [ 917.951509][T22000] __dev_queue_xmit+0x3432/0x4600 [ 917.951509][T22000] dev_queue_xmit+0x4b/0x60 [ 918.037278][T22001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 917.951509][T22000] __bpf_redirect+0x1461/0x16b0 [ 917.951509][T22000] ? kmsan_get_metadata+0x116/0x180 [ 917.951509][T22000] bpf_clone_redirect+0x4a1/0x660 [ 917.951509][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 918.042676][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 918.042683][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 918.042683][T22000] ? bpf_csum_level+0x760/0x760 [ 918.042683][T22000] __bpf_prog_run512+0x12e/0x190 [ 918.042683][T22000] ? process_slab+0x13a0/0x1b70 [ 918.042683][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.047809][T22001] netlink: 1088 bytes leftover after parsing attributes in process `syz-executor.1'. [ 918.042683][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.042683][T22000] ? __msan_get_context_state+0x9/0x20 [ 918.042683][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 918.042683][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 918.042683][T22000] ? should_fail+0x72/0x9e0 [ 918.042683][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.061220][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 918.061220][T22000] ? ktime_get+0x390/0x470 [ 918.061220][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 918.061220][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.061220][T22000] ? __bpf_prog_run480+0x190/0x190 [ 918.061220][T22000] bpf_test_run+0x53f/0xe60 [ 918.061220][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.061220][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 918.061220][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 918.061220][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 918.061220][T22000] ? ctx_sched_in+0x975/0x980 [ 918.061220][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.061220][T22000] __se_sys_bpf+0x8e/0xa0 [ 918.061220][T22000] __ia32_sys_bpf+0x4a/0x70 [ 918.061220][T22000] __do_fast_syscall_32+0x127/0x180 [ 918.061220][T22000] do_fast_syscall_32+0x6a/0xc0 [ 918.061220][T22000] do_SYSENTER_32+0x73/0x90 [ 918.061220][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.061220][T22000] RIP: 0023:0xf7fdd549 [ 918.061220][T22000] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 918.061220][T22000] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 918.061220][T22000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 918.061220][T22000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.061220][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.061220][T22000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 918.061220][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.061220][T22000] [ 918.061220][T22000] Uninit was stored to memory at: [ 918.061220][T22000] kmsan_internal_chain_origin+0xad/0x130 [ 918.061220][T22000] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 918.061220][T22000] kmsan_memmove_metadata+0xe/0x10 [ 918.061220][T22000] __msan_memmove+0x46/0x60 [ 918.061220][T22000] hsr_create_tagged_frame+0x855/0x11b0 [ 918.061220][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 918.061220][T22000] hsr_dev_xmit+0x133/0x230 [ 918.061220][T22000] xmit_one+0x2b6/0x760 [ 918.061220][T22000] __dev_queue_xmit+0x3432/0x4600 [ 918.061220][T22000] dev_queue_xmit+0x4b/0x60 [ 918.061220][T22000] __bpf_redirect+0x1461/0x16b0 [ 918.061220][T22000] bpf_clone_redirect+0x4a1/0x660 [ 918.061220][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 918.061220][T22000] __bpf_prog_run512+0x12e/0x190 [ 918.061220][T22000] bpf_test_run+0x53f/0xe60 [ 918.061220][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 918.061220][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 918.061220][T22000] __se_sys_bpf+0x8e/0xa0 [ 918.061220][T22000] __ia32_sys_bpf+0x4a/0x70 [ 918.061220][T22000] __do_fast_syscall_32+0x127/0x180 [ 918.061220][T22000] do_fast_syscall_32+0x6a/0xc0 [ 918.061220][T22000] do_SYSENTER_32+0x73/0x90 [ 918.061220][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.061220][T22000] [ 918.061220][T22000] Uninit was created at: [ 918.061220][T22000] kmsan_internal_poison_shadow+0x5c/0xf0 [ 918.061220][T22000] kmsan_slab_alloc+0x8e/0xe0 [ 918.061220][T22000] __kmalloc_node_track_caller+0xa4f/0x1470 [ 918.061220][T22000] __alloc_skb+0x4dd/0xe90 [ 918.061220][T22000] __pskb_copy_fclone+0x188/0x1920 [ 918.061220][T22000] hsr_create_tagged_frame+0x4aa/0x11b0 [ 918.061220][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 918.061220][T22000] hsr_dev_xmit+0x133/0x230 [ 918.061220][T22000] xmit_one+0x2b6/0x760 [ 918.061220][T22000] __dev_queue_xmit+0x3432/0x4600 [ 918.061220][T22000] dev_queue_xmit+0x4b/0x60 [ 918.061220][T22000] __bpf_redirect+0x1461/0x16b0 [ 918.061220][T22000] bpf_clone_redirect+0x4a1/0x660 [ 918.061220][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 918.061220][T22000] __bpf_prog_run512+0x12e/0x190 [ 918.061220][T22000] bpf_test_run+0x53f/0xe60 [ 918.061220][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 918.061220][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 918.061220][T22000] __se_sys_bpf+0x8e/0xa0 [ 918.061220][T22000] __ia32_sys_bpf+0x4a/0x70 [ 918.061220][T22000] __do_fast_syscall_32+0x127/0x180 [ 918.061220][T22000] do_fast_syscall_32+0x6a/0xc0 [ 918.061220][T22000] do_SYSENTER_32+0x73/0x90 [ 918.061220][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 918.061220][T22000] ===================================================== [ 918.731781][T22000] ===================================================== [ 918.738722][T22000] BUG: KMSAN: uninit-value in hsr_addr_subst_dest+0x333/0x860 [ 918.741583][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 918.741583][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.741583][T22000] Call Trace: [ 918.769236][T22000] dump_stack+0x24c/0x2e0 [ 918.769236][T22000] kmsan_report+0xfb/0x1e0 [ 918.769236][T22000] __msan_warning+0x5c/0xa0 [ 918.769236][T22000] hsr_addr_subst_dest+0x333/0x860 [ 918.769236][T22000] hsr_forward_skb+0x1d27/0x27f0 [ 918.769236][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.769236][T22000] hsr_dev_xmit+0x133/0x230 [ 918.769236][T22000] ? is_hsr_master+0xb0/0xb0 [ 918.769236][T22000] xmit_one+0x2b6/0x760 [ 918.769236][T22000] __dev_queue_xmit+0x3432/0x4600 [ 918.769236][T22000] dev_queue_xmit+0x4b/0x60 [ 918.769236][T22000] __bpf_redirect+0x1461/0x16b0 [ 918.769236][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.769236][T22000] bpf_clone_redirect+0x4a1/0x660 [ 918.769236][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 918.769236][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 918.769236][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 918.769236][T22000] ? bpf_csum_level+0x760/0x760 [ 918.769236][T22000] __bpf_prog_run512+0x12e/0x190 [ 918.769236][T22000] ? process_slab+0x13a0/0x1b70 [ 918.769236][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.769236][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.882652][T22000] ? __msan_get_context_state+0x9/0x20 [ 918.882652][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 02:49:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="88040000300001000000000e000000000000000074040100700401000b000100706f6c6963650000440402"], 0x488}}, 0x0) [ 918.882652][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 918.882652][T22000] ? should_fail+0x72/0x9e0 [ 918.882652][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.882652][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.882652][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.882652][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.882652][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.882652][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 918.882652][T22000] ? ktime_get+0x390/0x470 [ 918.882652][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 918.882652][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.882652][T22000] ? __bpf_prog_run480+0x190/0x190 [ 918.882652][T22000] bpf_test_run+0x53f/0xe60 [ 918.882652][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 918.882652][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 918.882652][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 918.882652][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 918.882652][T22000] ? ctx_sched_in+0x975/0x980 [ 918.882652][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 918.882652][T22000] ? kmsan_get_metadata+0x116/0x180 [ 918.882652][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.013239][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.013239][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.013239][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 919.013239][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.013239][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.013239][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.013239][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.013239][T22000] __se_sys_bpf+0x8e/0xa0 [ 919.013239][T22000] __ia32_sys_bpf+0x4a/0x70 [ 919.013239][T22000] __do_fast_syscall_32+0x127/0x180 [ 919.013239][T22000] do_fast_syscall_32+0x6a/0xc0 [ 919.013239][T22000] do_SYSENTER_32+0x73/0x90 [ 919.013239][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.013239][T22000] RIP: 0023:0xf7fdd549 [ 919.013239][T22000] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 919.013239][T22000] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 919.013239][T22000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 919.013239][T22000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 919.013239][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 919.013239][T22000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 919.013239][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 919.013239][T22000] [ 919.013239][T22000] Uninit was stored to memory at: [ 919.013239][T22000] kmsan_internal_chain_origin+0xad/0x130 [ 919.013239][T22000] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 919.013239][T22000] kmsan_memmove_metadata+0xe/0x10 [ 919.013239][T22000] __msan_memmove+0x46/0x60 [ 919.013239][T22000] hsr_create_tagged_frame+0x855/0x11b0 [ 919.013239][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 919.013239][T22000] hsr_dev_xmit+0x133/0x230 [ 919.209539][T22000] xmit_one+0x2b6/0x760 [ 919.209539][T22000] __dev_queue_xmit+0x3432/0x4600 [ 919.209539][T22000] dev_queue_xmit+0x4b/0x60 [ 919.209539][T22000] __bpf_redirect+0x1461/0x16b0 [ 919.209539][T22000] bpf_clone_redirect+0x4a1/0x660 [ 919.209539][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 919.209539][T22000] __bpf_prog_run512+0x12e/0x190 [ 919.209539][T22000] bpf_test_run+0x53f/0xe60 [ 919.209539][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 919.209539][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 919.209539][T22000] __se_sys_bpf+0x8e/0xa0 [ 919.209539][T22000] __ia32_sys_bpf+0x4a/0x70 [ 919.209539][T22000] __do_fast_syscall_32+0x127/0x180 [ 919.209539][T22000] do_fast_syscall_32+0x6a/0xc0 [ 919.209539][T22000] do_SYSENTER_32+0x73/0x90 [ 919.209539][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.209539][T22000] [ 919.209539][T22000] Uninit was created at: [ 919.209539][T22000] kmsan_internal_poison_shadow+0x5c/0xf0 [ 919.209539][T22000] kmsan_slab_alloc+0x8e/0xe0 [ 919.209539][T22000] __kmalloc_node_track_caller+0xa4f/0x1470 [ 919.209539][T22000] __alloc_skb+0x4dd/0xe90 [ 919.209539][T22000] __pskb_copy_fclone+0x188/0x1920 [ 919.209539][T22000] hsr_create_tagged_frame+0x4aa/0x11b0 [ 919.209539][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 919.209539][T22000] hsr_dev_xmit+0x133/0x230 [ 919.209539][T22000] xmit_one+0x2b6/0x760 [ 919.209539][T22000] __dev_queue_xmit+0x3432/0x4600 [ 919.209539][T22000] dev_queue_xmit+0x4b/0x60 [ 919.209539][T22000] __bpf_redirect+0x1461/0x16b0 [ 919.209539][T22000] bpf_clone_redirect+0x4a1/0x660 [ 919.209539][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 919.209539][T22000] __bpf_prog_run512+0x12e/0x190 [ 919.209539][T22000] bpf_test_run+0x53f/0xe60 [ 919.209539][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 919.209539][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 919.209539][T22000] __se_sys_bpf+0x8e/0xa0 [ 919.209539][T22000] __ia32_sys_bpf+0x4a/0x70 [ 919.209539][T22000] __do_fast_syscall_32+0x127/0x180 [ 919.209539][T22000] do_fast_syscall_32+0x6a/0xc0 [ 919.209539][T22000] do_SYSENTER_32+0x73/0x90 [ 919.209539][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.209539][T22000] ===================================================== [ 919.438238][T22000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 919.445546][T22000] ===================================================== 02:49:01 executing program 5: syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x4040) [ 919.452674][T22000] BUG: KMSAN: uninit-value in eth_type_trans+0x3e8/0xc10 [ 919.455376][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 919.455376][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.455376][T22000] Call Trace: [ 919.455376][T22000] dump_stack+0x24c/0x2e0 [ 919.455376][T22000] kmsan_report+0xfb/0x1e0 [ 919.455376][T22000] __msan_warning+0x5c/0xa0 [ 919.455376][T22000] eth_type_trans+0x3e8/0xc10 [ 919.455376][T22000] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 919.504736][T22000] __dev_forward_skb2+0x478/0xb90 [ 919.504736][T22000] __dev_forward_skb+0x70/0x80 [ 919.519576][T22000] veth_xmit+0x4a6/0xd90 [ 919.519576][T22000] ? veth_close+0x170/0x170 [ 919.519576][T22000] xmit_one+0x2b6/0x760 [ 919.519576][T22000] __dev_queue_xmit+0x3432/0x4600 [ 919.519576][T22000] dev_queue_xmit+0x4b/0x60 [ 919.519576][T22000] hsr_forward_skb+0x1f60/0x27f0 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] hsr_dev_xmit+0x133/0x230 [ 919.519576][T22000] ? is_hsr_master+0xb0/0xb0 [ 919.519576][T22000] xmit_one+0x2b6/0x760 [ 919.519576][T22000] __dev_queue_xmit+0x3432/0x4600 [ 919.519576][T22000] dev_queue_xmit+0x4b/0x60 [ 919.519576][T22000] __bpf_redirect+0x1461/0x16b0 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] bpf_clone_redirect+0x4a1/0x660 [ 919.519576][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 919.519576][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 919.519576][T22000] ? bpf_csum_level+0x760/0x760 [ 919.519576][T22000] __bpf_prog_run512+0x12e/0x190 [ 919.519576][T22000] ? process_slab+0x13a0/0x1b70 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] ? __msan_get_context_state+0x9/0x20 [ 919.519576][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 919.519576][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 919.519576][T22000] ? should_fail+0x72/0x9e0 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 919.519576][T22000] ? ktime_get+0x390/0x470 [ 919.519576][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] ? __bpf_prog_run480+0x190/0x190 [ 919.519576][T22000] bpf_test_run+0x53f/0xe60 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 919.519576][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 919.519576][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 919.519576][T22000] ? ctx_sched_in+0x975/0x980 [ 919.519576][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] ? kmsan_get_metadata+0x116/0x180 [ 919.519576][T22000] __se_sys_bpf+0x8e/0xa0 [ 919.519576][T22000] __ia32_sys_bpf+0x4a/0x70 [ 919.519576][T22000] __do_fast_syscall_32+0x127/0x180 [ 919.519576][T22000] do_fast_syscall_32+0x6a/0xc0 [ 919.519576][T22000] do_SYSENTER_32+0x73/0x90 [ 919.519576][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.519576][T22000] RIP: 0023:0xf7fdd549 [ 919.519576][T22000] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 919.519576][T22000] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 919.519576][T22000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 919.519576][T22000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 919.519576][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 919.519576][T22000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 919.519576][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 919.519576][T22000] [ 919.519576][T22000] Uninit was stored to memory at: [ 919.519576][T22000] kmsan_internal_chain_origin+0xad/0x130 [ 919.519576][T22000] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 919.519576][T22000] kmsan_memmove_metadata+0xe/0x10 [ 919.519576][T22000] __msan_memmove+0x46/0x60 [ 919.519576][T22000] hsr_create_tagged_frame+0x855/0x11b0 [ 919.519576][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 919.519576][T22000] hsr_dev_xmit+0x133/0x230 [ 919.519576][T22000] xmit_one+0x2b6/0x760 [ 919.519576][T22000] __dev_queue_xmit+0x3432/0x4600 [ 919.519576][T22000] dev_queue_xmit+0x4b/0x60 [ 919.519576][T22000] __bpf_redirect+0x1461/0x16b0 [ 919.519576][T22000] bpf_clone_redirect+0x4a1/0x660 [ 919.519576][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 919.519576][T22000] __bpf_prog_run512+0x12e/0x190 [ 919.519576][T22000] bpf_test_run+0x53f/0xe60 [ 919.519576][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 919.519576][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 919.519576][T22000] __se_sys_bpf+0x8e/0xa0 [ 919.519576][T22000] __ia32_sys_bpf+0x4a/0x70 [ 919.519576][T22000] __do_fast_syscall_32+0x127/0x180 [ 919.519576][T22000] do_fast_syscall_32+0x6a/0xc0 [ 919.519576][T22000] do_SYSENTER_32+0x73/0x90 [ 919.519576][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.519576][T22000] [ 919.519576][T22000] Uninit was created at: [ 919.519576][T22000] kmsan_internal_poison_shadow+0x5c/0xf0 [ 919.519576][T22000] kmsan_slab_alloc+0x8e/0xe0 [ 919.519576][T22000] __kmalloc_node_track_caller+0xa4f/0x1470 [ 919.519576][T22000] __alloc_skb+0x4dd/0xe90 [ 919.519576][T22000] __pskb_copy_fclone+0x188/0x1920 [ 919.519576][T22000] hsr_create_tagged_frame+0x4aa/0x11b0 [ 919.519576][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 919.519576][T22000] hsr_dev_xmit+0x133/0x230 [ 919.519576][T22000] xmit_one+0x2b6/0x760 [ 919.519576][T22000] __dev_queue_xmit+0x3432/0x4600 [ 919.519576][T22000] dev_queue_xmit+0x4b/0x60 [ 919.519576][T22000] __bpf_redirect+0x1461/0x16b0 [ 919.519576][T22000] bpf_clone_redirect+0x4a1/0x660 [ 919.519576][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 919.519576][T22000] __bpf_prog_run512+0x12e/0x190 [ 919.519576][T22000] bpf_test_run+0x53f/0xe60 [ 919.519576][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 919.519576][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 919.519576][T22000] __se_sys_bpf+0x8e/0xa0 [ 919.519576][T22000] __ia32_sys_bpf+0x4a/0x70 [ 919.519576][T22000] __do_fast_syscall_32+0x127/0x180 [ 919.519576][T22000] do_fast_syscall_32+0x6a/0xc0 [ 919.519576][T22000] do_SYSENTER_32+0x73/0x90 [ 919.519576][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 919.519576][T22000] ===================================================== [ 920.247414][T22000] ===================================================== [ 920.254883][T22000] BUG: KMSAN: uninit-value in eth_type_trans+0x99f/0xc10 [ 920.260634][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 920.260634][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.260634][T22000] Call Trace: [ 920.260634][T22000] dump_stack+0x24c/0x2e0 [ 920.260634][T22000] kmsan_report+0xfb/0x1e0 [ 920.260634][T22000] __msan_warning+0x5c/0xa0 [ 920.260634][T22000] eth_type_trans+0x99f/0xc10 [ 920.260634][T22000] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 920.260634][T22000] __dev_forward_skb2+0x478/0xb90 [ 920.260634][T22000] __dev_forward_skb+0x70/0x80 [ 920.260634][T22000] veth_xmit+0x4a6/0xd90 [ 920.260634][T22000] ? veth_close+0x170/0x170 [ 920.260634][T22000] xmit_one+0x2b6/0x760 [ 920.260634][T22000] __dev_queue_xmit+0x3432/0x4600 [ 920.260634][T22000] dev_queue_xmit+0x4b/0x60 [ 920.260634][T22000] hsr_forward_skb+0x1f60/0x27f0 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] hsr_dev_xmit+0x133/0x230 [ 920.260634][T22000] ? is_hsr_master+0xb0/0xb0 [ 920.260634][T22000] xmit_one+0x2b6/0x760 [ 920.260634][T22000] __dev_queue_xmit+0x3432/0x4600 [ 920.260634][T22000] dev_queue_xmit+0x4b/0x60 [ 920.260634][T22000] __bpf_redirect+0x1461/0x16b0 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] bpf_clone_redirect+0x4a1/0x660 [ 920.260634][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 920.260634][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 920.260634][T22000] ? bpf_csum_level+0x760/0x760 [ 920.260634][T22000] __bpf_prog_run512+0x12e/0x190 [ 920.260634][T22000] ? process_slab+0x13a0/0x1b70 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] ? __msan_get_context_state+0x9/0x20 [ 920.260634][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 920.260634][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 920.260634][T22000] ? should_fail+0x72/0x9e0 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 920.260634][T22000] ? ktime_get+0x390/0x470 [ 920.260634][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] ? __bpf_prog_run480+0x190/0x190 [ 920.260634][T22000] bpf_test_run+0x53f/0xe60 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 920.260634][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 920.260634][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 920.260634][T22000] ? ctx_sched_in+0x975/0x980 [ 920.260634][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] ? kmsan_get_metadata+0x116/0x180 [ 920.260634][T22000] __se_sys_bpf+0x8e/0xa0 [ 920.260634][T22000] __ia32_sys_bpf+0x4a/0x70 [ 920.260634][T22000] __do_fast_syscall_32+0x127/0x180 [ 920.260634][T22000] do_fast_syscall_32+0x6a/0xc0 [ 920.260634][T22000] do_SYSENTER_32+0x73/0x90 [ 920.260634][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.260634][T22000] RIP: 0023:0xf7fdd549 [ 920.260634][T22000] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 920.260634][T22000] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 920.260634][T22000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 920.260634][T22000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 920.260634][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 920.260634][T22000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 920.260634][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 920.260634][T22000] [ 920.260634][T22000] Uninit was stored to memory at: [ 920.260634][T22000] kmsan_internal_chain_origin+0xad/0x130 [ 920.260634][T22000] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 920.260634][T22000] kmsan_memmove_metadata+0xe/0x10 [ 920.260634][T22000] __msan_memmove+0x46/0x60 [ 920.260634][T22000] hsr_create_tagged_frame+0x855/0x11b0 [ 920.260634][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 920.260634][T22000] hsr_dev_xmit+0x133/0x230 [ 920.260634][T22000] xmit_one+0x2b6/0x760 [ 920.260634][T22000] __dev_queue_xmit+0x3432/0x4600 [ 920.260634][T22000] dev_queue_xmit+0x4b/0x60 [ 920.260634][T22000] __bpf_redirect+0x1461/0x16b0 [ 920.260634][T22000] bpf_clone_redirect+0x4a1/0x660 [ 920.260634][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 920.260634][T22000] __bpf_prog_run512+0x12e/0x190 [ 920.260634][T22000] bpf_test_run+0x53f/0xe60 [ 920.260634][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 920.260634][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 920.260634][T22000] __se_sys_bpf+0x8e/0xa0 [ 920.260634][T22000] __ia32_sys_bpf+0x4a/0x70 [ 920.260634][T22000] __do_fast_syscall_32+0x127/0x180 [ 920.260634][T22000] do_fast_syscall_32+0x6a/0xc0 [ 920.260634][T22000] do_SYSENTER_32+0x73/0x90 [ 920.260634][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.260634][T22000] [ 920.260634][T22000] Uninit was created at: [ 920.260634][T22000] kmsan_internal_poison_shadow+0x5c/0xf0 [ 920.260634][T22000] kmsan_slab_alloc+0x8e/0xe0 [ 920.260634][T22000] __kmalloc_node_track_caller+0xa4f/0x1470 [ 920.260634][T22000] __alloc_skb+0x4dd/0xe90 [ 920.260634][T22000] __pskb_copy_fclone+0x188/0x1920 [ 920.260634][T22000] hsr_create_tagged_frame+0x4aa/0x11b0 [ 920.260634][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 920.260634][T22000] hsr_dev_xmit+0x133/0x230 [ 920.260634][T22000] xmit_one+0x2b6/0x760 [ 920.260634][T22000] __dev_queue_xmit+0x3432/0x4600 [ 920.260634][T22000] dev_queue_xmit+0x4b/0x60 [ 920.260634][T22000] __bpf_redirect+0x1461/0x16b0 [ 920.260634][T22000] bpf_clone_redirect+0x4a1/0x660 [ 920.260634][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 920.260634][T22000] __bpf_prog_run512+0x12e/0x190 [ 920.260634][T22000] bpf_test_run+0x53f/0xe60 [ 920.260634][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 920.260634][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 920.260634][T22000] __se_sys_bpf+0x8e/0xa0 [ 920.260634][T22000] __ia32_sys_bpf+0x4a/0x70 [ 920.260634][T22000] __do_fast_syscall_32+0x127/0x180 [ 920.260634][T22000] do_fast_syscall_32+0x6a/0xc0 [ 920.260634][T22000] do_SYSENTER_32+0x73/0x90 [ 920.260634][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 920.260634][T22000] ===================================================== [ 921.008786][T22000] ===================================================== [ 921.015814][T22000] BUG: KMSAN: uninit-value in hsr_addr_subst_dest+0x626/0x860 [ 921.018588][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 921.031001][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.031001][T22000] Call Trace: [ 921.031001][T22000] dump_stack+0x24c/0x2e0 [ 921.031001][T22000] kmsan_report+0xfb/0x1e0 [ 921.031001][T22000] __msan_warning+0x5c/0xa0 [ 921.031001][T22000] hsr_addr_subst_dest+0x626/0x860 [ 921.031001][T22000] hsr_forward_skb+0x1d27/0x27f0 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] hsr_dev_xmit+0x133/0x230 [ 921.031001][T22000] ? is_hsr_master+0xb0/0xb0 [ 921.031001][T22000] xmit_one+0x2b6/0x760 [ 921.031001][T22000] __dev_queue_xmit+0x3432/0x4600 [ 921.031001][T22000] dev_queue_xmit+0x4b/0x60 [ 921.031001][T22000] __bpf_redirect+0x1461/0x16b0 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] bpf_clone_redirect+0x4a1/0x660 [ 921.031001][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 921.031001][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 921.031001][T22000] ? bpf_csum_level+0x760/0x760 [ 921.031001][T22000] __bpf_prog_run512+0x12e/0x190 [ 921.031001][T22000] ? process_slab+0x13a0/0x1b70 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] ? __msan_get_context_state+0x9/0x20 [ 921.031001][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 921.031001][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 921.031001][T22000] ? should_fail+0x72/0x9e0 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 921.031001][T22000] ? ktime_get+0x390/0x470 [ 921.031001][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] ? __bpf_prog_run480+0x190/0x190 [ 921.031001][T22000] bpf_test_run+0x53f/0xe60 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 921.031001][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 921.031001][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 921.031001][T22000] ? ctx_sched_in+0x975/0x980 [ 921.031001][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.031001][T22000] __se_sys_bpf+0x8e/0xa0 [ 921.031001][T22000] __ia32_sys_bpf+0x4a/0x70 [ 921.031001][T22000] __do_fast_syscall_32+0x127/0x180 [ 921.031001][T22000] do_fast_syscall_32+0x6a/0xc0 [ 921.031001][T22000] do_SYSENTER_32+0x73/0x90 [ 921.357679][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.357679][T22000] RIP: 0023:0xf7fdd549 [ 921.357679][T22000] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 921.357679][T22000] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 921.357679][T22000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 921.357679][T22000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.357679][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.357679][T22000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 921.357679][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.357679][T22000] [ 921.357679][T22000] Uninit was stored to memory at: [ 921.357679][T22000] kmsan_internal_chain_origin+0xad/0x130 [ 921.357679][T22000] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 921.357679][T22000] kmsan_memmove_metadata+0xe/0x10 [ 921.357679][T22000] __msan_memmove+0x46/0x60 [ 921.357679][T22000] hsr_create_tagged_frame+0x855/0x11b0 [ 921.357679][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 921.357679][T22000] hsr_dev_xmit+0x133/0x230 [ 921.357679][T22000] xmit_one+0x2b6/0x760 [ 921.357679][T22000] __dev_queue_xmit+0x3432/0x4600 [ 921.357679][T22000] dev_queue_xmit+0x4b/0x60 [ 921.357679][T22000] __bpf_redirect+0x1461/0x16b0 [ 921.357679][T22000] bpf_clone_redirect+0x4a1/0x660 [ 921.357679][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 921.357679][T22000] __bpf_prog_run512+0x12e/0x190 [ 921.357679][T22000] bpf_test_run+0x53f/0xe60 [ 921.357679][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 921.357679][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 921.357679][T22000] __se_sys_bpf+0x8e/0xa0 [ 921.357679][T22000] __ia32_sys_bpf+0x4a/0x70 [ 921.357679][T22000] __do_fast_syscall_32+0x127/0x180 [ 921.357679][T22000] do_fast_syscall_32+0x6a/0xc0 [ 921.357679][T22000] do_SYSENTER_32+0x73/0x90 [ 921.357679][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.357679][T22000] [ 921.357679][T22000] Uninit was created at: [ 921.357679][T22000] kmsan_internal_poison_shadow+0x5c/0xf0 [ 921.357679][T22000] kmsan_slab_alloc+0x8e/0xe0 [ 921.357679][T22000] __kmalloc_node_track_caller+0xa4f/0x1470 [ 921.357679][T22000] __alloc_skb+0x4dd/0xe90 [ 921.357679][T22000] __pskb_copy_fclone+0x188/0x1920 [ 921.357679][T22000] hsr_create_tagged_frame+0x4aa/0x11b0 [ 921.357679][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 921.357679][T22000] hsr_dev_xmit+0x133/0x230 [ 921.357679][T22000] xmit_one+0x2b6/0x760 [ 921.357679][T22000] __dev_queue_xmit+0x3432/0x4600 [ 921.357679][T22000] dev_queue_xmit+0x4b/0x60 [ 921.357679][T22000] __bpf_redirect+0x1461/0x16b0 [ 921.357679][T22000] bpf_clone_redirect+0x4a1/0x660 [ 921.357679][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 921.357679][T22000] __bpf_prog_run512+0x12e/0x190 [ 921.357679][T22000] bpf_test_run+0x53f/0xe60 [ 921.357679][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 921.357679][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 921.357679][T22000] __se_sys_bpf+0x8e/0xa0 [ 921.357679][T22000] __ia32_sys_bpf+0x4a/0x70 [ 921.357679][T22000] __do_fast_syscall_32+0x127/0x180 [ 921.357679][T22000] do_fast_syscall_32+0x6a/0xc0 [ 921.357679][T22000] do_SYSENTER_32+0x73/0x90 [ 921.357679][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.357679][T22000] ===================================================== [ 921.721070][T22000] ===================================================== [ 921.728340][T22000] BUG: KMSAN: uninit-value in hsr_addr_subst_dest+0x333/0x860 [ 921.730965][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 921.730965][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.758556][T22000] Call Trace: [ 921.758556][T22000] dump_stack+0x24c/0x2e0 [ 921.758556][T22000] kmsan_report+0xfb/0x1e0 [ 921.758556][T22000] __msan_warning+0x5c/0xa0 [ 921.758556][T22000] hsr_addr_subst_dest+0x333/0x860 [ 921.758556][T22000] hsr_forward_skb+0x1d27/0x27f0 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] hsr_dev_xmit+0x133/0x230 [ 921.758556][T22000] ? is_hsr_master+0xb0/0xb0 [ 921.758556][T22000] xmit_one+0x2b6/0x760 [ 921.758556][T22000] __dev_queue_xmit+0x3432/0x4600 [ 921.758556][T22000] dev_queue_xmit+0x4b/0x60 [ 921.758556][T22000] __bpf_redirect+0x1461/0x16b0 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] bpf_clone_redirect+0x4a1/0x660 [ 921.758556][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 921.758556][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 921.758556][T22000] ? bpf_csum_level+0x760/0x760 [ 921.758556][T22000] __bpf_prog_run512+0x12e/0x190 [ 921.758556][T22000] ? process_slab+0x13a0/0x1b70 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] ? __msan_get_context_state+0x9/0x20 [ 921.758556][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 921.758556][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 921.758556][T22000] ? should_fail+0x72/0x9e0 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 921.758556][T22000] ? ktime_get+0x390/0x470 [ 921.758556][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] ? __bpf_prog_run480+0x190/0x190 [ 921.758556][T22000] bpf_test_run+0x53f/0xe60 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 921.758556][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 921.758556][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 921.758556][T22000] ? ctx_sched_in+0x975/0x980 [ 921.758556][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] ? kmsan_get_metadata+0x116/0x180 [ 921.758556][T22000] __se_sys_bpf+0x8e/0xa0 [ 921.758556][T22000] __ia32_sys_bpf+0x4a/0x70 [ 921.758556][T22000] __do_fast_syscall_32+0x127/0x180 [ 921.758556][T22000] do_fast_syscall_32+0x6a/0xc0 [ 921.758556][T22000] do_SYSENTER_32+0x73/0x90 [ 921.758556][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.758556][T22000] RIP: 0023:0xf7fdd549 [ 921.758556][T22000] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 921.758556][T22000] RSP: 002b:00000000f55d75fc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 921.758556][T22000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 921.758556][T22000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.758556][T22000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.758556][T22000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 921.758556][T22000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.758556][T22000] [ 921.758556][T22000] Uninit was stored to memory at: [ 921.758556][T22000] kmsan_internal_chain_origin+0xad/0x130 [ 921.758556][T22000] kmsan_memcpy_memmove_metadata+0x25e/0x2d0 [ 921.758556][T22000] kmsan_memmove_metadata+0xe/0x10 [ 921.758556][T22000] __msan_memmove+0x46/0x60 [ 921.758556][T22000] hsr_create_tagged_frame+0x855/0x11b0 [ 921.758556][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 921.758556][T22000] hsr_dev_xmit+0x133/0x230 [ 921.758556][T22000] xmit_one+0x2b6/0x760 [ 921.758556][T22000] __dev_queue_xmit+0x3432/0x4600 [ 921.758556][T22000] dev_queue_xmit+0x4b/0x60 [ 921.758556][T22000] __bpf_redirect+0x1461/0x16b0 [ 921.758556][T22000] bpf_clone_redirect+0x4a1/0x660 [ 921.758556][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 921.758556][T22000] __bpf_prog_run512+0x12e/0x190 [ 921.758556][T22000] bpf_test_run+0x53f/0xe60 [ 921.758556][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 921.758556][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 921.758556][T22000] __se_sys_bpf+0x8e/0xa0 [ 921.758556][T22000] __ia32_sys_bpf+0x4a/0x70 [ 921.758556][T22000] __do_fast_syscall_32+0x127/0x180 [ 921.758556][T22000] do_fast_syscall_32+0x6a/0xc0 [ 921.758556][T22000] do_SYSENTER_32+0x73/0x90 [ 921.758556][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.758556][T22000] [ 921.758556][T22000] Uninit was created at: [ 921.758556][T22000] kmsan_internal_poison_shadow+0x5c/0xf0 [ 921.758556][T22000] kmsan_slab_alloc+0x8e/0xe0 [ 921.758556][T22000] __kmalloc_node_track_caller+0xa4f/0x1470 [ 921.758556][T22000] __alloc_skb+0x4dd/0xe90 [ 921.758556][T22000] __pskb_copy_fclone+0x188/0x1920 [ 921.758556][T22000] hsr_create_tagged_frame+0x4aa/0x11b0 [ 921.758556][T22000] hsr_forward_skb+0x16e5/0x27f0 [ 921.758556][T22000] hsr_dev_xmit+0x133/0x230 [ 921.758556][T22000] xmit_one+0x2b6/0x760 [ 921.758556][T22000] __dev_queue_xmit+0x3432/0x4600 [ 921.758556][T22000] dev_queue_xmit+0x4b/0x60 [ 921.758556][T22000] __bpf_redirect+0x1461/0x16b0 [ 921.758556][T22000] bpf_clone_redirect+0x4a1/0x660 [ 921.758556][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 921.758556][T22000] __bpf_prog_run512+0x12e/0x190 [ 921.758556][T22000] bpf_test_run+0x53f/0xe60 [ 921.758556][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 921.758556][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 921.758556][T22000] __se_sys_bpf+0x8e/0xa0 [ 921.758556][T22000] __ia32_sys_bpf+0x4a/0x70 [ 921.758556][T22000] __do_fast_syscall_32+0x127/0x180 [ 921.758556][T22000] do_fast_syscall_32+0x6a/0xc0 [ 921.758556][T22000] do_SYSENTER_32+0x73/0x90 [ 921.758556][T22000] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 921.758556][T22000] ===================================================== [ 922.417745][T22000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 922.424824][T22000] ===================================================== [ 922.431984][T22000] BUG: KMSAN: uninit-value in eth_type_trans+0x3e8/0xc10 [ 922.434735][T22000] CPU: 0 PID: 22000 Comm: syz-executor.3 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 922.434735][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.434735][T22000] Call Trace: [ 922.434735][T22000] dump_stack+0x24c/0x2e0 [ 922.434735][T22000] kmsan_report+0xfb/0x1e0 [ 922.434735][T22000] __msan_warning+0x5c/0xa0 [ 922.434735][T22000] eth_type_trans+0x3e8/0xc10 [ 922.434735][T22000] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 922.434735][T22000] __dev_forward_skb2+0x478/0xb90 [ 922.434735][T22000] __dev_forward_skb+0x70/0x80 [ 922.434735][T22000] veth_xmit+0x4a6/0xd90 [ 922.434735][T22000] ? veth_close+0x170/0x170 [ 922.434735][T22000] xmit_one+0x2b6/0x760 [ 922.434735][T22000] __dev_queue_xmit+0x3432/0x4600 [ 922.434735][T22000] dev_queue_xmit+0x4b/0x60 [ 922.434735][T22000] hsr_forward_skb+0x1f60/0x27f0 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] hsr_dev_xmit+0x133/0x230 [ 922.434735][T22000] ? is_hsr_master+0xb0/0xb0 [ 922.434735][T22000] xmit_one+0x2b6/0x760 [ 922.434735][T22000] __dev_queue_xmit+0x3432/0x4600 [ 922.434735][T22000] dev_queue_xmit+0x4b/0x60 [ 922.434735][T22000] __bpf_redirect+0x1461/0x16b0 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] bpf_clone_redirect+0x4a1/0x660 [ 922.434735][T22000] ___bpf_prog_run+0x2b78/0xb950 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x29/0xb0 [ 922.434735][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 922.434735][T22000] ? bpf_csum_level+0x760/0x760 [ 922.434735][T22000] __bpf_prog_run512+0x12e/0x190 [ 922.434735][T22000] ? process_slab+0x13a0/0x1b70 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] ? __msan_get_context_state+0x9/0x20 [ 922.434735][T22000] ? memcg_slab_post_alloc_hook+0x41/0xe50 [ 922.434735][T22000] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 922.434735][T22000] ? should_fail+0x72/0x9e0 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 922.434735][T22000] ? ktime_get+0x390/0x470 [ 922.434735][T22000] ? kmsan_get_metadata+0x4f/0x180 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] ? __bpf_prog_run480+0x190/0x190 [ 922.434735][T22000] bpf_test_run+0x53f/0xe60 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] bpf_prog_test_run_skb+0x1914/0x3500 [ 922.434735][T22000] ? __bpf_prog_test_run_raw_tp+0x3e0/0x3e0 [ 922.434735][T22000] __do_sys_bpf+0xbe6f/0x1aba0 [ 922.434735][T22000] ? ctx_sched_in+0x975/0x980 [ 922.434735][T22000] ? kmsan_internal_set_origin+0x85/0xc0 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_internal_check_memory+0xb5/0x520 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] ? kmsan_get_metadata+0x116/0x180 [ 922.434735][T22000] __se_sys_bpf+0x8e/0xa0 [ 922.434735][T22000] __ia32_sys_bpf+0x4a/0x70 [ 922.434735][T22000] __do_fast_syscall_32+0x127/0x180