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", 0x1ec}], 0x0, &(0x7f0000001940)) 05:13:42 executing program 4: syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x2, &(0x7f0000000940)=[{&(0x7f0000000540)='k', 0x1}, {&(0x7f00000007c0)="c1ed", 0x2, 0xffffffff}], 0x2002800, &(0x7f00000009c0)) 05:13:42 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4086, 0xff6}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000a5c0)}}], 0x8, 0x2102, 0x0) [ 1333.657988][T19534] loop2: detected capacity change from 0 to 1 05:13:42 executing program 3: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) [ 1333.811084][T19538] loop0: detected capacity change from 0 to 264192 [ 1333.841696][T19534] Dev loop2: unable to read RDB block 1 [ 1333.847852][T19534] loop2: unable to read partition table 05:13:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1333.870679][T19539] loop4: detected capacity change from 0 to 264192 [ 1333.925585][T19534] loop2: partition table beyond EOD, truncated [ 1333.928990][T19538] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1333.998925][T19538] qnx6: wrong signature (magic) in superblock #1. [ 1334.005992][T19538] qnx6: unable to read the first superblock [ 1334.014501][T19534] qnx6: unable to read the first superblock [ 1334.035008][T19534] qnx6: wrong signature (magic) in superblock #1. [ 1334.041852][T19534] qnx6: unable to read the first superblock 05:13:43 executing program 4: r0 = socket(0x1d, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 05:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x1c, 0x19, 0x21}, 0x1c}}, 0x0) 05:13:43 executing program 0: sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) 05:13:43 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xe, &(0x7f0000000040), 0x4) 05:13:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="b9800000c03500400000665c8239fbc4237d0923062e35c5e17de74bc402793350f8f800c4635765f766400fc774a666baf80cb8623a8480ef66bafc0cc422a58c010fbcf726660f38807769653626400fc7bb00000000360f7955f49af342d8868680000049b8206bc3c3220d2d4f5d2e66420fc73366bab6203e65650f06", 0x7f}], 0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002400)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:13:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x401, 0x2, 0x0, 0x0, @msi}, {0x0, 0x1}]}) 05:13:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4000012, r1, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 05:13:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x2) 05:13:44 executing program 5: syz_clone(0x3a040000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:13:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x80) 05:13:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x38}}, 0x0) 05:13:44 executing program 1: syz_open_dev$vcsu(&(0x7f0000000400), 0x101, 0x2300) unshare(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) unshare(0x4a000000) [ 1335.983086][T19576] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 05:13:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)=[{0xf, 0x0, 0x0, "a6"}], 0x18}, 0x0) 05:13:45 executing program 0: read$midi(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000840), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x800, 0x0) 05:13:45 executing program 3: r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d00031d5ab80009050400005539000009050700000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) 05:13:45 executing program 5: pipe(&(0x7f0000030440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) dup3(r2, r1, 0x0) [ 1336.720492][T19573] not chained 340000 origins [ 1336.725354][T19573] CPU: 0 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1336.736036][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1336.746218][T19573] Call Trace: [ 1336.749586][T19573] [ 1336.752611][T19573] dump_stack_lvl+0x1c8/0x256 [ 1336.757502][T19573] dump_stack+0x1a/0x1c [ 1336.761842][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1336.767738][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1336.773990][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.779285][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.785722][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.791009][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.796997][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.802277][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.808272][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1336.813676][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.818959][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.824952][T19573] ? should_fail+0x3f/0x810 [ 1336.829627][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1336.834907][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.840205][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.846640][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.851923][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.857911][T19573] __msan_chain_origin+0xbd/0x140 [ 1336.863103][T19573] __get_compat_msghdr+0x514/0x750 [ 1336.868439][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1336.873492][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1336.878405][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1336.883232][T19573] ___sys_recvmsg+0x19d/0x890 [ 1336.888069][T19573] ? __schedule+0x1609/0x21d0 [ 1336.892911][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.898199][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.904185][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.909466][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1336.915463][T19573] do_recvmmsg+0x63a/0x10a0 [ 1336.920139][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1336.926569][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1336.931480][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.938077][T19573] __sys_recvmmsg+0x113/0x450 [ 1336.942899][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1336.948190][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1336.954621][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1336.959796][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1336.965768][T19573] do_fast_syscall_32+0x33/0x70 [ 1336.970770][T19573] do_SYSENTER_32+0x1b/0x20 [ 1336.975418][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1336.981966][T19573] RIP: 0023:0xf7ff9549 [ 1336.986146][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1337.005933][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1337.014500][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1337.022604][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1337.030705][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.038793][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.046893][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.055009][T19573] [ 1337.064361][T19573] Uninit was stored to memory at: [ 1337.070546][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.075997][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.081073][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.086025][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.090686][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.095637][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.102058][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.107370][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.112485][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.117145][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.123833][T19573] [ 1337.126239][T19573] Uninit was stored to memory at: [ 1337.131491][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.136928][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.141983][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.146946][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.151618][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.156566][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.163109][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.168294][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.173476][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.178139][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.184906][T19573] [ 1337.187315][T19573] Uninit was stored to memory at: [ 1337.192688][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.198015][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.203274][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.208117][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.212952][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.217810][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.224412][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.229610][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.234813][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.239474][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.246235][T19573] [ 1337.248650][T19573] Uninit was stored to memory at: [ 1337.254071][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.259396][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.264644][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.269485][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.274324][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.279167][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.285781][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.290970][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.296092][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.300752][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.307491][T19573] [ 1337.309903][T19573] Uninit was stored to memory at: [ 1337.315337][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.320661][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.325900][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.330743][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.335570][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.340416][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.347024][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.352219][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.357401][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.362063][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.368802][T19573] [ 1337.371207][T19573] Uninit was stored to memory at: [ 1337.376645][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.381974][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.387209][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.392040][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.396811][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.401659][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.408262][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.413570][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.418591][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.423426][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.429996][T19573] [ 1337.432510][T19573] Uninit was stored to memory at: [ 1337.437770][T19573] __get_compat_msghdr+0x514/0x750 [ 1337.443203][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1337.448267][T19573] ___sys_recvmsg+0x19d/0x890 [ 1337.453221][T19573] do_recvmmsg+0x63a/0x10a0 [ 1337.457882][T19573] __sys_recvmmsg+0x113/0x450 [ 1337.462825][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1337.469251][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1337.474559][T19573] do_fast_syscall_32+0x33/0x70 [ 1337.479573][T19573] do_SYSENTER_32+0x1b/0x20 [ 1337.484348][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1337.490916][T19573] [ 1337.493435][T19573] Local variable msg_sys created at: [ 1337.498811][T19573] do_recvmmsg+0x5f/0x10a0 [ 1337.503495][T19573] __sys_recvmmsg+0x113/0x450 05:13:46 executing program 4: r0 = socket(0x25, 0x1, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:13:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 05:13:46 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 1338.072855][T15629] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1338.312569][T15629] usb 4-1: Using ep0 maxpacket: 16 [ 1338.433375][T15629] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1338.442112][T15629] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1338.451504][T15629] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1338.460038][T15629] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1338.468548][T15629] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1338.477901][T15629] usb 4-1: config 0 has no interface number 0 [ 1338.484323][T15629] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1338.495760][T15629] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1338.505977][T15629] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1338.517731][T15629] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1338.531476][T15629] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1338.795864][T15629] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1338.805896][T15629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.814349][T15629] usb 4-1: Product: syz [ 1338.818732][T15629] usb 4-1: Manufacturer: syz [ 1338.825250][T15629] usb 4-1: SerialNumber: syz [ 1338.979464][T15629] usb 4-1: config 0 descriptor?? [ 1339.033200][T15629] usb 4-1: selecting invalid altsetting 2 [ 1339.364984][T19573] not chained 350000 origins [ 1339.369804][T19573] CPU: 0 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1339.380481][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1339.390669][T19573] Call Trace: [ 1339.394041][T19573] [ 1339.397059][T19573] dump_stack_lvl+0x1c8/0x256 [ 1339.401929][T19573] dump_stack+0x1a/0x1c [ 1339.406265][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1339.412175][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1339.418432][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.423729][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1339.430147][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.435437][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.441444][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.446746][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.453016][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1339.458400][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.463669][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.469683][T19573] ? should_fail+0x3f/0x810 [ 1339.474367][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1339.479652][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.484934][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1339.491373][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.496662][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.502646][T19573] __msan_chain_origin+0xbd/0x140 [ 1339.507837][T19573] __get_compat_msghdr+0x514/0x750 [ 1339.513190][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1339.518258][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1339.523184][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1339.528028][T19573] ___sys_recvmsg+0x19d/0x890 [ 1339.532888][T19573] ? __schedule+0x1609/0x21d0 [ 1339.537738][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.543036][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.549036][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.554335][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1339.560362][T19573] do_recvmmsg+0x63a/0x10a0 [ 1339.565063][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1339.571515][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1339.576434][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.583030][T19573] __sys_recvmmsg+0x113/0x450 [ 1339.587884][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1339.593191][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.599614][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1339.604784][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1339.610774][T19573] do_fast_syscall_32+0x33/0x70 [ 1339.615790][T19573] do_SYSENTER_32+0x1b/0x20 [ 1339.620450][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.627012][T19573] RIP: 0023:0xf7ff9549 [ 1339.631221][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1339.651018][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1339.659584][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1339.667688][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1339.675798][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.683900][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.691988][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.700103][T19573] [ 1339.705776][T19573] Uninit was stored to memory at: [ 1339.711047][T19573] __get_compat_msghdr+0x514/0x750 [ 1339.716697][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1339.721759][T19573] ___sys_recvmsg+0x19d/0x890 [ 1339.726721][T19573] do_recvmmsg+0x63a/0x10a0 [ 1339.731397][T19573] __sys_recvmmsg+0x113/0x450 [ 1339.736323][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.742837][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1339.748027][T19573] do_fast_syscall_32+0x33/0x70 [ 1339.753163][T19573] do_SYSENTER_32+0x1b/0x20 [ 1339.757825][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.764501][T19573] [ 1339.766910][T19573] Uninit was stored to memory at: [ 1339.772169][T19573] __get_compat_msghdr+0x514/0x750 [ 1339.777598][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1339.782769][T19573] ___sys_recvmsg+0x19d/0x890 [ 1339.787606][T19573] do_recvmmsg+0x63a/0x10a0 [ 1339.792266][T19573] __sys_recvmmsg+0x113/0x450 [ 1339.797213][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.803751][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1339.808943][T19573] do_fast_syscall_32+0x33/0x70 [ 1339.814072][T19573] do_SYSENTER_32+0x1b/0x20 [ 1339.818745][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.825478][T19573] [ 1339.827887][T19573] Uninit was stored to memory at: [ 1339.833339][T19573] __get_compat_msghdr+0x514/0x750 [ 1339.838671][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1339.843915][T19573] ___sys_recvmsg+0x19d/0x890 [ 1339.848753][T19573] do_recvmmsg+0x63a/0x10a0 [ 1339.853581][T19573] __sys_recvmmsg+0x113/0x450 [ 1339.858424][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.865033][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1339.870235][T19573] do_fast_syscall_32+0x33/0x70 [ 1339.875411][T19573] do_SYSENTER_32+0x1b/0x20 [ 1339.880071][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.886800][T19573] [ 1339.889224][T19573] Uninit was stored to memory at: [ 1339.894644][T19573] __get_compat_msghdr+0x514/0x750 [ 1339.899962][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1339.905214][T19573] ___sys_recvmsg+0x19d/0x890 [ 1339.910059][T19573] do_recvmmsg+0x63a/0x10a0 [ 1339.914874][T19573] __sys_recvmmsg+0x113/0x450 [ 1339.919713][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.926321][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1339.931515][T19573] do_fast_syscall_32+0x33/0x70 [ 1339.936706][T19573] do_SYSENTER_32+0x1b/0x20 [ 1339.941370][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1339.948102][T19573] [ 1339.950509][T19573] Uninit was stored to memory at: [ 1339.955884][T19573] __get_compat_msghdr+0x514/0x750 [ 1339.961203][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1339.966428][T19573] ___sys_recvmsg+0x19d/0x890 [ 1339.971269][T19573] do_recvmmsg+0x63a/0x10a0 [ 1339.976104][T19573] __sys_recvmmsg+0x113/0x450 [ 1339.980947][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1339.987558][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1339.992862][T19573] do_fast_syscall_32+0x33/0x70 [ 1339.997872][T19573] do_SYSENTER_32+0x1b/0x20 [ 1340.002689][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.009255][T19573] [ 1340.011664][T19573] Uninit was stored to memory at: [ 1340.017082][T19573] __get_compat_msghdr+0x514/0x750 [ 1340.022512][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1340.027569][T19573] ___sys_recvmsg+0x19d/0x890 [ 1340.032572][T19573] do_recvmmsg+0x63a/0x10a0 [ 1340.037237][T19573] __sys_recvmmsg+0x113/0x450 [ 1340.042078][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.048684][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1340.053989][T19573] do_fast_syscall_32+0x33/0x70 [ 1340.059006][T19573] do_SYSENTER_32+0x1b/0x20 [ 1340.063842][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.070406][T19573] [ 1340.072974][T19573] Uninit was stored to memory at: [ 1340.078236][T19573] __get_compat_msghdr+0x514/0x750 [ 1340.083726][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1340.088788][T19573] ___sys_recvmsg+0x19d/0x890 [ 1340.093794][T19573] do_recvmmsg+0x63a/0x10a0 [ 1340.098457][T19573] __sys_recvmmsg+0x113/0x450 [ 1340.103456][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1340.109878][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1340.115239][T19573] do_fast_syscall_32+0x33/0x70 [ 1340.120254][T19573] do_SYSENTER_32+0x1b/0x20 [ 1340.125090][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1340.131654][T19573] [ 1340.134238][T19573] Local variable msg_sys created at: [ 1340.139618][T19573] do_recvmmsg+0x5f/0x10a0 [ 1340.144364][T19573] __sys_recvmmsg+0x113/0x450 [ 1340.155928][T15629] get_1284_register timeout [ 1340.160637][T15629] parport0: fix this legacy no-device port driver! [ 1340.172560][ C0] usb 4-1: async_complete: urb error -104 [ 1340.179305][ C0] usb 4-1: async_complete: urb error -104 [ 1340.186002][ C0] usb 4-1: async_complete: urb error -104 [ 1340.417740][ T3583] usb 4-1: USB disconnect, device number 16 [ 1341.171490][T19573] not chained 360000 origins [ 1341.178592][T19573] CPU: 0 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1341.189278][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1341.199464][T19573] Call Trace: [ 1341.202839][T19573] [ 1341.205863][T19573] dump_stack_lvl+0x1c8/0x256 [ 1341.210761][T19573] dump_stack+0x1a/0x1c [ 1341.215110][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1341.221014][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1341.227274][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.232567][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1341.239007][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.244306][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1341.250303][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.255597][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1341.261591][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1341.267003][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.272299][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1341.278301][T19573] ? should_fail+0x3f/0x810 [ 1341.282983][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1341.288277][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.293575][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1341.300011][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.305308][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1341.311306][T19573] __msan_chain_origin+0xbd/0x140 [ 1341.316509][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.321863][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.326921][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1341.331842][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1341.336684][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.341537][T19573] ? __schedule+0x1609/0x21d0 [ 1341.346388][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.351678][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1341.357675][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.362962][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1341.368977][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.373672][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1341.380118][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1341.385036][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.391653][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.396486][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1341.401788][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.408232][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.413423][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1341.419412][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.424425][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.429085][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.435649][T19573] RIP: 0023:0xf7ff9549 [ 1341.439843][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1341.459647][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1341.468228][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1341.476338][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1341.484439][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1341.492545][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.500646][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1341.508777][T19573] [ 1341.517431][T19573] Uninit was stored to memory at: [ 1341.523708][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.529029][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.534218][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.539055][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.543851][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.548950][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.555500][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.560693][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.565817][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.570474][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.577157][T19573] [ 1341.579566][T19573] Uninit was stored to memory at: [ 1341.584939][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.590281][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.595459][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.600291][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.605060][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.609894][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.616421][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.621607][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.626730][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.631406][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.638081][T19573] [ 1341.640488][T19573] Uninit was stored to memory at: [ 1341.645918][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.651242][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.656478][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.661313][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.666191][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.671036][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.677654][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.682968][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.687982][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.692821][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.699384][T19573] [ 1341.701786][T19573] Uninit was stored to memory at: [ 1341.707245][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.712683][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.717737][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.722701][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.727369][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.732205][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.738801][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.744172][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.749184][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.754029][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.760587][T19573] [ 1341.763169][T19573] Uninit was stored to memory at: [ 1341.768419][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.773852][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.778909][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.783925][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.788583][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.793613][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.800045][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.805424][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.810436][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.815277][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.821836][T19573] [ 1341.824413][T19573] Uninit was stored to memory at: [ 1341.829671][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.835110][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.840168][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.845245][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.849907][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.854924][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.861351][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.866718][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.871744][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.876574][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.883252][T19573] [ 1341.885654][T19573] Uninit was stored to memory at: [ 1341.890907][T19573] __get_compat_msghdr+0x514/0x750 [ 1341.896405][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1341.901461][T19573] ___sys_recvmsg+0x19d/0x890 [ 1341.906477][T19573] do_recvmmsg+0x63a/0x10a0 [ 1341.911138][T19573] __sys_recvmmsg+0x113/0x450 [ 1341.916155][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1341.922700][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1341.927888][T19573] do_fast_syscall_32+0x33/0x70 [ 1341.933058][T19573] do_SYSENTER_32+0x1b/0x20 [ 1341.937719][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1341.944399][T19573] [ 1341.946804][T19573] Local variable msg_sys created at: [ 1341.952195][T19573] do_recvmmsg+0x5f/0x10a0 [ 1341.956941][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.346868][T19573] not chained 370000 origins [ 1342.351595][T19573] CPU: 0 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1342.362277][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1342.372461][T19573] Call Trace: [ 1342.375834][T19573] [ 1342.378863][T19573] dump_stack_lvl+0x1c8/0x256 [ 1342.383754][T19573] dump_stack+0x1a/0x1c [ 1342.388090][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1342.393982][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1342.400224][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.405511][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1342.411950][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.417233][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.423219][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.428495][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.434479][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1342.439879][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.445155][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.451145][T19573] ? should_fail+0x3f/0x810 [ 1342.455813][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1342.461086][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.466366][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1342.472785][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.478066][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.484048][T19573] __msan_chain_origin+0xbd/0x140 [ 1342.489237][T19573] __get_compat_msghdr+0x514/0x750 [ 1342.494570][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1342.499620][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1342.504531][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1342.509366][T19573] ___sys_recvmsg+0x19d/0x890 [ 1342.514204][T19573] ? __schedule+0x1609/0x21d0 [ 1342.519039][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.524320][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.530304][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.535586][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1342.541583][T19573] do_recvmmsg+0x63a/0x10a0 [ 1342.546268][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1342.552697][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1342.557608][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.564204][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.569024][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1342.574316][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.580746][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1342.585921][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1342.591893][T19573] do_fast_syscall_32+0x33/0x70 [ 1342.596895][T19573] do_SYSENTER_32+0x1b/0x20 [ 1342.601540][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.608091][T19573] RIP: 0023:0xf7ff9549 [ 1342.612272][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1342.632064][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1342.640634][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1342.648741][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1342.656829][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.664917][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.673005][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.681131][T19573] [ 1342.686514][T19573] Uninit was stored to memory at: [ 1342.691790][T19573] __get_compat_msghdr+0x514/0x750 [ 1342.697384][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1342.702559][T19573] ___sys_recvmsg+0x19d/0x890 [ 1342.707398][T19573] do_recvmmsg+0x63a/0x10a0 [ 1342.712075][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.717027][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.723561][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1342.728753][T19573] do_fast_syscall_32+0x33/0x70 [ 1342.733875][T19573] do_SYSENTER_32+0x1b/0x20 [ 1342.738527][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.745204][T19573] [ 1342.747616][T19573] Uninit was stored to memory at: [ 1342.752985][T19573] __get_compat_msghdr+0x514/0x750 [ 1342.758314][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1342.763489][T19573] ___sys_recvmsg+0x19d/0x890 [ 1342.768344][T19573] do_recvmmsg+0x63a/0x10a0 [ 1342.773117][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.777950][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.784487][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1342.789687][T19573] do_fast_syscall_32+0x33/0x70 [ 1342.794867][T19573] do_SYSENTER_32+0x1b/0x20 [ 1342.799521][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.806194][T19573] [ 1342.808604][T19573] Uninit was stored to memory at: [ 1342.814026][T19573] __get_compat_msghdr+0x514/0x750 [ 1342.819352][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1342.824530][T19573] ___sys_recvmsg+0x19d/0x890 [ 1342.829372][T19573] do_recvmmsg+0x63a/0x10a0 [ 1342.834136][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.838972][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.845573][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1342.850747][T19573] do_fast_syscall_32+0x33/0x70 [ 1342.855878][T19573] do_SYSENTER_32+0x1b/0x20 [ 1342.860515][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.867118][T19573] [ 1342.869505][T19573] Uninit was stored to memory at: [ 1342.874900][T19573] __get_compat_msghdr+0x514/0x750 [ 1342.880202][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1342.885360][T19573] ___sys_recvmsg+0x19d/0x890 [ 1342.890174][T19573] do_recvmmsg+0x63a/0x10a0 [ 1342.894894][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.899706][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.906234][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1342.911398][T19573] do_fast_syscall_32+0x33/0x70 [ 1342.916467][T19573] do_SYSENTER_32+0x1b/0x20 [ 1342.921132][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.927810][T19573] [ 1342.930215][T19573] Uninit was stored to memory at: [ 1342.935580][T19573] __get_compat_msghdr+0x514/0x750 [ 1342.940905][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1342.946076][T19573] ___sys_recvmsg+0x19d/0x890 [ 1342.950889][T19573] do_recvmmsg+0x63a/0x10a0 [ 1342.955666][T19573] __sys_recvmmsg+0x113/0x450 [ 1342.960500][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1342.967050][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1342.972241][T19573] do_fast_syscall_32+0x33/0x70 [ 1342.977415][T19573] do_SYSENTER_32+0x1b/0x20 [ 1342.982075][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1342.988788][T19573] [ 1342.991158][T19573] Uninit was stored to memory at: [ 1342.996502][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.001802][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.006922][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.011730][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.016480][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.021322][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.027916][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.033218][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.038227][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.043055][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.049619][T19573] [ 1343.052002][T19573] Uninit was stored to memory at: [ 1343.057343][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.062787][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.067844][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.072853][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.077509][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.082455][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.088878][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.094247][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.099251][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.103976][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.110512][T19573] [ 1343.113072][T19573] Local variable msg_sys created at: [ 1343.118447][T19573] do_recvmmsg+0x5f/0x10a0 [ 1343.123186][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.360592][T19573] not chained 380000 origins [ 1343.365482][T19573] CPU: 1 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1343.376165][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1343.386289][T19573] Call Trace: [ 1343.389613][T19573] [ 1343.392586][T19573] dump_stack_lvl+0x1c8/0x256 [ 1343.397381][T19573] dump_stack+0x1a/0x1c [ 1343.401646][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1343.407462][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1343.413629][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.418832][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1343.425201][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.430494][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.436467][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.441672][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.447836][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1343.453156][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.458357][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.464299][T19573] ? should_fail+0x3f/0x810 [ 1343.468984][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1343.474257][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.479457][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1343.485825][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.491088][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.496999][T19573] __msan_chain_origin+0xbd/0x140 [ 1343.502120][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.507378][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.512364][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1343.517253][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1343.522007][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.526849][T19573] ? __schedule+0x1609/0x21d0 [ 1343.531657][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.536934][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.542872][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.548142][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1343.554052][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.558662][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1343.565039][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1343.569939][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.576482][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.581300][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1343.586542][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.592901][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.598008][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1343.603936][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.608929][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.613509][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.619969][T19573] RIP: 0023:0xf7ff9549 [ 1343.624116][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1343.643926][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1343.652496][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1343.660536][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1343.668573][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.676608][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.684678][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.692773][T19573] [ 1343.703139][T19573] Uninit was stored to memory at: [ 1343.708416][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.714500][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.719577][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.724525][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.729191][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.734124][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.740574][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.745919][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.750911][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.755621][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.762160][T19573] [ 1343.764691][T19573] Uninit was stored to memory at: [ 1343.769940][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.775360][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.780397][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.785345][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.790009][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.794999][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.801402][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.806701][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.811698][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.816407][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.823063][T19573] [ 1343.825470][T19573] Uninit was stored to memory at: [ 1343.830653][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.835997][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.841213][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.846201][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.850840][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.855724][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.862129][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.867413][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.872504][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.877142][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.883746][T19573] [ 1343.886151][T19573] Uninit was stored to memory at: [ 1343.891439][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.896884][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.901916][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.906864][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.911499][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.916442][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.922960][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.928140][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.933234][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.937896][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1343.944601][T19573] [ 1343.947014][T19573] Uninit was stored to memory at: [ 1343.952189][T19573] __get_compat_msghdr+0x514/0x750 [ 1343.957591][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1343.962798][T19573] ___sys_recvmsg+0x19d/0x890 [ 1343.967613][T19573] do_recvmmsg+0x63a/0x10a0 [ 1343.972188][T19573] __sys_recvmmsg+0x113/0x450 [ 1343.977101][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1343.983675][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1343.988840][T19573] do_fast_syscall_32+0x33/0x70 [ 1343.993943][T19573] do_SYSENTER_32+0x1b/0x20 [ 1343.998599][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.005309][T19573] [ 1344.007692][T19573] Uninit was stored to memory at: [ 1344.013041][T19573] __get_compat_msghdr+0x514/0x750 [ 1344.018361][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1344.023560][T19573] ___sys_recvmsg+0x19d/0x890 [ 1344.028379][T19573] do_recvmmsg+0x63a/0x10a0 [ 1344.033127][T19573] __sys_recvmmsg+0x113/0x450 [ 1344.037938][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.044437][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1344.049630][T19573] do_fast_syscall_32+0x33/0x70 [ 1344.054794][T19573] do_SYSENTER_32+0x1b/0x20 [ 1344.059432][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.066056][T19573] [ 1344.068438][T19573] Uninit was stored to memory at: [ 1344.073813][T19573] __get_compat_msghdr+0x514/0x750 [ 1344.079106][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1344.084237][T19573] ___sys_recvmsg+0x19d/0x890 [ 1344.089051][T19573] do_recvmmsg+0x63a/0x10a0 [ 1344.093799][T19573] __sys_recvmmsg+0x113/0x450 [ 1344.098616][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.105155][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1344.110317][T19573] do_fast_syscall_32+0x33/0x70 [ 1344.115420][T19573] do_SYSENTER_32+0x1b/0x20 [ 1344.120053][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.126711][T19573] [ 1344.129119][T19573] Local variable msg_sys created at: [ 1344.134645][T19573] do_recvmmsg+0x5f/0x10a0 [ 1344.139194][T19573] __sys_recvmmsg+0x113/0x450 [ 1344.602685][T19573] not chained 390000 origins [ 1344.607412][T19573] CPU: 0 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1344.618062][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1344.628187][T19573] Call Trace: [ 1344.631506][T19573] [ 1344.634476][T19573] dump_stack_lvl+0x1c8/0x256 [ 1344.639270][T19573] dump_stack+0x1a/0x1c [ 1344.643521][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1344.649332][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1344.655520][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.660814][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1344.667252][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.672545][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.678541][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.683807][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.689724][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1344.695048][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.700268][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.706219][T19573] ? should_fail+0x3f/0x810 [ 1344.710909][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1344.716204][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.721489][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1344.727838][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.733057][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.738973][T19573] __msan_chain_origin+0xbd/0x140 [ 1344.744105][T19573] __get_compat_msghdr+0x514/0x750 [ 1344.749570][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1344.754563][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1344.759496][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1344.764346][T19573] ___sys_recvmsg+0x19d/0x890 [ 1344.769201][T19573] ? __schedule+0x1609/0x21d0 [ 1344.774032][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.779240][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.785152][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.790365][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1344.796283][T19573] do_recvmmsg+0x63a/0x10a0 [ 1344.800883][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1344.807266][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1344.812192][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.818795][T19573] __sys_recvmmsg+0x113/0x450 [ 1344.823612][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1344.828830][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.835180][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1344.840318][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1344.846301][T19573] do_fast_syscall_32+0x33/0x70 [ 1344.851306][T19573] do_SYSENTER_32+0x1b/0x20 [ 1344.855923][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.862501][T19573] RIP: 0023:0xf7ff9549 [ 1344.866689][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1344.886475][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1344.894972][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1344.903036][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1344.911122][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.919157][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.927190][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.935246][T19573] [ 1344.940497][T19573] Uninit was stored to memory at: [ 1344.946038][T19573] __get_compat_msghdr+0x514/0x750 [ 1344.951370][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1344.956559][T19573] ___sys_recvmsg+0x19d/0x890 [ 1344.961390][T19573] do_recvmmsg+0x63a/0x10a0 [ 1344.966163][T19573] __sys_recvmmsg+0x113/0x450 [ 1344.970992][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1344.977536][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1344.982837][T19573] do_fast_syscall_32+0x33/0x70 [ 1344.987845][T19573] do_SYSENTER_32+0x1b/0x20 [ 1344.992613][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1344.999174][T19573] [ 1345.001577][T19573] Uninit was stored to memory at: [ 1345.006960][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.012398][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.017452][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.022397][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.027057][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.031901][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.038378][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.043677][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.048686][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.053401][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.059850][T19573] [ 1345.062205][T19573] Uninit was stored to memory at: [ 1345.067599][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.073021][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.078077][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.083117][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.087776][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.092725][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.099158][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.104537][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.109538][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.114337][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.120880][T19573] [ 1345.123433][T19573] Uninit was stored to memory at: [ 1345.128695][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.134076][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.139042][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.144003][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.148640][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.153618][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.160015][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.165278][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.170289][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.175100][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.181657][T19573] [ 1345.184237][T19573] Uninit was stored to memory at: [ 1345.189497][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.195004][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.200062][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.205048][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.209683][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.214645][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.221073][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.226447][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.231466][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.236303][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.242985][T19573] [ 1345.245388][T19573] Uninit was stored to memory at: [ 1345.250569][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.255936][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.260969][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.265871][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.270509][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.275451][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.281882][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.287259][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.292376][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.297035][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.303747][T19573] [ 1345.306138][T19573] Uninit was stored to memory at: [ 1345.311286][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.316718][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.321777][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.326806][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.331489][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.336451][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.343016][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.348208][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.353393][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.358028][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.364634][T19573] [ 1345.367021][T19573] Local variable msg_sys created at: [ 1345.372523][T19573] do_recvmmsg+0x5f/0x10a0 [ 1345.377095][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.619136][T19573] not chained 400000 origins [ 1345.624175][T19573] CPU: 1 PID: 19573 Comm: syz-executor.2 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1345.634828][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1345.644976][T19573] Call Trace: [ 1345.648349][T19573] [ 1345.651353][T19573] dump_stack_lvl+0x1c8/0x256 [ 1345.656221][T19573] dump_stack+0x1a/0x1c [ 1345.660489][T19573] kmsan_internal_chain_origin+0x78/0x120 [ 1345.666344][T19573] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1345.672631][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.677860][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1345.684246][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.689544][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.695530][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.700740][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.706678][T19573] ? __get_compat_msghdr+0x5b/0x750 [ 1345.712089][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.717301][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.723247][T19573] ? should_fail+0x3f/0x810 [ 1345.727935][T19573] ? __stack_depot_save+0x21/0x4b0 [ 1345.733208][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.738418][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1345.744785][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.750058][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.755973][T19573] __msan_chain_origin+0xbd/0x140 [ 1345.761087][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.766390][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.771448][T19573] ? ___sys_recvmsg+0xa9/0x890 [ 1345.776305][T19573] ? do_recvmmsg+0x63a/0x10a0 [ 1345.781071][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.785872][T19573] ? __schedule+0x1609/0x21d0 [ 1345.790727][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.796000][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.801927][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.807166][T19573] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1345.813181][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.817838][T19573] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1345.824219][T19573] ? __sys_recvmmsg+0x52/0x450 [ 1345.829150][T19573] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.835728][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.840484][T19573] ? kmsan_get_metadata+0x33/0x220 [ 1345.845727][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.852143][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1345.857254][T19573] ? exit_to_user_mode_prepare+0x119/0x220 [ 1345.863188][T19573] do_fast_syscall_32+0x33/0x70 [ 1345.868179][T19573] do_SYSENTER_32+0x1b/0x20 [ 1345.872783][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1345.879324][T19573] RIP: 0023:0xf7ff9549 [ 1345.883470][T19573] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1345.903279][T19573] RSP: 002b:00000000f7fd35cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1345.911840][T19573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1345.919882][T19573] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1345.927920][T19573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1345.935981][T19573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.944084][T19573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1345.952251][T19573] [ 1345.962598][T19573] Uninit was stored to memory at: [ 1345.967876][T19573] __get_compat_msghdr+0x514/0x750 [ 1345.973854][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1345.978919][T19573] ___sys_recvmsg+0x19d/0x890 [ 1345.983848][T19573] do_recvmmsg+0x63a/0x10a0 [ 1345.988507][T19573] __sys_recvmmsg+0x113/0x450 [ 1345.993431][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1345.999857][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.005198][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.010205][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.014933][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.021387][T19573] [ 1346.023908][T19573] Uninit was stored to memory at: [ 1346.029161][T19573] __get_compat_msghdr+0x514/0x750 [ 1346.034513][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1346.039470][T19573] ___sys_recvmsg+0x19d/0x890 [ 1346.044385][T19573] do_recvmmsg+0x63a/0x10a0 [ 1346.049044][T19573] __sys_recvmmsg+0x113/0x450 [ 1346.054028][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.060435][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.065720][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.070706][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.075461][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.081997][T19573] [ 1346.084525][T19573] Uninit was stored to memory at: [ 1346.089706][T19573] __get_compat_msghdr+0x514/0x750 [ 1346.095083][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1346.100123][T19573] ___sys_recvmsg+0x19d/0x890 [ 1346.105058][T19573] do_recvmmsg+0x63a/0x10a0 [ 1346.109778][T19573] __sys_recvmmsg+0x113/0x450 [ 1346.114703][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.121102][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.126374][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.131361][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.136114][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.142767][T19573] [ 1346.145176][T19573] Uninit was stored to memory at: [ 1346.150353][T19573] __get_compat_msghdr+0x514/0x750 [ 1346.155742][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1346.160802][T19573] ___sys_recvmsg+0x19d/0x890 [ 1346.165784][T19573] do_recvmmsg+0x63a/0x10a0 [ 1346.170417][T19573] __sys_recvmmsg+0x113/0x450 [ 1346.175351][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.181749][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.187039][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.192026][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.196776][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.203427][T19573] [ 1346.205830][T19573] Uninit was stored to memory at: [ 1346.211005][T19573] __get_compat_msghdr+0x514/0x750 [ 1346.216353][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1346.221390][T19573] ___sys_recvmsg+0x19d/0x890 [ 1346.226322][T19573] do_recvmmsg+0x63a/0x10a0 [ 1346.230958][T19573] __sys_recvmmsg+0x113/0x450 [ 1346.235841][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.242241][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.247549][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.252686][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.257328][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.263950][T19573] [ 1346.266353][T19573] Uninit was stored to memory at: [ 1346.271604][T19573] __get_compat_msghdr+0x514/0x750 [ 1346.277021][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1346.282060][T19573] ___sys_recvmsg+0x19d/0x890 [ 1346.286956][T19573] do_recvmmsg+0x63a/0x10a0 [ 1346.291594][T19573] __sys_recvmmsg+0x113/0x450 [ 1346.296521][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.303029][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.308196][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.313292][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.317951][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.324586][T19573] [ 1346.326991][T19573] Uninit was stored to memory at: [ 1346.332173][T19573] __get_compat_msghdr+0x514/0x750 [ 1346.337560][T19573] get_compat_msghdr+0x8c/0x1c0 [ 1346.342700][T19573] ___sys_recvmsg+0x19d/0x890 [ 1346.347523][T19573] do_recvmmsg+0x63a/0x10a0 [ 1346.352104][T19573] __sys_recvmmsg+0x113/0x450 [ 1346.356987][T19573] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1346.363504][T19573] __do_fast_syscall_32+0x87/0xe0 [ 1346.368666][T19573] do_fast_syscall_32+0x33/0x70 [ 1346.373751][T19573] do_SYSENTER_32+0x1b/0x20 [ 1346.378410][T19573] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1346.385116][T19573] [ 1346.387529][T19573] Local variable msg_sys created at: [ 1346.393035][T19573] do_recvmmsg+0x5f/0x10a0 [ 1346.397604][T19573] __sys_recvmmsg+0x113/0x450 05:13:55 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') 05:13:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_getlink={0x58, 0x12, 0x299, 0x0, 0x0, {}, [@IFLA_MAP={0x24}, @IFLA_LINK={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x58}}, 0x0) 05:13:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/4\x00') mq_timedsend(r2, &(0x7f0000000300), 0x0, 0xc7, &(0x7f0000000340)) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x40) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000040)='dvmrp1\x00'}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x421, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 05:13:55 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x1}) 05:13:55 executing program 0: timer_create(0x3, 0x0, &(0x7f0000001140)) 05:13:55 executing program 3: r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d00031d5ab80009050400005539000009050700000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) [ 1346.683617][T19602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1346.693692][T19602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 05:13:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x3, [{}, {}, {}]}}) 05:13:55 executing program 0: mq_open(&(0x7f0000000100)='\xd6\'],$$/@#\x00', 0x0, 0x0, &(0x7f0000000140)) 05:13:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x1c, 0x0}, 0x4014) 05:13:56 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000022c0)) [ 1347.021364][ T3565] usb 4-1: new high-speed USB device number 17 using dummy_hcd 05:13:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x1) [ 1347.262646][ T3565] usb 4-1: Using ep0 maxpacket: 16 [ 1347.403570][ T3565] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1347.412214][ T3565] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1347.420832][ T3565] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1347.435867][ T3565] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1347.445063][ T3565] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1347.454260][ T3565] usb 4-1: config 0 has no interface number 0 [ 1347.460580][ T3565] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1347.471982][ T3565] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1347.482148][ T3565] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 05:13:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1347.492382][ T3565] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1347.505782][ T3565] usb 4-1: config 0 interface 125 has no altsetting 2 05:13:56 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) 05:13:56 executing program 1: r0 = socket(0x1, 0x1, 0x0) connect$x25(r0, 0x0, 0x0) 05:13:56 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 05:13:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x8, &(0x7f00000000c0)={@loopback}, 0x14) [ 1348.236362][ T3565] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1348.251945][ T3565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.260924][ T3565] usb 4-1: Product: syz [ 1348.265380][ T3565] usb 4-1: Manufacturer: syz [ 1348.270201][ T3565] usb 4-1: SerialNumber: syz 05:13:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x3, &(0x7f0000001340)=[{&(0x7f0000000100)="8350", 0x2}], 0x1}, 0x0) [ 1348.519822][ T3565] usb 4-1: config 0 descriptor?? [ 1348.574861][ T3565] usb 4-1: selecting invalid altsetting 2 [ 1349.382489][ C1] usb 4-1: async_complete: urb error -71 [ 1349.389052][ C1] usb 4-1: async_complete: urb error -71 [ 1349.395557][ C1] usb 4-1: async_complete: urb error -71 [ 1349.402487][ T3565] get_1284_register: usb error -71 [ 1349.408106][ T3565] parport1: fix this legacy no-device port driver! [ 1349.423477][ T3565] usb 4-1: USB disconnect, device number 17 05:13:58 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={'hmac(sha256-neon)\x00'}}) 05:13:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c, 0x0}, 0x4000050) 05:13:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000940)={&(0x7f0000000880), 0xff39, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x20}}, 0x0) 05:13:58 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 05:13:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x5}, 0x1c, 0x0}, 0x0) 05:13:59 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x20985638b4b824b2, 0xffffffffffffffff, 0x0) 05:13:59 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "4dd458c1b565fd231aca6d6d030a2b7afb794c71f22d98744d1e4f0415ea4def51b553081d2c341dabd723a3942b516c0a0fc7e8a0852bbdd002863a228dd836"}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000140)='/:*^\x00') 05:13:59 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xc, 0xc}) 05:13:59 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000fc0), &(0x7f0000001000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2f]}}}}]}) 05:13:59 executing program 5: r0 = socket(0x2, 0x3, 0x1) bind$802154_dgram(r0, &(0x7f0000000000), 0x14) 05:13:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) [ 1350.875199][T19643] could not allocate digest TFM handle hmac(sha256-neon) 05:14:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}, 0x20000010) [ 1350.960787][T19659] tmpfs: Bad value for 'mpol' 05:14:00 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 05:14:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}, 0x1c) 05:14:00 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 05:14:00 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000009700), 0x0, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/50, 0x32) 05:14:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x2c}}, 0x0) 05:14:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 05:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 05:14:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 05:14:00 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x6800, 0x0) 05:14:01 executing program 1: mq_open(&(0x7f0000000040)='.log\x00', 0x0, 0x0, 0x0) 05:14:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000200), &(0x7f0000000240)=0x4) 05:14:01 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 05:14:01 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 05:14:01 executing program 2: mq_open(&(0x7f0000000040)=')]^\x00', 0x40, 0x0, 0x0) 05:14:01 executing program 0: add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="1b", 0x1, 0xfffffffffffffffc) 05:14:01 executing program 3: socketpair(0x1e, 0x0, 0x35fb, 0x0) 05:14:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000fc0), &(0x7f0000001000)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000001180)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2f, 0x39, 0x2d]}}}}]}) 05:14:02 executing program 4: syz_mount_image$vxfs(0x0, &(0x7f0000001540)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="02"], 0x24, 0x0) 05:14:02 executing program 5: setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0xb14, 0x3, 0x1, 0x800}, 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000040)=""/30, &(0x7f0000000080)=0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/prev\x00') r2 = socket(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140)=0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r4, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x67}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x0, 0x0, {0x9, 0x3, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x204, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xcb035e67b6903ae2, {0x20d, 0x0, 0x6, 0x2e43}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x44000) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000340)=0x14) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f00000003c0)) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x6f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) socket(0x18, 0x6, 0x5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0xc78c90e015bedc5b) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000680), 0x4) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000006c0)=0x3) 05:14:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000180)) 05:14:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 05:14:02 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') [ 1353.363755][T19700] tmpfs: Bad value for 'mpol' 05:14:02 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 05:14:02 executing program 4: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x101282) 05:14:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 05:14:02 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private}}]}, 0x44}}, 0x0) 05:14:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:14:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="db", 0x1}, {&(0x7f00000000c0)='D', 0x1}, {&(0x7f0000000180)="9a", 0x1}], 0x3, &(0x7f00000003c0)=[{0x28, 0x0, 0x0, "8fc9defb14a969137255ed9fe476a17ed5"}], 0x28}, 0x0) 05:14:03 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0xde7f12e5ce2324e3) 05:14:03 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x0]}}]}) 05:14:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 05:14:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 05:14:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r1, 0x0, 0x3}) 05:14:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x0, @private}}) 05:14:03 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="90", 0x1, 0xffffffffffffffff) 05:14:03 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x467e, "ddc986d5b791c585bb7ae8a184dbc6cb778556959bd3d4d593c10e223057221b"}) 05:14:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000240)={0xfffffff9, 0x0, 0x101, 0x1, '\x00', '\x00', '\x00', 0x3, 0x0, 0x7, 0x7, "feb233f5033a895f25a72c58bcfe8fad"}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='wg2\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x40) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'team0\x00', {0x4}, 0x2b}) 05:14:04 executing program 0: fanotify_mark(0xffffffffffffffff, 0x88, 0x0, 0xffffffffffffffff, 0x0) 05:14:04 executing program 3: r0 = socket(0x2, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000), 0x14) 05:14:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:14:04 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000002ac0)='net/mcfilter\x00') 05:14:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x0, @private=0xa010101}}) 05:14:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) 05:14:05 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/raw6\x00') 05:14:05 executing program 1: accept4(0xffffffffffffffff, 0x0, 0x0, 0x1800) 05:14:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dontfrag={{0x14}}], 0x18}, 0x0) 05:14:05 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x9}, 0x0, 0x0, 0x0, 0x0) 05:14:05 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}) 05:14:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 05:14:05 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x1a78, @private2}, 0x80) 05:14:05 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000), &(0x7f0000000080)=0x4) 05:14:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c, 0x0}, 0x0) 05:14:06 executing program 2: socketpair(0x2c, 0x0, 0x0, 0x0) 05:14:06 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "ddc986d5b791c585bb7ae8a184dbc6cb778556959bd3d4d593c10e223057221b"}) 05:14:06 executing program 3: r0 = socket(0x2, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000), 0x14) 05:14:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@srh, 0x8) 05:14:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0), 0x8) 05:14:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 05:14:06 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') 05:14:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2}}}}) 05:14:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}]}, 0x48}}, 0x0) 05:14:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@empty, 0x0, 0x0, 0x0, 0x9}, &(0x7f00000003c0)=0x20) 05:14:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x21, 0x0, &(0x7f0000000000)) 05:14:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c, 0x0}, 0x810) 05:14:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0xffffffffffffffff) 05:14:07 executing program 2: syz_mount_image$nfs(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000000680)=[{0x0}], 0x0, &(0x7f0000000740)) syz_mount_image$qnx4(&(0x7f0000000d80), 0x0, 0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)) 05:14:07 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:07 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) 05:14:07 executing program 5: syz_mount_image$vxfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000780)) 05:14:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:14:08 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x5f4ab397, 0x0) 05:14:08 executing program 3: syz_mount_image$nfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)) 05:14:08 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8936, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "a4c477932dc26f47ae6ac315c4b0be35bd63ee30c3761b009a3015a49e44d33a", "8f7782bb61af48bc353ba85ccf315a59c258e9af7d5d18ad0912c285154d3d45", "7dbe3b10562e5e3f44bc8533794622ab23ba351196d05307788e7b55c4ceec10", "cf72d9a3eb5695df8282e1bf446f7f9a2d53455a401cd31e5cbf9d331afd07a3", "befc4bff3f1f525585042a9f588bd441c4da2ed3ba06ca394104df5352696131", "c8bb46e33e551c0659853147"}}) 05:14:08 executing program 4: syz_mount_image$qnx4(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)) [ 1359.206124][T19805] vxfs: WRONG superblock magic 00000000 at 1 [ 1359.250262][T19805] vxfs: WRONG superblock magic 00000000 at 8 [ 1359.257088][T19805] vxfs: can't find superblock. 05:14:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 05:14:08 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000006080), &(0x7f00000060c0)='./file0\x00', &(0x7f0000006100), 0x0, 0x0) 05:14:08 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8200) 05:14:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:14:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, r2}) 05:14:09 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001880)=[{&(0x7f0000000380)="1a", 0x1}, {&(0x7f00000003c0)="95", 0x1, 0xfffffffffffffffd}], 0x0, 0x0) 05:14:09 executing program 2: socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000280), &(0x7f00000005c0)={0x9}, 0x0, 0x0, 0x0) 05:14:09 executing program 4: getresuid(&(0x7f0000008340), 0x0, 0x0) 05:14:09 executing program 5: syz_mount_image$nfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000060c0)='./file0\x00', &(0x7f0000006100), 0x0, 0x0) 05:14:09 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) 05:14:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 05:14:09 executing program 1: syz_mount_image$nfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x7, &(0x7f0000001880)=[{&(0x7f0000000380), 0x0, 0xffffffff}, {&(0x7f00000003c0)="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", 0xbc7, 0xfffffffffffffffd}, {&(0x7f00000013c0), 0x0, 0x2a}, {0x0, 0x0, 0x8000000000000}, {0x0, 0x0, 0x9}, {&(0x7f0000001640)="b9b133151639397f5a8901b6733c385371e5bfd959d3590148ecacd812d94aaa63c8ae565bd8b4d1d7153cf9b29d24cfc9e59a4186d747383730f7a2753ef99667504f1ccd9308d3de87c410729749a315ff11dd03c9e5ae353eac03a153536e4af6c0da88985473a3b807d9d2ed7945bd73366dfc1ee6c5e62b40730d66f19fd25c94e34e42bdf47bae4ffcd20e0cf2bff2101fd0b8250c10", 0x99}, {&(0x7f0000001800), 0x0, 0xbc70000000000000}], 0x20c8484, &(0x7f0000001940)={[{'/dev/fuse\x00'}, {',+'}, {'/dev/fuse\x00'}], [{@appraise}, {@subj_type={'subj_type', 0x3d, '*'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000003b00)) mount$fuseblk(&(0x7f0000006080), &(0x7f00000060c0)='./file0\x00', &(0x7f0000006100), 0x0, &(0x7f0000008180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9a5}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffffffff}}], [{@appraise_type}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}}) 05:14:09 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{0x0}, {&(0x7f0000000800)=""/240, 0xf0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001d00)=""/133, 0x85}, 0x0) 05:14:09 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001dc0)={&(0x7f0000000740)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001c40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) 05:14:10 executing program 5: syz_mount_image$udf(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)) 05:14:10 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) 05:14:10 executing program 3: mount$fuseblk(&(0x7f0000006080), &(0x7f00000060c0)='./file0\x00', &(0x7f0000006100), 0x0, 0x0) 05:14:10 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, 0x0) 05:14:10 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "a4c477932dc26f47ae6ac315c4b0be35bd63ee30c3761b009a3015a49e44d33a", "8f7782bb61af48bc353ba85ccf315a59c258e9af7d5d18ad0912c285154d3d45", "7dbe3b10562e5e3f44bc8533794622ab23ba351196d05307788e7b55c4ceec10", "cf72d9a3eb5695df8282e1bf446f7f9a2d53455a401cd31e5cbf9d331afd07a3", "befc4bff3f1f525585042a9f588bd441c4da2ed3ba06ca394104df5352696131", "c8bb46e33e551c0659853147"}}) 05:14:10 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@empty, @private0, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2240014, r2}) 05:14:10 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) 05:14:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x3}]}}, &(0x7f0000000040)=""/135, 0x26, 0x87, 0x1}, 0x20) 05:14:11 executing program 2: syz_mount_image$nfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:14:11 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x401) 05:14:11 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89a0, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 05:14:11 executing program 0: r0 = socket(0x2b, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x20000000) 05:14:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 05:14:11 executing program 2: syz_mount_image$qnx4(&(0x7f0000000d80), 0x0, 0x0, 0x0, 0x0, 0xfffffffd, &(0x7f0000000f00)) 05:14:11 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 05:14:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 05:14:12 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000040), 0x4) 05:14:12 executing program 0: getresuid(&(0x7f0000000540), 0x0, 0x0) 05:14:12 executing program 1: write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) 05:14:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2}}) 05:14:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) 05:14:12 executing program 3: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) 05:14:12 executing program 5: syz_mount_image$nfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)) syz_mount_image$qnx4(&(0x7f0000000d80), 0x0, 0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)) 05:14:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2}}) 05:14:13 executing program 0: r0 = socket(0x23, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) 05:14:13 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm', 0x2, 0x0) 05:14:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000004780)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x20, 0x3fa, 0x100}, 0x20}}, 0x80) 05:14:13 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000004780)={&(0x7f00000046c0), 0xc, &(0x7f0000004740)={0x0}}, 0x0) 05:14:13 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 05:14:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7880}}) 05:14:13 executing program 2: syz_mount_image$nfs(&(0x7f0000000300), 0x0, 0x0, 0x4, &(0x7f0000001880)=[{&(0x7f0000000380)="1a795e59f831456f7f1df57351c98efa24e012e99e24", 0x16, 0xffffffff}, {&(0x7f00000003c0), 0x0, 0xfffffffffffffffd}, {0x0}, {0x0}], 0x20c8484, &(0x7f0000001940)={[{'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@subj_type={'subj_type', 0x3d, '*'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) 05:14:13 executing program 0: r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 05:14:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x837ff) 05:14:13 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)="0c1a4e721685c4769e4c8b8832", 0xd}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 05:14:14 executing program 1: r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 05:14:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 1365.298231][T19917] loop2: detected capacity change from 0 to 264192 05:14:14 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8042, 0x0) 05:14:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x2c, 0x19, 0x21, 0x0, 0x0, {}, [@RTA_MARK={0x8}, @RTA_UID={0x8, 0x19, 0xee01}]}, 0x2c}}, 0x0) 05:14:14 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4) 05:14:14 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 05:14:15 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@private0, @dev, @rand_addr=' \x01\x00', 0x0, 0x6, 0x3, 0x0, 0x0, 0x420000, r3}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@private0, @dev, @private0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={@private0, @dev, @private0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, r7}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x70c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0fec}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ce}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x85b}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r3}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x3, 0x3, 0x7}, {0x3, 0x20, 0x0, 0x18}, {0x3, 0x15, 0x1, 0x6}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x200, 0x9, 0x1}, {0x0, 0x40, 0x20, 0x8}, {0x5, 0x0, 0x8, 0x401}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x70c}, 0x1, 0x0, 0x0, 0x800}, 0x40884) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x113104, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@empty, @mcast1, @mcast1, 0x0, 0x5aaf, 0x0, 0x500, 0x0, 0x2240014, r3}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000040)={@private0, @dev, @private0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, r11}) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x9, 0x29, 0x4, 0x100, 0x8, 0x0, r11}) 05:14:15 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0x7d7, 0x4) 05:14:15 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x541b, 0x0) 05:14:15 executing program 4: socket(0x3, 0x0, 0xfab2) 05:14:15 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x12b443, 0x0) 05:14:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r1, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:15 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) 05:14:15 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xc, &(0x7f0000000040), 0x4) 05:14:15 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29, &(0x7f0000000040), 0x4) 05:14:15 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) 05:14:15 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b"], 0x6c}}, 0x0) 05:14:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x114, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57"]}]}, 0x114}], 0x1}, 0x0) epoll_create1(0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xae359000) 05:14:16 executing program 0: r0 = socket(0x11, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10042) 05:14:16 executing program 5: syz_mount_image$nfs(&(0x7f0000000300), 0x0, 0x0, 0x1, &(0x7f0000001880)=[{0x0}], 0x0, &(0x7f0000001940)={[{'/dev/fuse\x00'}], [{@subj_type={'subj_type', 0x3d, '*'}}]}) 05:14:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x0, 0x708}}) 05:14:16 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 05:14:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000100)) [ 1367.650133][T19958] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1367.659273][T19958] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:16 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3c, &(0x7f0000000040), 0x4) 05:14:17 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x5, &(0x7f0000000040), 0x4) 05:14:17 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 05:14:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000040)=""/135, 0x28, 0x87, 0x1}, 0x20) 05:14:17 executing program 4: symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00') 05:14:17 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a"], 0x6c}}, 0x0) 05:14:17 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x240408d4) 05:14:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x30) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x8440, 0x0) recvmsg$can_raw(r2, &(0x7f0000000480)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/65, 0x41}], 0x3, &(0x7f00000003c0)=""/129, 0x81}, 0x41) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2, 0x0, 0x0, 0x0, 0x1}}) 05:14:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7880}}) 05:14:17 executing program 4: pselect6(0x40, &(0x7f00000019c0), &(0x7f0000001a00)={0xfff}, &(0x7f0000001a40), &(0x7f0000001ac0), &(0x7f0000001b40)={&(0x7f0000001b00)={[0x9]}, 0x8}) 05:14:17 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="11", 0x1}], 0x1, &(0x7f0000000380)=ANY=[], 0x1a8}, 0x0) [ 1368.836732][T19980] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. 05:14:18 executing program 1: socket(0x25, 0x1, 0x2) 05:14:18 executing program 2: syz_mount_image$nfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[], [{@appraise}]}) 05:14:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5411, 0x0) 05:14:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8844ef6c78d9369f14c39f80bc48489c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a32f28355d07ce4fce98fd6c18083c4fe39760c3d032d587adc202901ad92f2d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d9cd795ce1a89151"}]}]}, 0x64}}, 0x0) 05:14:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="73797a746e6c3300000000000000000007f3a2630b1543d2ba8fc77e0361975d5005efaa8df904827043"]}) [ 1369.614266][T19996] nfs: Unknown parameter 'appraise' 05:14:18 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)=[{0x0}], 0x0, &(0x7f0000001940)={[{'/dev/fuse\x00'}], [{@subj_type={'subj_type', 0x3d, '*'}}]}) 05:14:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$ax25(r0, &(0x7f0000000200)={{}, [@default, @bcast, @netrom, @bcast, @rose, @rose, @default, @bcast]}, &(0x7f00000000c0)=0xffffffea) 05:14:19 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='cgroup\x00', 0x0, &(0x7f0000000380)='cpuset\x00') mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800420, 0x0) 05:14:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x29, 0x4, 0x100, 0x8, 0x700, r2}) 05:14:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000540), 0x7d38, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000200)={'tunl0\x00', 0x0}) 05:14:19 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0xf}}) 05:14:19 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) 05:14:19 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) 05:14:19 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000f00)={&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) 05:14:19 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000004780)={0x0, 0x0, 0x0}, 0x0) 05:14:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2240002}) 05:14:20 executing program 2: syz_mount_image$nfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$qnx4(0x0, &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000ec0)=[{&(0x7f0000000e00), 0x98fd0100}, {0x0}], 0x0, 0x0) 05:14:20 executing program 1: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001880)=[{0x0, 0x0, 0xfffffffffffffffd}, {0x0}], 0x20c8484, &(0x7f0000001940)={[{'/dev/fuse\x00'}, {',+'}], [{@appraise}, {@subj_type={'subj_type', 0x3d, '*'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) 05:14:20 executing program 5: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)=[{&(0x7f00000003c0)="95", 0x1}], 0x0, 0x0) 05:14:20 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xf, &(0x7f0000000040), 0x4) 05:14:20 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) 05:14:20 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 05:14:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 05:14:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 05:14:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x541b, 0x0) 05:14:21 executing program 3: socket(0x11, 0x3, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f0000000040)) 05:14:21 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'rose0\x00', {0x2, 0x0, @private=0xa010102}}) 05:14:21 executing program 1: syz_mount_image$vxfs(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x402000, &(0x7f0000000780)) 05:14:22 executing program 2: r0 = socket(0x18, 0x0, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000000c0)) 05:14:22 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 05:14:22 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x28}}, 0x0) 05:14:22 executing program 0: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 05:14:22 executing program 3: write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0xa0) getresuid(&(0x7f0000008340), &(0x7f0000008380), &(0x7f00000083c0)) 05:14:22 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2}}) 05:14:22 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) 05:14:22 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 05:14:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89b1, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 05:14:22 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)=[{&(0x7f00000003c0)="95ec9e5dfb2d4f5ae60aa9124a0655f1a8bde69c43e85995713ca6eb095a40b7c64e4ada1a555481a4d38783dbb02f0bbebcefadc7066998aaef0ffa87578788e9dcc52e8fd4f6bbeb3801244a8ffff5df8c33b7ce6f21c889ab61a6d8bf8be46089c9229b639174766c0eb9e7126121b4e1c16a4a7bb5ef04e0736237737274ffe999eaccdfc26fd0002592312881c885161c2d34306145cb2708308642407225932716a95bc71bf8f7e40ef11c2f4accc3d3ed5ddf41363e5c6b3fc0dd30ae93f71c55ca97a32ec5cb049b171d41172f57876286b50e53f69c687e0ae91c55baf857d332da264765aa3ad85b2c2f59fe7ee052550cb7b825622822ab7cc9703eb89969491a28e044129bbd4154cb21dc22127ab6ce9f93dd05873c951579c535ace14357ff08f207bfac80c4d7f6e0f9e40b32d418118f4c9e03c223c659384a3d562bd2b12d1c832bacd70c2c5601370530857c9d3fb05b8d0ecb21b71e43771414bdf7124a9e4910ff6fa130eb407d0be734d6f03b972d0e7b77f93a000055a388adf591696d17466fa22bdce23394fb764d5dfe82a6b1073734e1bbed712013659063b7aeebd089c3446ae4da880811ed7c734bccedf4ecfa3346c13e50b452b1d8ec4686a4a5fd0ec83161bf345b54aa89be9cc7d164bd4a7994469a7039ae349f07b6ea2a5b32a3a1aa482efa2fe2d9487efdae4cf31c57dd1e576ad51ec267c6ad714249008555f7afb15d642ad5eda0f6372eaced6be9f9d07966a57d2211ef2a3198d0290c6b54c06bfd5b08cb48f4f8ed83470c25da26de1ed02726696328274769da1e47c2e3d50d657ef9b48bb0123f910039f373c75efb40eceed6622bb2ccf726ba05a058d277a8c6015eb058a550a8bcdaeffb09cae1e8b28fc8e6018a2b71e06bb49156272946bebc45514fb45f2a135c2640f6f9b264cc0f592a062153ba6edeb22c82c3e0b1cdfe54ca34ff847f379732309c04f6c83a12d13489e005bf435a02a5e245a8e3f23176bdfc54a1358a84185f453ba4d6be1df53e7768810c97d28a507ba1150f1f8756db69d069fcb55163632ae3eaba538e56f882a44519a744d82a48f94ea23798f1afc5a6efa880a56cc416d4e05ff15b462ab7379a65f477f2060017129096fc048498a538848e6c918a753edcc1b754609f7ace1f35e9f246fd35520e77cea606bbb834df008f3d46696e609e7ea436931dd4cb3b1fd512d4b0b51c291c1d0f015018f9525fd42c4141356d4b3dde72e2a20757ae43af7b8770c0e1c0c2e2969afbba1a9bbbbe7e6e77b51d816290fc13702300e27bad3e08fe4c2350b49cd140dfa6a3610315fcec7e4e39e12429e11311c2474a22c94796a1d1cdf0374646f9060a791c9ced51d57a9f1d45a93896b924b38dbd0f4dd0f4ba8b221ed76ab994429c76eb27bd9f09bf31368f872f33ede63e207e54cc3f15a8cd0ebe73c3657cd36cce70330d933e0b710a379e568a4aca9b0b2c934d7eb435f6789414bb4506d0e853fe6ccab2c26b9b47b183ca4431a48c4f8f62dfc1103234be6cd6f0992da91d787c6b28054a231c8dbde495900dcd682a77290114923e191fbe03a8792333130bfae80d40fbce812e83cf9a4020f17b4a912288e0979601a16aa745aabbd69af4daf64fd455ad4fdeb1e8e84bf9c323028376d90541524cc282005b4487c3836292e2b5a1b2d05c47643da372336b92729a87be1a9c4550c6e2a72587916bb712ef06fcb942a06cb3b6a2c60f2cfb9036ebfc07a1e22ca2c96304657ee709d813b7d16b7411ebb43d86eae7c4e49b63ef30590570cb8c8212e85c8684fe22e6c2a0b6ebff6fb2acc4d7f985949905b4718eb38d1039215019ed2ad0cd47461f3d41b71865defa719a4e5232b0847d386a60963e55023e0db156d10b21209a75f54b45b443243b161f78c0654792b04d639123af0030931d6b2ff47d8740d27457d2f8ce6ed9a913f97faf5eefa3db6bad71ee60ff47fce594bf1acb9fc5b996b3ce208f1a6b0cd5dd6222fba64935a4b92ac4e995d28b005d557f8eef06b2f8020313b3206fafb2eb402637ee625c8ebe8267f5895167ed8664814ca4c34c65e4d16fb3ff5cd1b39b03c01a072a99c365569f82832902812d759838610be7152bf1a97a76189849242bf40079ee0b0abb8e651074725e0f05f222bc27a38a3ec5f34555f2ee19c56436113e9995c06a30e569fd82a041809cfb1e3f7e9aa47fd00d7b04638ad93e96c226c18af1fbd4dc4d8e880d20691c8f71b80cc7f220f324911d35471434749d388604f9085ebbf44a1885caebf249d4923b26e11bff7fbe969fb6ee0ba19d550a857ec751dcdea1eb1f7682a3cf21a70e3af564bf8c2e6a193ca1226be3449617895efd4351082616aee1a04ca0cb41b453bb295067ad212552c933b9ee18bd42eb109bbd6edd6f2c0528455f88cf70eee99f5b22756788a790a8f057d3967156fec16c953e97f70759504b965d731d43496ad5dec48e9e5ca573d83178e132155ee332252ee999a1cbafbbc8645acc248739873c716e9c9d4406c245cfa673429595f09336fdd94cb260f1373fe0a70c5b99cf054dd35a37e12340220df4363fc22e6c7a2bdb6acc151ce7902da2a29a28a4a893ca0e8baeb8029af8d5a7a27a587df0625610247d978d01d397475cfabf0a031bee215cab3517f47c97b621cd18d0bfe7cf700d7224aff00f5cbb8b80da53c60d701a1f590485557c146970f940ea79e2f8f68e005891a36079949b6822ab7e98b947546bcbf105db63c04302199a4eda9eca3f44d452f9c7d75a48b2bf73516e31c6b067fa7301ef72824e204cd843368e23d977078ff0ed3d67558b219d86262cf166179673bb586b3bd5403ff0b40b837eb862453b456431d637b2a44deae51d30edad54ec1e6b7b4f9bf25c759be4cb30f10493cd582a32560bf48e3a583df81ace4800b2bcc3eadbe3682663c368c8b229f9ba654c43a43a6ace782339539056cc14478c3580da51ce969ba192b49e859df1be2d75f807db9ac53780207ba11b046ad3897c1a99fb7d6e3859a0c3861f06c6a8b8b836fc34b13f0d976b64669f7e8877873ac94ef27eb1416444c1e14d67aee111a6be99a4db290608dd9ad61c88ac369fa6d8d516cd216d1bb3dd53ae916cf195ddf72437537f28fab54d595c61defbc35e9b642c64ce3086c42d4dd3b2cfde7d17d01019908916b197d064f83d151829fbd331d47fdfea1fe1d82e520814f936c05c23adef28fc68401bb9a4a30a2c79f4347dee1823c3400b58c28c5df2d59a4ba63bec3e8492b798114c53d781ac83252cc0a4ac0ab6fbd096d4ef2228984b481a36081e2cd2fc4288f6670fce6d9296c524d750c8b2aa48673d29f798c403559adba67655cf22de04233b23e1f88172459e7a1d305a271356787a68b6cac5c1bbfb4007d907075eed96e056e8e9e9dac52b3273736e7911963fd16b94a55f17686cf08da755e9f80ecf6dfc20b07b0a7b663b1e34a6f76a33aafa991f3a37733d1f32108c2c7037a1ffaf59c683e61274ae45056b50e8e185be66ce858eecd3ba57f0ac3e21f79435486c2cb65533fa2b3a8113d1738f948fc6f3f995a7bc8a7468cc3ca28a69b79b1f83bed306ff11241c67af08c34a43dee6f8e9785c2640cc8ec5a0d79614af3d1f72f45765d689be298a0d8a5dd5ed263525cbdf119d716294162fcea83c22fc883a07b89c54a3b4550c485d1c8707c506afc9550ab2f6c89c5c89f4169c9066982ad64c84e26ed0ea7699d2cb6b07a935143fb6af51aba59baa6fac6ab2650b7147c369688789ac96dea92e3dca7027a0c0d9104e352c7f009501eb97a7cda1ed0ce5b320dadff2b93a872848e89e96946c5fba4d26741256000155b4c6720c4faf646da8b6520d399da048e5cc34bdc10576027e3c1c0fa960851202bc4d47243cee460cc9b521acd5a2eda365b87683af1b0dc8fbf193d016aa1ad9512a6aac4ea02f354d945f8a35eea9bd3e460b49b0efaf68e3f6365c70e6d80378989c3b47d7e43bbac2a5f9f393d15e5a42fc10d142d2d57da79ad8b913233cf4a5521e733be4080c71a33713f619ee8a15514e904f01ef5db1c761443444c65ca2c069a9b9f6ceffe773b7b57f4c3421f553f3f51dace6d089a9bc28fb2b89637c53fd0d95ec3ad47e6b4a48b425a83a4939fb93705cb5b1a1bfb4b40b7c2a7f52678eaf8f46a3e4fb5156515db396e00e0acbe5a4a9b67574ba982f8f574b27edc1d1b74d583bc06b138d74305b7dc71deb87b8652f3269714d4e4177a85044bacb9e17ee5feb590247421dd3f38c14538c1990d194a524312212397cf8d79c7488e47fcfcc89d37758cfee4a50114485d565466dda67a98bb4929bc21a1af5df46bba37773957b58a57c61db37c0e4fe56030acc65d00e751995a532b5c9f3908a693c889806d0a8e21beb8a87b3d0846c461808e2a09380d96f73b58183a52534d40c6356000082cd2e114cf88f093b88b95221161c0fcb7639588d1560e35e14c6e74d83836f8eb233c9b359017689b279c9eca689ab37128279165c62ca36d173034c0db15965f7ccfd12270332445916580499f99aad97aedf46744f2746a735a231298c24465f3131025ac252d022d5116efca9e66607bdfc219b0ee2d38e324a21ceb7bb16082cf770b472c16c5a8b77283c9518d902dd43096b9a59b54098fe43f26e8417eb5c9961c5e0763208f544391df2fee5ce58d044ff178350d484cab31690b9b6c55133e4a8e74eb2a04b31a5f6afb18a02050174ddf30d2c2293f250d92f863021ee3893d51a8269133984495194f86378f8c50664d8dd3a30bbe6473e3035f20b0f5e1d73bfcab16fe5c3bccc3af737de3d15e9507128a576cf90375dd1deb4c469cd2aeb70a3e06ee609ba22002b09666c47ecef4ea7c9a825b4adf5b3fa4e6e25789304e6771b8562c3043b6b6220c73b0142d884a6f3ae02d04ed398e10e644c2d2c7a95447b399c534e17f915ce02872d5d8bbe3ea5ce306bfda8d12752b04f7121c9d5581bcf22a3a7d67f587bcabc37739b34c528fb091abecc21906a2f543bf79f4ba96480253da8f967e33eaf1aecf0acecce3704c0429c75de5e117242892cc1c7346fd88de9f9e68002070407c8db34eca11950b83a909150b2f9cd1fd9f501f1479a45b36586f5fe60a8435b6b306b718f0a4e920950d3240b503367431517a85db2a07629c1aee8bce985a7d17838689f106d125c375147929cb340194caa346f7fa8809cf6086c46f74a6a9b82f3df002d49aa6ea1c0f2a90d2452f6ce9fc0d3130fc02e974d8834d4bee2dbfa16aa0babef91c619043ced304ed888f9d2e2bf2eac0124e66ae2635847bcd9428d5ef4594121ead6d18788c802cc3b865e0247f11e971c128754093ad52a66ce84940c2a8fd36eb0582fe54f47c8cf5e76cd791e3f530eb4b866ce28180f9aaf46c7925199235766351eae436fe11c47b3febdf10d152e3f465c4565cf6e64243aa49ac3a122aeb8b0a1960a33fc777d4df658fba5c8e17626aa29b4d7102844905aa7873344f657f479154b05ddbd3010e1a497ff92cc2743d109d9a803ac422d9bf932366a2a3f51689f823bb88b7a60861b405b9fb852e703d295a1b5b4f740b86191139bd075258f9c68e682fe719d75481467cdf4c036b8562206ea595ba67dfb03cff5086cc8837b3fe31d004eb9e15c7b90b34d9253fc73cb6d63c2d86afa8736fe3c3982b8499728c115e7c5b3303e", 0x1000}], 0x0, 0x0) 05:14:22 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x3, 0x0, 0x0, "e2e97ccc5117900235003a0d9fc6e2c3de25246d7fa2da17660959dbb4ba49b8c16f5ac28a78974a641ee23691b9b019b0f1cca38bf5026e7d6a0f545e5dd0"}, 0x60) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 05:14:23 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0), 0x0) [ 1373.941724][T20071] loop3: detected capacity change from 0 to 8 05:14:23 executing program 4: r0 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 05:14:23 executing program 3: syz_mount_image$nfs(&(0x7f0000000300), 0x0, 0x0, 0x3, &(0x7f0000001880)=[{&(0x7f0000000380), 0x0, 0xffffffff}, {&(0x7f00000003c0)="95", 0x1, 0xfffffffffffffffd}, {&(0x7f0000001640)="b9", 0x1}], 0x20c8484, &(0x7f0000001940)={[{'/dev/fuse\x00'}, {',+'}], [{@appraise}, {@subj_type={'subj_type', 0x3d, '*'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) 05:14:23 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x0, 0x0, "e2e97ccc5117900235003a0d9fc6e2c3de25246d7fa2da17660959dbb4ba49b8c16f5ac28a78974a641ee23691b9b019b0f1cca38bf5026e7d6a0f545e5dd0"}, 0x60) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10cc73f7cb9ee6f1"}]}]}, 0x2c}}, 0x0) [ 1374.256612][ T3515] Dev loop3: unable to read RDB block 8 [ 1374.262652][ T3515] loop3: unable to read partition table [ 1374.294089][ T3515] loop3: partition table beyond EOD, truncated 05:14:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 05:14:23 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x890c, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:23 executing program 4: syz_mount_image$qnx4(0x0, &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000ec0)=[{&(0x7f0000000e00), 0x74000000}, {0x0}], 0x0, 0x0) [ 1374.635088][T20085] loop3: detected capacity change from 0 to 264192 05:14:23 executing program 2: r0 = syz_clone(0x80020100, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="14479ca70c32f7dd80baccf83929b48b679494940806d8e2dfa51a93487487c0df1f5de4c9bcb6ef76c180941acbc6bb071854d77667615ef18672e65154f670d240f66e80f2e9befc7380168ec50e52f15928649e608bb57b7c40498d44253c072b41bb5372b341b520e3da8c8e02b84f6e0265400e") sched_rr_get_interval(r0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24000010}, 0x8004040) r1 = syz_clone(0x8000, &(0x7f0000000340), 0x0, &(0x7f0000000400), 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000001480)) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001500), &(0x7f0000001540)=0x4) sched_setaffinity(r0, 0x0, 0x0) 05:14:23 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)) socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) r2 = socket$pptp(0x18, 0x1, 0x2) accept4(r2, 0x0, 0x0, 0x0) 05:14:23 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x6, 0x9, "e2e97ccc5117900235003a0d9fc6e2c3de25246d7fa2da17660959dbb4ba49b8c16f5ac28a78974a641ee23691b9b019b0f1cca38bf5026e7d6a0f545e5dd0", 0x10}, 0x60) ioctl$sock_SIOCETHTOOL(r0, 0x890b, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) 05:14:24 executing program 2: syz_mount_image$nfs(&(0x7f0000000300), 0x0, 0x0, 0x2, &(0x7f0000001880)=[{&(0x7f00000003c0)="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", 0x164, 0xfffffffffffffffd}, {&(0x7f0000001640)="b9", 0x1}], 0x0, &(0x7f0000001940)={[{',+'}, {'/dev/fuse\x00'}]}) [ 1376.135113][T20103] loop2: detected capacity change from 0 to 264192 05:14:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="53b00000000000000000010000000e"], 0x34}}, 0x0) 05:14:25 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) 05:14:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0xf00}}) 05:14:25 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_proto_private(r0, 0x0, 0x0) [ 1376.736672][T20106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 05:14:25 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000500000058000180540001"], 0x6c}}, 0x0) 05:14:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) 05:14:25 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 05:14:26 executing program 4: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3046000, &(0x7f0000000740)) 05:14:26 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) 05:14:26 executing program 5: r0 = socket(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@sco={0x1f, @fixed}, 0x80, 0x0}, 0x0) 05:14:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="9c") sched_rr_get_interval(0x0, &(0x7f0000001480)) 05:14:26 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="14") sched_rr_get_interval(r0, &(0x7f0000000200)) 05:14:26 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000001a40)={&(0x7f0000000000)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000001840)=[@cred, @rights], 0x6c}, 0x0) 05:14:26 executing program 4: syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x4a040) 05:14:27 executing program 1: syz_mount_image$qnx4(&(0x7f0000000d80), 0x0, 0x0, 0x0, 0x0, 0xfcfdffff, &(0x7f0000000f00)) 05:14:27 executing program 5: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) r0 = socket$inet(0x2, 0x800, 0x613) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000c085) r1 = socket(0x5, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc080}, 0x630cca121798c63) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/module/kvm', 0x5a1042, 0x22) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000640)=r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f00000006c0)) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000700)) 05:14:27 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x15, &(0x7f0000000040), 0x4) 05:14:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x3}, 0x10) 05:14:27 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) 05:14:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)="68fe07eaa895d29551e2b4f89f2fa1633a9398eee4e9246299fd29c958512c", 0x1f}, {&(0x7f0000001280)="82b3c794326cf1857ec5609db4e0", 0xe}, {&(0x7f0000002280)="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", 0x4a8}, {&(0x7f00000012c0)="09e082dc677546ba924e3201b6f516366174fb0a1bd58a823de441d60d2c9a79814beefab5b61b9582278e2d4aab5314f19a6ab9be00ec7605cba3294473d2e9aaf8f97e4116c9ff7fa2dcb54988013519cd205e8a8a2f1369e0905808bc412eb577b41f073520785db8834e12fb3e287853cbbc648e5076e393d2f871fa8c2de405d36c48e091fd8beefebf78d2e8e173333427a038f90e3b49edfc4dbbcdcf13844987ea80d8dc7da70f4310bb3abb3a56685d8941bd4a346f73cc1ccd580bbceb8cf8de07467bc00b313237be53748f3fa561b17e76a9", 0xd8}], 0x4}, 0x0) 05:14:27 executing program 1: syz_emit_ethernet(0x4de, &(0x7f0000000bc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6e74794c04a83a00fe80000000000000000000000000002afe80"], 0x0) 05:14:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast1}], 0x1c}, 0x0) 05:14:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="00873a"], 0x9) 05:14:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r4}, 0x10) 05:14:28 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1, &(0x7f00000013c0)=[@init={0x14, 0x84, 0x1, {0x0, 0x5}}], 0x14}, 0x0) 05:14:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)="02", 0x1}], 0x1}, 0x0) 05:14:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1, &(0x7f00000013c0)=[@init={0x14, 0x84, 0x1, {0x6}}], 0x14}, 0x0) 05:14:28 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1, &(0x7f00000013c0)=[@init={0x14}], 0x14}, 0x0) 05:14:28 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000100), 0x8c) 05:14:29 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="03", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='`', 0x1, 0x109, 0x0, 0x0) 05:14:29 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000001700)=0x8) 05:14:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000007c0)={0x0, 0x2}, 0x8) 05:14:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="d1dcd60bda5639ce22167c4a300f", 0xe}, {&(0x7f0000000100)="645618b647acdf60c841885fc46e626f01866b193ff8294206df8676c13feaa4576bbf7185d476a61b721f9f3e11e28585", 0x31}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000140)="0b39aee7999bd296ee027ce00a365d6ca7fd35b2622f2985afed6c8794c8ac82d5644d012d4a3004243d804b3920bd4e3bd2e31381010e456499c1aee40dbef0e3c03bab12a2e63bf38ed9bc6db780dbfdd6", 0x52}, {&(0x7f00000001c0)="97a4520a660ddba2bec5c3225a153a7ac53ec58eeeebbd1ad10a3354c0f0d4b5119d611b0924e204e53b44a362b8167c50125eab0ddee9e942b29653c4e9ab04736f37aa7f95c947df8e0b75d0c44b176fc08e324769bcef1954c4050537071e8970a0b42961a8497587bac99405fb22048e3bc7", 0x74}], 0x5}, 0x0) 05:14:29 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000001440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1, &(0x7f00000013c0)=[@authinfo={0x10}], 0x10}, 0x0) 05:14:29 executing program 5: unlink(&(0x7f00000017c0)='./file0\x00') 05:14:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x8, 0x4, 0x3ff}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)}, 0x10) 05:14:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 05:14:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:30 executing program 4: unshare(0x0) unshare(0x4a000000) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) 05:14:30 executing program 5: shutdown(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:14:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0xb) 05:14:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x21, 0xb}, 0x18}}, 0x0) 05:14:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:31 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:14:31 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8778, 0x3ff}) 05:14:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x8, 0x4, 0x3ff}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 05:14:31 executing program 3: syz_clone(0x9208b400, 0x0, 0x0, 0x0, 0x0, 0x0) 05:14:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0xf4240, &(0x7f0000000080)=@framed={{}, [@kfunc]}, &(0x7f0000002700)='GPL\x00', 0x0, 0xf6, &(0x7f0000002740)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:14:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:32 executing program 2: getpid() getgroups(0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="02925fa0a80000002abd7000fbdbdf2505001a0000000000000000000000fff164010100ac14142c00210004000000000000000000000044d73910bef36e491a1147f32948ca6c9385ddd7731e98930664171984027a3de8f64be3a32fc471142c1f30fc3568430c45c5921cc3438cb9fce0e92005b75519647342cccb1a87946a11f21c45660fcb6c7ec558d58b847b015c4d8deb872b496020bd93b0dd5c368a4ff78bbcd7ee8eb4c7da1af2c1373e61f3e89526889ab40a2a22fa39386a33e576b491753384517a5f18f09e7ddb547a6466e5b099185ae3cb916e8df073fd77f7af03af6b29f11433fe589756ebb016ecd59f591fafeb2a2379660ca5d55f8739ac3927369b1058ce9b13bf67f90ed3d698ab763df55e9c8b444d6c3d1cb56d4d865d3cab005b32d976ac114c62bf02e81c6d90113bc92ba432eb7423f344b26edf17e4"], 0x38}}, 0x40080) r2 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) 05:14:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{}]}) 05:14:32 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 05:14:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000380)="b9800000c03500400000665c8239fbc4237d0923062e35c5e17de74bc402793350f8f800c4635765f766400fc774a666baf80cb8623a8480ef66bafc0cc422a58c010fbcf726660f38807769653626400fc7bb00000000360f7955f49af342d8868680000049b8206bc3c3220d2d4f5d2e66420fc73366bab6203e65650f06", 0x7f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002400)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x8) [ 1384.820390][T20246] ISOFS: Unable to identify CD-ROM format. 05:14:34 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x200) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x4a000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000007b7c0)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 05:14:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1385.392431][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1385.398994][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 05:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="a200600f21b80f01d466b83b8300000f23c00f21f8663503000b000f23f866b9bf0b00000f32baf80c66b85bca2c8366efbafc0cecf40f011c64f0282336f22ecc", 0x41}], 0x1, 0x12, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) r3 = eventfd(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2}) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)={0x5c, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x86}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="072935e62e57a0dd9a876d95ebf5a8a81e96b67c2c09", @generic="734a30c1d9e9c1b5a07c3259354c614919d33822ca94e5f12e244eec", @generic="4915c4f24ed6569017fc52ec3b9c84", @generic]}]}, 0x5c}], 0x1}, 0x0) 05:14:40 executing program 4: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x7000000, &(0x7f00000035c0), 0x0, 0x0) 05:14:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:40 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f0000005d00)) 05:14:40 executing program 3: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000006580), 0x0, 0x0) 05:14:40 executing program 5: syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) 05:14:40 executing program 0: syz_mount_image$squashfs(0x0, &(0x7f0000004640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:14:40 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001d00)={'netpci0\x00'}) 05:14:40 executing program 0: syz_mount_image$squashfs(&(0x7f0000004600), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004e80)) 05:14:40 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x8000, 0x0, &(0x7f0000002e00), 0x0, 0x0) syz_mount_image$squashfs(0x0, 0x0, 0x6, 0x2, &(0x7f00000035c0)=[{0x0}, {0x0}], 0x150464, &(0x7f0000003700)={[{'auto_da_alloc'}, {'uid>'}, {'{]$\',%!'}, {'}{)h,&'}, {'measure'}], [{@euid_lt}]}) 05:14:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:40 executing program 5: socket$unix(0x1, 0x1, 0x0) execveat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', &(0x7f00000012c0)=[&(0x7f0000001100)='\x00'], &(0x7f00000014c0)=[&(0x7f0000001300)='\x00', &(0x7f0000001340)='.!!\'[^$}\x00', 0x0], 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) [ 1392.151321][T20293] loop3: detected capacity change from 0 to 64 05:14:41 executing program 5: ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) pipe2$watch_queue(0x0, 0x80) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000002e00)=[{0x0, 0x0, 0x7ff}], 0x0, 0x0) syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0), 0x0, 0x0) 05:14:41 executing program 4: read$midi(0xffffffffffffffff, 0x0, 0x0) 05:14:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:41 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'batadv_slave_1\x00', {0x2}}) 05:14:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)={0x5c, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="072935e62e57a0dd9a876d95ebf5a8a81e96b67c2c095acb2f22a173785491ae35b1", @generic="734a30c1d9e9c1b5a07c3259354c614919d33822ca94e5f12e244eec", @generic="4915c4"]}]}, 0x5c}], 0x1}, 0x0) 05:14:41 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x80800) [ 1393.101014][T20300] loop5: detected capacity change from 0 to 7 [ 1393.169182][T20304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1393.179985][T20304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.190298][T20304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1393.204738][T20300] Dev loop5: unable to read RDB block 7 [ 1393.204898][T20300] loop5: unable to read partition table [ 1393.206109][T20300] loop5: partition table beyond EOD, truncated [ 1393.233628][T20304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.243801][T20304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1393.254536][T20304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.264694][T20304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1393.275418][T20304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.285585][T20304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1393.296311][T20304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.306400][T20304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1393.317118][T20304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:14:42 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'batadv_slave_1\x00'}) 05:14:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) capset(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r3) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), &(0x7f0000000480)="9b8d54315a89d2f5") recvmmsg(r1, &(0x7f0000000000), 0x0, 0x2001, 0x0) sync() 05:14:42 executing program 3: syz_mount_image$squashfs(0x0, &(0x7f0000004640)='./file0\x00', 0x0, 0x2, &(0x7f0000004d80)=[{0x0, 0x0, 0xffffffff}, {0x0}], 0x100000, 0x0) 05:14:42 executing program 2: syz_mount_image$squashfs(0x0, &(0x7f0000004640)='./file0\x00', 0x0, 0x5, &(0x7f0000004d80)=[{&(0x7f0000004680)='H', 0x1, 0x3}, {&(0x7f0000004780)='O', 0x1, 0x8}, {&(0x7f0000004800)="61037752a11396a915b8c5c679b688515e2ca892cfaf53a59fe6d999dd2ca67bb8c5b8d95afa62ba6d56f1", 0x2b}, {&(0x7f0000004980)="0e13", 0x2, 0xffffffff}, {0x0}], 0x0, &(0x7f0000004e80)={[{'/dev/dlm-monitor\x00'}, {'&!'}, {'batadv0\x00'}, {'batadv0\x00'}], [{@subj_user={'subj_user', 0x3d, 'syzkaller1\x00'}}, {@obj_type={'obj_type', 0x3d, 'batadv_slave_1\x00'}}]}) 05:14:43 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) [ 1394.034598][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1394.045427][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.055680][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1394.066592][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.076823][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1394.087606][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.098318][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1394.107385][T20314] loop3: detected capacity change from 0 to 264192 [ 1394.108998][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.128114][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1394.138874][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.148992][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1394.159818][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 05:14:43 executing program 3: listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="c325396ee05fc27396d57c45371c76bb3ce5f18d5b5ed547c840ef3d0fa7c47c6ce9d6ff550c19ef16ac14da3447a4e9ec87167417f6a7a8691bd29a70f731db604a2250999b4a0da44a26dda85039f2d54e1b51c1e1b5f883edb3251ddcb1", 0x5f}, {&(0x7f0000000300)="12913ca298de8c14977177cb7e106f825156a28d4997412c0d375c39cdc3c211516e1d9dcbb82776345da8960b0c8a26eb39b3e57b9fd6e0481d9bcad2c5921c791719364aa89e8b357553c4c6e6918a50a0d448e8151f1ec988e89af62eac188c967b5402db90dad7bb0d4aa1a1d0cc73f52b5ffac2a0cd1a8235a50376da56bc6c0d", 0x83}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="ec9e5f6aaa492052a81b9fca89b10141ff0afc7696b4d0ed9fb53967e2e4c20aee9bb74f4cc84876e1f62778955d33aab724010e0389c52602f04a9ce3e6831f93a8225bcdc4cae3d3ed6179506649d96d8995342e", 0x55}, {&(0x7f00000005c0)}, {&(0x7f0000000680)}], 0x6, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3f29}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x0, 0x2}, @end, @generic={0x0, 0x2}, @rr={0x7, 0xb, 0x45, [@remote, @loopback]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb2, [@dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x68}, @generic={0x0, 0xd, "1b92d3fe0819457a9e2507"}, @timestamp={0x44, 0x4, 0x0, 0x0, 0xe}]}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_tos_int={{0x14}}], 0xa8}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000011c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000001300)="32aec5ca84621f1d9c", 0x9}, {&(0x7f0000001380)="04f6e0a4278a7959dd85282c33b2d0a1825e4fa5628c4e5d2b13e501cf8fcb29ea82e8fe6fec10b29df6ef4d11d95e8208a959a5e8ab7ebb09447c8bf22adfb14949a8ea624bc8e9b8711d75758ce9aa73c64ae2346b8e275a530552e93b230945b95b79b1b514342447d40eadd8f8ed197c2740cf64c634d8ba1d22af110df8b1ba4780a262efc6412f3f8e3081504416d534fc1a3987d967c1de8ec771f05782a05be91c984e38bca2aad3e3c6a4d742c77495bd46a1ae6eb22c70bcbddbf017bad036b2df0d5752aa945f049df1a02b19c6ca2008d940d77d6822931141e0433a0fe9e4da191bd98cb007a64e3059db0d054ed937b51924b8334945fa2b446136dd4fad80a7943e0806bb4e7ebc88149cff507d2cd4f5870e4ff459174aca89370c4f101ecbee141b2cc7f229ca05d8d805f9ecbb59b138a53f5909f50c7cf1ea86dfa3baa08f0a7b71ab63fb821809c2d9bc153f69fc981c71feda1fa4ffbf52d2f1f16165e0f77bf02db3d429c8df8abf8294bb365deb0da79cd1f76265161087145b949d1430f7d527d0a810c89608f3c60436062ba684b7d2ada80623e89da508a205e03ef7effb3e83fb8c872927cb442f3a670cdec46d3fcda7b3a4944df84e3e08384caa72315bd1651883286c37bc8784ffbcb6fe3919d7b3c20e3f665b687f746236fd8254149f9ba8f9a3172b25b8c26e43be23b999a2731f643a55dceb39102e41ad09eb25fcd9b577760ffca8d30fa0c5308ff9575f4af900d0790534e3e4b4f062586c6e60631f3cccac18f67e0a79e0643c8f5a4df27cc7068b4acf982cb1386831de4883535ba4f401cf7d515a7ca1af695683ccea09860fe96600478e984682c148a5b0abc1275e0ff7347d40be90f4dd7dbfbd7ffe144bc8882e6ea46ed453db5ab9752f7a6b0f6fb66fbfda4fa758ac83c852b05959123ff35611cd20bf9cc4f92c5e975379e9337fd973302d3b91fd42e579a704d24084a07cfa436f8b53b2d21a17c695cd21bc8dc8b3053d1106c794e06cdf5dca3d6fecda1f764a40ecf68c6a9b28f8d8e3736276a2074ec9f8dc101b8590f32a9afe0048bd06fb2be568f69c5f464b612cafeb9931dabe9df4d979a7e2d7c9cd324746ae87e067f370c5eefdf551eb241a9743263cbd248c6dcb7aff7fa2446376db95fcd09826526d154436a97d4c57d40bd923074e45d6f09c7b2443ae97bcdbd2517cfdf8eebaa9b624a40288731d230f39e42d1b842055d1b5a2bcfb754a5e6a5f0852492fd3ac21a46fe98784d7ec51c275eac755a67a923563af82ab6c56964f5a2a60695a23ca57e6c3d5c9621bebfb08957ac9b8db0ec2d44c039713cbbb25713bd81125b6812af6b9a36fe45c0007353830a05b98fb4fa3127a2bac", 0x3e0}, {&(0x7f0000002380)="a1da5919f7940a3676adce70f03a6f17a125941d8255fa4b13f3fac1545928912b411e35a9623a3114efc4269e19e4236e792b4e555e77109bb501da27f7d47659e2962a595aa6b80100a1448fb9c812e48bb5b9003bd182fd216c3eec00d8e9422372f0902f6ee323", 0x69}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003640)}, {&(0x7f0000003740)="78339f21cf02253f206487a4ee9e6d686692b56704cb3e2c6b3182e5f311ebc054efee48b2e03dd220b2080f3169693b1e13444ae88c8058304bc30a75e4d2872dc0966b977cc76c12f968a196ff10199e", 0x51}, {&(0x7f00000037c0)}, {&(0x7f0000003800)="8df69c3b05113c32c2b636aeb900797992f20a07a56eb7a88f2c950e60ac0873f4cbec374070452bb38e3b6f8d47a473df48635ac929db584612262ae03ce22142fb2430373a24be28b776e8a6f4d733ec91575d4089c0049c809ee635da240f892e1ff7c008aec12ab3f7849a33f6a5", 0x70}, {&(0x7f0000003880)="af541567ba0012738e00d59f2a01ad9f5f2542ceb0989036c5739337f1772cc51228d6f3f84ef3b48111c68dc6c18c225cdb5dddbe7f831ac9be6c1b5a606e291f17a9e97dd0fcc4dd360b52e09192c3ccdd6426652bcc266ce961f79f8bfc0c53ef9d2a6ee813b6275dd2a54e9b7eeff70a172e5fb14ae5318e5fbcfe74ee7e2c3ea536934a85c69ac24bea2d29ba20da8df918e07f689616b752f5da3a40a9f68b58", 0xa3}], 0x5}}, {{0x0, 0x0, &(0x7f00000042c0)=[{0x0}], 0x1, &(0x7f0000004300)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14}}], 0x40}}], 0x7, 0x40) syz_mount_image$squashfs(&(0x7f0000004600), 0x0, 0x0, 0x5, &(0x7f0000004d80)=[{0x0, 0x0, 0x200}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x4}, {0x0}], 0x100000, &(0x7f0000004e80)={[{'&!'}, {'batadv0\x00'}, {'batadv0\x00'}], [{@subj_user={'subj_user', 0x3d, 'syzkaller1\x00'}}, {@subj_type={'subj_type', 0x3d, '!*-*#\\\'&$(['}}, {@obj_type={'obj_type', 0x3d, '-'}}, {@dont_measure}]}) 05:14:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:43 executing program 5: mount_setattr(0xffffffffffffffff, &(0x7f00000065c0)='./file0\x00', 0x0, &(0x7f0000006600)={0x80, 0x6}, 0x20) [ 1394.592867][T20323] loop2: detected capacity change from 0 to 264192 05:14:43 executing program 0: syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000440)) 05:14:43 executing program 2: pwritev(0xffffffffffffff9c, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) [ 1395.113484][T20329] loop3: detected capacity change from 0 to 2 05:14:44 executing program 3: listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="c325396ee05fc27396d57c45371c76bb3ce5f18d5b5ed547c840ef3d0fa7c47c6ce9d6ff550c19ef16ac14da3447a4e9ec87167417f6a7a8691bd29a70f731db604a2250999b4a0da44a26dda85039f2d54e1b51c1e1b5f883edb3251ddcb1", 0x5f}, {&(0x7f0000000300)="12913ca298de8c14977177cb7e106f825156a28d4997412c0d375c39cdc3c211516e1d9dcbb82776345da8960b0c8a26eb39b3e57b9fd6e0481d9bcad2c5921c791719364aa89e8b357553c4c6e6918a50a0d448e8151f1ec988e89af62eac188c967b5402db90dad7bb0d4aa1a1d0cc73f52b5ffac2a0cd1a8235a50376da56bc6c0d", 0x83}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="ec9e5f6aaa492052a81b9fca89b10141ff0afc7696b4d0ed9fb53967e2e4c20aee9bb74f4cc84876e1f62778955d33aab724010e0389c52602f04a9ce3e6831f93a8225bcdc4cae3d3ed6179506649d96d8995342e", 0x55}, {&(0x7f00000005c0)}, {&(0x7f0000000680)}], 0x6, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3f29}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x0, 0x2}, @end, @generic={0x0, 0x2}, @rr={0x7, 0xb, 0x45, [@remote, @loopback]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xb2, [@dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x68}, @generic={0x0, 0xd, "1b92d3fe0819457a9e2507"}, @timestamp={0x44, 0x4, 0x0, 0x0, 0xe}]}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_tos_int={{0x14}}], 0xa8}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000011c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000001300)="32aec5ca84621f1d9c", 0x9}, {&(0x7f0000001380)="04f6e0a4278a7959dd85282c33b2d0a1825e4fa5628c4e5d2b13e501cf8fcb29ea82e8fe6fec10b29df6ef4d11d95e8208a959a5e8ab7ebb09447c8bf22adfb14949a8ea624bc8e9b8711d75758ce9aa73c64ae2346b8e275a530552e93b230945b95b79b1b514342447d40eadd8f8ed197c2740cf64c634d8ba1d22af110df8b1ba4780a262efc6412f3f8e3081504416d534fc1a3987d967c1de8ec771f05782a05be91c984e38bca2aad3e3c6a4d742c77495bd46a1ae6eb22c70bcbddbf017bad036b2df0d5752aa945f049df1a02b19c6ca2008d940d77d6822931141e0433a0fe9e4da191bd98cb007a64e3059db0d054ed937b51924b8334945fa2b446136dd4fad80a7943e0806bb4e7ebc88149cff507d2cd4f5870e4ff459174aca89370c4f101ecbee141b2cc7f229ca05d8d805f9ecbb59b138a53f5909f50c7cf1ea86dfa3baa08f0a7b71ab63fb821809c2d9bc153f69fc981c71feda1fa4ffbf52d2f1f16165e0f77bf02db3d429c8df8abf8294bb365deb0da79cd1f76265161087145b949d1430f7d527d0a810c89608f3c60436062ba684b7d2ada80623e89da508a205e03ef7effb3e83fb8c872927cb442f3a670cdec46d3fcda7b3a4944df84e3e08384caa72315bd1651883286c37bc8784ffbcb6fe3919d7b3c20e3f665b687f746236fd8254149f9ba8f9a3172b25b8c26e43be23b999a2731f643a55dceb39102e41ad09eb25fcd9b577760ffca8d30fa0c5308ff9575f4af900d0790534e3e4b4f062586c6e60631f3cccac18f67e0a79e0643c8f5a4df27cc7068b4acf982cb1386831de4883535ba4f401cf7d515a7ca1af695683ccea09860fe96600478e984682c148a5b0abc1275e0ff7347d40be90f4dd7dbfbd7ffe144bc8882e6ea46ed453db5ab9752f7a6b0f6fb66fbfda4fa758ac83c852b05959123ff35611cd20bf9cc4f92c5e975379e9337fd973302d3b91fd42e579a704d24084a07cfa436f8b53b2d21a17c695cd21bc8dc8b3053d1106c794e06cdf5dca3d6fecda1f764a40ecf68c6a9b28f8d8e3736276a2074ec9f8dc101b8590f32a9afe0048bd06fb2be568f69c5f464b612cafeb9931dabe9df4d979a7e2d7c9cd324746ae87e067f370c5eefdf551eb241a9743263cbd248c6dcb7aff7fa2446376db95fcd09826526d154436a97d4c57d40bd923074e45d6f09c7b2443ae97bcdbd2517cfdf8eebaa9b624a40288731d230f39e42d1b842055d1b5a2bcfb754a5e6a5f0852492fd3ac21a46fe98784d7ec51c275eac755a67a923563af82ab6c56964f5a2a60695a23ca57e6c3d5c9621bebfb08957ac9b8db0ec2d44c039713cbbb25713bd81125b6812af6b9a36fe45c0007353830a05b98fb4fa3127a2bac", 0x3e0}, {&(0x7f0000002380)="a1da5919f7940a3676adce70f03a6f17a125941d8255fa4b13f3fac1545928912b411e35a9623a3114efc4269e19e4236e792b4e555e77109bb501da27f7d47659e2962a595aa6b80100a1448fb9c812e48bb5b9003bd182fd216c3eec00d8e9422372f0902f6ee323", 0x69}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003640)}, {&(0x7f0000003740)="78339f21cf02253f206487a4ee9e6d686692b56704cb3e2c6b3182e5f311ebc054efee48b2e03dd220b2080f3169693b1e13444ae88c8058304bc30a75e4d2872dc0966b977cc76c12f968a196ff10199e", 0x51}, {&(0x7f00000037c0)}, {&(0x7f0000003800)="8df69c3b05113c32c2b636aeb900797992f20a07a56eb7a88f2c950e60ac0873f4cbec374070452bb38e3b6f8d47a473df48635ac929db584612262ae03ce22142fb2430373a24be28b776e8a6f4d733ec91575d4089c0049c809ee635da240f892e1ff7c008aec12ab3f7849a33f6a5", 0x70}, {&(0x7f0000003880)="af541567ba0012738e00d59f2a01ad9f5f2542ceb0989036c5739337f1772cc51228d6f3f84ef3b48111c68dc6c18c225cdb5dddbe7f831ac9be6c1b5a606e291f17a9e97dd0fcc4dd360b52e09192c3ccdd6426652bcc266ce961f79f8bfc0c53ef9d2a6ee813b6275dd2a54e9b7eeff70a172e5fb14ae5318e5fbcfe74ee7e2c3ea536934a85c69ac24bea2d29ba20da8df918e07f689616b752f5da3a40a9f68b58", 0xa3}], 0x5}}, {{0x0, 0x0, &(0x7f00000042c0)=[{0x0}], 0x1, &(0x7f0000004300)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14}}], 0x40}}], 0x7, 0x40) syz_mount_image$squashfs(&(0x7f0000004600), 0x0, 0x0, 0x5, &(0x7f0000004d80)=[{0x0, 0x0, 0x200}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x4}, {0x0}], 0x100000, &(0x7f0000004e80)={[{'&!'}, {'batadv0\x00'}, {'batadv0\x00'}], [{@subj_user={'subj_user', 0x3d, 'syzkaller1\x00'}}, {@subj_type={'subj_type', 0x3d, '!*-*#\\\'&$(['}}, {@obj_type={'obj_type', 0x3d, '-'}}, {@dont_measure}]}) 05:14:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:44 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) [ 1395.895084][T20340] loop3: detected capacity change from 0 to 2 [ 1396.244627][T20319] not chained 410000 origins [ 1396.249454][T20319] CPU: 0 PID: 20319 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1396.260142][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1396.270332][T20319] Call Trace: [ 1396.273708][T20319] [ 1396.276733][T20319] dump_stack_lvl+0x1c8/0x256 [ 1396.281637][T20319] dump_stack+0x1a/0x1c [ 1396.286009][T20319] kmsan_internal_chain_origin+0x78/0x120 [ 1396.291902][T20319] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1396.298144][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.303425][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1396.309852][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.315130][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1396.321114][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.326390][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1396.332371][T20319] ? __get_compat_msghdr+0x5b/0x750 [ 1396.337771][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.343046][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1396.349038][T20319] ? should_fail+0x3f/0x810 [ 1396.353709][T20319] ? __stack_depot_save+0x21/0x4b0 [ 1396.358995][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.364272][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1396.370698][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.375989][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1396.381985][T20319] __msan_chain_origin+0xbd/0x140 [ 1396.387199][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.392539][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.397598][T20319] ? ___sys_recvmsg+0xa9/0x890 [ 1396.402505][T20319] ? do_recvmmsg+0x63a/0x10a0 [ 1396.407338][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.412177][T20319] ? __schedule+0x1609/0x21d0 [ 1396.417019][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.422303][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1396.428290][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.433568][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1396.439561][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.444239][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1396.450667][T20319] ? __sys_recvmmsg+0x52/0x450 [ 1396.455574][T20319] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.462169][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.466993][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1396.472286][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.478717][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.483892][T20319] ? exit_to_user_mode_prepare+0x119/0x220 [ 1396.489864][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.494861][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.499509][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.506071][T20319] RIP: 0023:0xf7f6a549 [ 1396.510251][T20319] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1396.530047][T20319] RSP: 002b:00000000f7f445cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1396.538626][T20319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1396.546728][T20319] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1396.554832][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1396.562920][T20319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1396.571012][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1396.579129][T20319] [ 1396.585266][T20319] Uninit was stored to memory at: [ 1396.590535][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.596132][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.601204][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.606170][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.610836][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.615792][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.622211][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.627521][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.632660][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.637317][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.643990][T20319] [ 1396.646392][T20319] Uninit was stored to memory at: [ 1396.651645][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.657077][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.662140][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.667093][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.671754][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.676733][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.683268][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.688455][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.693585][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.698263][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.704963][T20319] [ 1396.707367][T20319] Uninit was stored to memory at: [ 1396.712727][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.718048][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.723204][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.728058][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.732841][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.737671][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.744207][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.749395][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.754532][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.759197][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.765874][T20319] [ 1396.768293][T20319] Uninit was stored to memory at: [ 1396.773655][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.778975][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.784133][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.788968][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.793749][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.798585][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.805189][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.810374][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.815562][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.820236][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.826987][T20319] [ 1396.829390][T20319] Uninit was stored to memory at: [ 1396.834759][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.840078][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.845422][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.850258][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.855094][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.859951][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.866545][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.871758][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.876950][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.881612][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.888338][T20319] [ 1396.890738][T20319] Uninit was stored to memory at: [ 1396.896100][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.901445][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.906678][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.911526][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.916365][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.921202][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.927747][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.933096][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.938124][T20319] do_SYSENTER_32+0x1b/0x20 [ 1396.942948][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1396.949527][T20319] [ 1396.951936][T20319] Uninit was stored to memory at: [ 1396.957394][T20319] __get_compat_msghdr+0x514/0x750 [ 1396.962875][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1396.967935][T20319] ___sys_recvmsg+0x19d/0x890 [ 1396.972962][T20319] do_recvmmsg+0x63a/0x10a0 [ 1396.977640][T20319] __sys_recvmmsg+0x113/0x450 [ 1396.982643][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1396.989073][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1396.994372][T20319] do_fast_syscall_32+0x33/0x70 [ 1396.999384][T20319] do_SYSENTER_32+0x1b/0x20 [ 1397.004225][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1397.010787][T20319] [ 1397.013363][T20319] Local variable msg_sys created at: [ 1397.018761][T20319] do_recvmmsg+0x5f/0x10a0 [ 1397.023499][T20319] __sys_recvmmsg+0x113/0x450 [ 1397.996180][T20319] not chained 420000 origins [ 1398.000918][T20319] CPU: 1 PID: 20319 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1398.011597][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1398.021795][T20319] Call Trace: [ 1398.025174][T20319] [ 1398.028204][T20319] dump_stack_lvl+0x1c8/0x256 [ 1398.033111][T20319] dump_stack+0x1a/0x1c [ 1398.037464][T20319] kmsan_internal_chain_origin+0x78/0x120 [ 1398.043394][T20319] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1398.049650][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.054940][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1398.061382][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.066681][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1398.072694][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.077906][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1398.083833][T20319] ? __get_compat_msghdr+0x5b/0x750 [ 1398.089244][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.094513][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1398.100421][T20319] ? should_fail+0x3f/0x810 [ 1398.105041][T20319] ? __stack_depot_save+0x21/0x4b0 [ 1398.110335][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.115605][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1398.121947][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.127178][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1398.133153][T20319] __msan_chain_origin+0xbd/0x140 [ 1398.138268][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.143546][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.148607][T20319] ? ___sys_recvmsg+0xa9/0x890 [ 1398.153529][T20319] ? do_recvmmsg+0x63a/0x10a0 [ 1398.158343][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.163143][T20319] ? __schedule+0x1609/0x21d0 [ 1398.167967][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.173197][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1398.179172][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.184405][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1398.190385][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.195020][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1398.201376][T20319] ? __sys_recvmmsg+0x52/0x450 [ 1398.206240][T20319] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.212850][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.217660][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1398.222904][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.229314][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.234448][T20319] ? exit_to_user_mode_prepare+0x119/0x220 [ 1398.240407][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.245363][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.249998][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.256480][T20319] RIP: 0023:0xf7f6a549 [ 1398.260646][T20319] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1398.280374][T20319] RSP: 002b:00000000f7f445cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1398.288876][T20319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1398.296935][T20319] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1398.304997][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.313110][T20319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.321188][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.329242][T20319] [ 1398.339784][T20319] Uninit was stored to memory at: [ 1398.345671][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.350986][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.356142][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.360972][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.365720][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.370550][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.377058][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.382249][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.387345][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.391999][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.398648][T20319] [ 1398.401053][T20319] Uninit was stored to memory at: [ 1398.406403][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.411717][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.416859][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.421712][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.426455][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.431285][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.437788][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.443058][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.448067][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.452809][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.459367][T20319] [ 1398.461776][T20319] Uninit was stored to memory at: [ 1398.467126][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.472526][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.477576][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.482483][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.487143][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.491979][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.498507][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.503784][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.508791][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.513564][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.520129][T20319] [ 1398.522616][T20319] Uninit was stored to memory at: [ 1398.527868][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.533276][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.538328][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.543248][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.547904][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.552827][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.559248][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.564524][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.569510][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.574266][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.580804][T20319] [ 1398.583327][T20319] Uninit was stored to memory at: [ 1398.588501][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.593885][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.598939][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.603913][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.608547][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.613471][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.619869][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.625135][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.630149][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.634951][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.641494][T20319] [ 1398.644019][T20319] Uninit was stored to memory at: [ 1398.649208][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.654597][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.659632][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.664559][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.669220][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.674151][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.680549][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.685828][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.690815][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.695565][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.702105][T20319] [ 1398.704624][T20319] Uninit was stored to memory at: [ 1398.709879][T20319] __get_compat_msghdr+0x514/0x750 [ 1398.715346][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1398.720381][T20319] ___sys_recvmsg+0x19d/0x890 [ 1398.725313][T20319] do_recvmmsg+0x63a/0x10a0 [ 1398.729970][T20319] __sys_recvmmsg+0x113/0x450 [ 1398.734932][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1398.741337][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1398.746568][T20319] do_fast_syscall_32+0x33/0x70 [ 1398.751553][T20319] do_SYSENTER_32+0x1b/0x20 [ 1398.756307][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1398.762955][T20319] [ 1398.765367][T20319] Local variable msg_sys created at: [ 1398.770717][T20319] do_recvmmsg+0x5f/0x10a0 [ 1398.775380][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.012788][T20319] not chained 430000 origins [ 1399.017517][T20319] CPU: 0 PID: 20319 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1399.028187][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1399.038336][T20319] Call Trace: [ 1399.041711][T20319] [ 1399.044698][T20319] dump_stack_lvl+0x1c8/0x256 [ 1399.049495][T20319] dump_stack+0x1a/0x1c [ 1399.053749][T20319] kmsan_internal_chain_origin+0x78/0x120 [ 1399.059559][T20319] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1399.065724][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.070924][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1399.077295][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.082593][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1399.088601][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.093894][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1399.099868][T20319] ? __get_compat_msghdr+0x5b/0x750 [ 1399.105194][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.110399][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1399.116305][T20319] ? should_fail+0x3f/0x810 [ 1399.120898][T20319] ? __stack_depot_save+0x21/0x4b0 [ 1399.126119][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.131409][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1399.137847][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.143141][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1399.149118][T20319] __msan_chain_origin+0xbd/0x140 [ 1399.154238][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.159481][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.164439][T20319] ? ___sys_recvmsg+0xa9/0x890 [ 1399.169277][T20319] ? do_recvmmsg+0x63a/0x10a0 [ 1399.174061][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.178908][T20319] ? __schedule+0x1609/0x21d0 [ 1399.183728][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.188929][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1399.194832][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.200037][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1399.205946][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.210542][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1399.216889][T20319] ? __sys_recvmmsg+0x52/0x450 [ 1399.221725][T20319] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.228277][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.233115][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1399.238425][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.244874][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.250062][T20319] ? exit_to_user_mode_prepare+0x119/0x220 [ 1399.256025][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.260957][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.265534][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.271988][T20319] RIP: 0023:0xf7f6a549 [ 1399.276138][T20319] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1399.295912][T20319] RSP: 002b:00000000f7f445cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1399.304408][T20319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1399.312445][T20319] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1399.320482][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1399.328539][T20319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.336631][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1399.344720][T20319] [ 1399.350058][T20319] Uninit was stored to memory at: [ 1399.355602][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.360925][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.366109][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.370943][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.375716][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.380551][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.387103][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.392408][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.397428][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.402091][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.408773][T20319] [ 1399.411179][T20319] Uninit was stored to memory at: [ 1399.416635][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.421932][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.427094][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.431909][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.436664][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.441494][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.448081][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.453383][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.458397][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.463212][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.469774][T20319] [ 1399.472154][T20319] Uninit was stored to memory at: [ 1399.477504][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.482942][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.487997][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.492988][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.497651][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.502663][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.509060][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.514312][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.519295][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.524087][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.530655][T20319] [ 1399.533226][T20319] Uninit was stored to memory at: [ 1399.538480][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.543862][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.548917][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.553921][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.558578][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.563591][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.569998][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.575247][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.580245][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.585027][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.591566][T20319] [ 1399.594126][T20319] Uninit was stored to memory at: [ 1399.599310][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.604725][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.609786][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.614739][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.619397][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.624405][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.630805][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.636056][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.641066][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.645844][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.652513][T20319] [ 1399.654916][T20319] Uninit was stored to memory at: [ 1399.660185][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.665692][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.670755][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.675715][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.680352][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.685326][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.691728][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.696989][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.701982][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.706705][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.713406][T20319] [ 1399.715810][T20319] Uninit was stored to memory at: [ 1399.721004][T20319] __get_compat_msghdr+0x514/0x750 [ 1399.726446][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1399.731507][T20319] ___sys_recvmsg+0x19d/0x890 [ 1399.736531][T20319] do_recvmmsg+0x63a/0x10a0 [ 1399.741170][T20319] __sys_recvmmsg+0x113/0x450 [ 1399.746136][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1399.752674][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1399.757868][T20319] do_fast_syscall_32+0x33/0x70 [ 1399.763053][T20319] do_SYSENTER_32+0x1b/0x20 [ 1399.767695][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1399.774351][T20319] [ 1399.776765][T20319] Local variable msg_sys created at: [ 1399.782135][T20319] do_recvmmsg+0x5f/0x10a0 [ 1399.786860][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.026131][T20319] not chained 440000 origins [ 1400.030801][T20319] CPU: 0 PID: 20319 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1400.041387][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1400.051504][T20319] Call Trace: [ 1400.054823][T20319] [ 1400.057824][T20319] dump_stack_lvl+0x1c8/0x256 [ 1400.062728][T20319] dump_stack+0x1a/0x1c [ 1400.067056][T20319] kmsan_internal_chain_origin+0x78/0x120 [ 1400.072899][T20319] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1400.079161][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.084454][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1400.090898][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.096171][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1400.102075][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.107278][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1400.113181][T20319] ? __get_compat_msghdr+0x5b/0x750 [ 1400.118492][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.123722][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1400.129732][T20319] ? should_fail+0x3f/0x810 [ 1400.134418][T20319] ? __stack_depot_save+0x21/0x4b0 [ 1400.139687][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.144893][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1400.151231][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.156433][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1400.162364][T20319] __msan_chain_origin+0xbd/0x140 [ 1400.167569][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.172928][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.177997][T20319] ? ___sys_recvmsg+0xa9/0x890 [ 1400.182901][T20319] ? do_recvmmsg+0x63a/0x10a0 [ 1400.187661][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.192420][T20319] ? __schedule+0x1609/0x21d0 [ 1400.197186][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.202393][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1400.208293][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.213495][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1400.219402][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.224035][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1400.230569][T20319] ? __sys_recvmmsg+0x52/0x450 [ 1400.235487][T20319] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.242092][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.246905][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1400.252114][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.258471][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.263600][T20319] ? exit_to_user_mode_prepare+0x119/0x220 [ 1400.269591][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.274616][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.279281][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.285841][T20319] RIP: 0023:0xf7f6a549 [ 1400.290012][T20319] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1400.309721][T20319] RSP: 002b:00000000f7f445cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1400.318216][T20319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1400.326284][T20319] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1400.334365][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1400.342401][T20319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.350434][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1400.358480][T20319] [ 1400.363727][T20319] Uninit was stored to memory at: [ 1400.368988][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.375463][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.380521][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.385620][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.390284][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.395244][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.401667][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.406990][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.412002][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.416781][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.423460][T20319] [ 1400.425863][T20319] Uninit was stored to memory at: [ 1400.431118][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.436568][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.441630][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.446662][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.451304][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.456267][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.462810][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.468023][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.473209][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.477871][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.484547][T20319] [ 1400.486935][T20319] Uninit was stored to memory at: [ 1400.492176][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.497594][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.502813][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.507651][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.512477][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.517291][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.523775][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.528942][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.534070][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.538737][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.545509][T20319] [ 1400.547940][T20319] Uninit was stored to memory at: [ 1400.553353][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.558655][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.563849][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.568698][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.573538][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.578375][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.584929][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.590101][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.595260][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.599903][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.606541][T20319] [ 1400.608927][T20319] Uninit was stored to memory at: [ 1400.614332][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.619647][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.624824][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.629658][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.634460][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.639272][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.645754][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.650923][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.656055][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.660723][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.667405][T20319] [ 1400.669792][T20319] Uninit was stored to memory at: [ 1400.675198][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.680538][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.685720][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.690561][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.695343][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.700158][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.706640][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.711805][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.716936][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.721594][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.728205][T20319] [ 1400.730589][T20319] Uninit was stored to memory at: [ 1400.735997][T20319] __get_compat_msghdr+0x514/0x750 [ 1400.741326][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1400.746559][T20319] ___sys_recvmsg+0x19d/0x890 [ 1400.751396][T20319] do_recvmmsg+0x63a/0x10a0 [ 1400.756241][T20319] __sys_recvmmsg+0x113/0x450 [ 1400.761076][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1400.767673][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1400.772969][T20319] do_fast_syscall_32+0x33/0x70 [ 1400.777981][T20319] do_SYSENTER_32+0x1b/0x20 [ 1400.782756][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1400.789313][T20319] [ 1400.791716][T20319] Local variable msg_sys created at: [ 1400.797267][T20319] do_recvmmsg+0x5f/0x10a0 [ 1400.801832][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.225069][T20319] not chained 450000 origins [ 1401.229813][T20319] CPU: 0 PID: 20319 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1401.240496][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1401.250684][T20319] Call Trace: [ 1401.254061][T20319] [ 1401.257097][T20319] dump_stack_lvl+0x1c8/0x256 [ 1401.261997][T20319] dump_stack+0x1a/0x1c [ 1401.266346][T20319] kmsan_internal_chain_origin+0x78/0x120 [ 1401.272250][T20319] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1401.278505][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.283820][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1401.290258][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.295551][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1401.301548][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.306854][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1401.312851][T20319] ? __get_compat_msghdr+0x5b/0x750 [ 1401.318260][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.323551][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1401.329564][T20319] ? should_fail+0x3f/0x810 [ 1401.334247][T20319] ? __stack_depot_save+0x21/0x4b0 [ 1401.339534][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.344826][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1401.351262][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.356555][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1401.362550][T20319] __msan_chain_origin+0xbd/0x140 [ 1401.367754][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.373114][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.378173][T20319] ? ___sys_recvmsg+0xa9/0x890 [ 1401.383100][T20319] ? do_recvmmsg+0x63a/0x10a0 [ 1401.387948][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.392801][T20319] ? __schedule+0x1609/0x21d0 [ 1401.397652][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.402943][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1401.408945][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.414245][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1401.420251][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.424946][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1401.431405][T20319] ? __sys_recvmmsg+0x52/0x450 [ 1401.436335][T20319] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.442945][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.447796][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1401.453106][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.459546][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.464735][T20319] ? exit_to_user_mode_prepare+0x119/0x220 [ 1401.470720][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.475731][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.480390][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.486948][T20319] RIP: 0023:0xf7f6a549 [ 1401.491148][T20319] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1401.510965][T20319] RSP: 002b:00000000f7f445cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1401.519556][T20319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1401.527668][T20319] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1401.535794][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.543899][T20319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.552000][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1401.560106][T20319] [ 1401.565450][T20319] Uninit was stored to memory at: [ 1401.570723][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.576384][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.581438][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.586396][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.591053][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.596005][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.602595][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.607784][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.612910][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.617561][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.624237][T20319] [ 1401.626650][T20319] Uninit was stored to memory at: [ 1401.631902][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.637410][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.642578][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.647409][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.652058][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.657013][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.663492][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.668598][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.673723][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.678380][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.685068][T20319] [ 1401.687461][T20319] Uninit was stored to memory at: [ 1401.692939][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.698287][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.703519][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.708360][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.713127][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.717971][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.724586][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.729758][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.734841][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.739476][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.746145][T20319] [ 1401.748555][T20319] Uninit was stored to memory at: [ 1401.753984][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.759307][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.764557][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.769401][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.774276][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.779093][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.785631][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.790802][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.795882][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.800542][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.807290][T20319] [ 1401.809693][T20319] Uninit was stored to memory at: [ 1401.815062][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.820361][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.825469][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.830291][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.835075][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.839913][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.846461][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.851638][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.856719][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.861354][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.868011][T20319] [ 1401.870418][T20319] Uninit was stored to memory at: [ 1401.875863][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.881189][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.886429][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.891266][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.896106][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.900945][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.907545][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.912863][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.917849][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.922605][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.929155][T20319] [ 1401.931510][T20319] Uninit was stored to memory at: [ 1401.936868][T20319] __get_compat_msghdr+0x514/0x750 [ 1401.942166][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1401.947319][T20319] ___sys_recvmsg+0x19d/0x890 [ 1401.952157][T20319] do_recvmmsg+0x63a/0x10a0 [ 1401.957030][T20319] __sys_recvmmsg+0x113/0x450 [ 1401.961872][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1401.968424][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1401.973739][T20319] do_fast_syscall_32+0x33/0x70 [ 1401.978725][T20319] do_SYSENTER_32+0x1b/0x20 [ 1401.983501][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1401.990069][T20319] [ 1401.992641][T20319] Local variable msg_sys created at: [ 1401.998016][T20319] do_recvmmsg+0x5f/0x10a0 [ 1402.002697][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.238852][T20319] not chained 460000 origins [ 1402.243738][T20319] CPU: 0 PID: 20319 Comm: syz-executor.4 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1402.254417][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1402.264579][T20319] Call Trace: [ 1402.267903][T20319] [ 1402.270876][T20319] dump_stack_lvl+0x1c8/0x256 [ 1402.275677][T20319] dump_stack+0x1a/0x1c [ 1402.279929][T20319] kmsan_internal_chain_origin+0x78/0x120 [ 1402.285743][T20319] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1402.291905][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.297108][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1402.303477][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.308768][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1402.314761][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.320051][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1402.326053][T20319] ? __get_compat_msghdr+0x5b/0x750 [ 1402.331447][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.336651][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1402.342558][T20319] ? should_fail+0x3f/0x810 [ 1402.347151][T20319] ? __stack_depot_save+0x21/0x4b0 [ 1402.352371][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.357659][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1402.364092][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.369389][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1402.375363][T20319] __msan_chain_origin+0xbd/0x140 [ 1402.380478][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.385718][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.390675][T20319] ? ___sys_recvmsg+0xa9/0x890 [ 1402.395517][T20319] ? do_recvmmsg+0x63a/0x10a0 [ 1402.400272][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.405063][T20319] ? __schedule+0x1609/0x21d0 [ 1402.409921][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.415215][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1402.421191][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.426394][T20319] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1402.432344][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.436951][T20319] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1402.443292][T20319] ? __sys_recvmmsg+0x52/0x450 [ 1402.448132][T20319] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.454675][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.459510][T20319] ? kmsan_get_metadata+0x33/0x220 [ 1402.464816][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.471228][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.476332][T20319] ? exit_to_user_mode_prepare+0x119/0x220 [ 1402.482229][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.487302][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.491877][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.498330][T20319] RIP: 0023:0xf7f6a549 [ 1402.502473][T20319] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1402.522274][T20319] RSP: 002b:00000000f7f445cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1402.530869][T20319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1402.538970][T20319] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1402.547012][T20319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1402.555076][T20319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.563158][T20319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1402.571230][T20319] [ 1402.576385][T20319] Uninit was stored to memory at: [ 1402.581664][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.587264][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.592442][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.597280][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.601932][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.606901][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.613440][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.618652][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.623792][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.628450][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.635129][T20319] [ 1402.637536][T20319] Uninit was stored to memory at: [ 1402.642899][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.648217][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.653391][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.658206][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.662983][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.667795][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.674330][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.679496][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.684568][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.689208][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.695865][T20319] [ 1402.698253][T20319] Uninit was stored to memory at: [ 1402.703650][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.708966][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.714114][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.718946][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.723724][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.728566][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.735182][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.740376][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.745565][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.750229][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.756987][T20319] [ 1402.759396][T20319] Uninit was stored to memory at: [ 1402.764814][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.770110][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.775225][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.780040][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.784769][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.789582][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.796110][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.801301][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.806375][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.811013][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.817614][T20319] [ 1402.820005][T20319] Uninit was stored to memory at: [ 1402.825387][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.830705][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.835883][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.840720][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.845553][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.850388][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.856948][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.862117][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.867252][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.871913][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.878647][T20319] [ 1402.881053][T20319] Uninit was stored to memory at: [ 1402.886430][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.891745][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.896845][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.901657][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.906441][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.911279][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.917882][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.923184][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.928189][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.933005][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1402.939547][T20319] [ 1402.941902][T20319] Uninit was stored to memory at: [ 1402.947298][T20319] __get_compat_msghdr+0x514/0x750 [ 1402.952731][T20319] get_compat_msghdr+0x8c/0x1c0 [ 1402.957763][T20319] ___sys_recvmsg+0x19d/0x890 [ 1402.962684][T20319] do_recvmmsg+0x63a/0x10a0 [ 1402.967338][T20319] __sys_recvmmsg+0x113/0x450 [ 1402.972176][T20319] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1402.978778][T20319] __do_fast_syscall_32+0x87/0xe0 [ 1402.984154][T20319] do_fast_syscall_32+0x33/0x70 [ 1402.989170][T20319] do_SYSENTER_32+0x1b/0x20 [ 1402.993998][T20319] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1403.000561][T20319] [ 1403.003135][T20319] Local variable msg_sys created at: [ 1403.008517][T20319] do_recvmmsg+0x5f/0x10a0 [ 1403.013207][T20319] __sys_recvmmsg+0x113/0x450 05:14:52 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$setflags(r0, 0x2, 0x0) 05:14:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0xc, r0) 05:14:52 executing program 0: clock_nanosleep(0x3, 0x1, &(0x7f0000000000), &(0x7f0000000040)) 05:14:52 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000a00)={&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x1) 05:14:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000001080), &(0x7f0000000100)=0x1002) 05:14:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:52 executing program 2: shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 05:14:52 executing program 3: pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:14:52 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)) 05:14:52 executing program 5: pipe2(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 05:14:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:53 executing program 4: read(0xffffffffffffff9c, 0x0, 0x0) 05:14:53 executing program 3: syz_mount_image$qnx6(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000001840)=[{0x0, 0x0, 0x80000001}, {&(0x7f0000000600)="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", 0x1ed}], 0x0, &(0x7f0000001940)) 05:14:53 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d40), r0) 05:14:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205648, &(0x7f0000000100)={0xf010000}) 05:14:53 executing program 5: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 05:14:53 executing program 1: r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:53 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b05d25a80648c6394f90124fc60100002400a000000053582c137153e373548018000f01700d1bd", 0x33fe0}], 0x1}, 0x24230000) [ 1404.543892][T20369] loop3: detected capacity change from 0 to 264192 [ 1404.642931][T20369] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1404.699997][T20369] qnx6: wrong signature (magic) in superblock #1. [ 1404.707191][T20369] qnx6: unable to read the first superblock 05:14:53 executing program 2: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000015c0), 0xc000, 0x0) 05:14:54 executing program 0: syz_mount_image$qnx6(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f0000001840)=[{&(0x7f00000002c0)="346ade9c199cc0408897ad0dc5f4f1c9a1d8983aec073db9bbc49e794a1e7c0cb619b53e2843b2a446bdf3adaefc62a2dbef7f4f56163727efd39b047197a672d804a867140673e0095cfdc32303c3049e90eb01cfff106a550c463de145fcb01c7378cb5fcc82c99b4b0a77f04f3b406948a7b00c7db0fd660f5e558f226e1f97308cbf647cfe6b8d2d7978c525cfbe43b1055a98e1d6efd25446132690f5e1baa1c7861529571c450f5f9934e1cdbfe539f95cfa9bbe00482d71b8f70bec40977473f94fae167ad3245a8bc8681c", 0xcf, 0x1}, {&(0x7f00000003c0)="a83f0a5b6f3296c7acb3e83c92e447100f0ebf2a2fe694812f3e088e423aa7dbf968644e8df4c17a643ac537e0f0ecf9ebc15c971f321a0c6f147ef86796f4ca9b09a4e4624cc7ccfe5b9a966d4dbc696dd05d7878fe817714cd1c592c836aaf69eb0b1743e9545a7e80b88a94454865c9e6baa73f9615a133d1ece038d263d82964a6dc3dfdee13441c90b9b42f6cd16e0b36b872ecb761ff3de240e55ae4e831cdc3b9df4eace0a4151ddab6f5920c2901b054df82a02cb44fa23967e1cbb8b890", 0xc2, 0x80000001}, {&(0x7f00000004c0)="a76afa8bb9690a407bc18787deed525c7baec3f6069d1b9a8f1fff7802f5722573a7eece6bac8acb659af83714dba3586d46bf39bb0a882d6ad158f38a567a22b783bfb72d41e4f4c6ffaaa6b3664297a53ca10df49c3ccbd0d2ec2c8be154e7a0db818176c32ed691cba83edec43f4eee17a2a507056eaaf337d9d6c0b37b0f29294b229c3da8694f0da43867d91ca4b88a0ffa9bb63fd708dcda48334f1d2348a92d6cc4d5b1849e7aa6d7a2affc78b843b99967df7240fd5a6e8dd570673bca7c526f2419b1fb54ea02f2e0dd", 0xce, 0x40}, {0x0}], 0x0, &(0x7f0000001940)={[{}, {}, {'%\\+}*,@'}, {'!$..]{'}, {}, {')$^[[]'}, {'$:'}, {'+/'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfstransmute}, {@context={'context', 0x3d, 'user_u'}}]}) 05:14:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 05:14:54 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) open(0x0, 0x599800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b05d25a80708c6394f90124fc60100002400a000000053582c137153e373548018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 05:14:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:54 executing program 1: r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) [ 1405.535911][T20389] loop0: detected capacity change from 0 to 264192 05:14:54 executing program 5: syz_mount_image$vfat(&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 05:14:54 executing program 0: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffff92) 05:14:54 executing program 3: mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0) 05:14:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0}) syz_mount_image$qnx6(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x2, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="0f", 0x1, 0x5}, {&(0x7f0000000b80)="e5291a379094f60420055d9e983de833be2b1f0c48e76c14d5", 0x19}], 0x1000080, &(0x7f0000000c00)={[{':.+!$,-%.#$'}, {'\x00'}, {}, {'-)@:'}, {'/dev/btrfs-control\x00'}, {'l2tp\x00'}, {'TIPC\x00'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, '/!.\\\\'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@fowner_gt={'fowner>', 0xee00}}]}) 05:14:55 executing program 1: r0 = socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:55 executing program 5: readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/130, 0x82) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 05:14:55 executing program 0: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{0x0, 0x0, 0xb264}], 0x0, 0x0) 05:14:55 executing program 3: syz_mount_image$qnx6(&(0x7f0000000a80), 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)) 05:14:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:56 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000004c0)='/dev/dlm-monitor\x00', &(0x7f0000000500)='./file0\x00', r1) [ 1406.970436][T20412] qnx6: invalid mount options. [ 1406.976513][T20415] loop0: detected capacity change from 0 to 178 05:14:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x51}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="73030400dfed234fb377bb0311ea", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 05:14:56 executing program 2: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f00000006c0)="ab", 0x1}], 0x0, 0x0) 05:14:56 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 05:14:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:56 executing program 1: r0 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204004, 0x0) close(r0) 05:14:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) 05:14:57 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$qnx6(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)) 05:14:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:57 executing program 1: r0 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 05:14:57 executing program 3: getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/58, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:14:57 executing program 5: syz_mount_image$qnx6(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000001840)=[{&(0x7f0000000600)="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", 0xe00}], 0x0, &(0x7f0000001940)={[{}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsdef}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfstransmute}, {@context={'context', 0x3d, 'user_u'}}]}) [ 1408.477245][T20440] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1408.525536][T20440] qnx6: wrong signature (magic) in superblock #1. [ 1408.532511][T20440] qnx6: unable to read the first superblock 05:14:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:57 executing program 1: r0 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) [ 1408.811165][T20448] loop5: detected capacity change from 0 to 7 05:14:57 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf25170000003c0001801400020076657468335f6d616376346170000000140002006d6163766c616e3100d12200000000000840"], 0xc0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) [ 1408.908816][T20448] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1408.915018][T20448] loop5: partition table partially beyond EOD, truncated [ 1408.923618][T20448] loop5: p1 size 3424534085 extends beyond EOD, truncated [ 1409.028399][T20448] qnx6: invalid mount options. 05:14:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:14:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x181042) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffff, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 05:14:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1409.359672][T20458] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 05:14:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/169, 0xa9}, {&(0x7f0000001bc0)=""/243, 0xf3}, {&(0x7f0000000980)=""/39, 0x27}, {&(0x7f0000001d00)=""/227, 0xe3}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x0, 0x0) 05:14:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 05:14:58 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_INO32_GEN={0x8}, 0x0) 05:14:59 executing program 0: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[{&(0x7f00000005c0)="b0f54f757cadf7848528b12ddc303ebfa324", 0x12, 0xb264}, {&(0x7f00000006c0)="abc534c8124f32a603a88a1522f04f94c0", 0x11}], 0x0, &(0x7f0000000880)={[{'fowner<'}, {'obj_role'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{$[%-,\\'}}, {@obj_role={'obj_role', 0x3d, '[*-&X'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x10'}}]}) 05:14:59 executing program 3: syz_mount_image$hpfs(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000880)={[], [{@obj_role={'obj_role', 0x3d, '[*-&X'}}]}) 05:14:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:14:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1410.985900][T20485] loop0: detected capacity change from 0 to 178 05:15:00 executing program 2: mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)) [ 1411.232223][T20489] hpfs: bad mount options. 05:15:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000b40)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000880)=""/210, 0x1000000, 0xd2, 0x1}, 0x20) 05:15:00 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:15:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d7a09ebd5df457112d05a149901216b790ac87f00ae48750649f942430b85fa2b5fe1654ceb2c7c0c7138daf6663e3657d233118a462fc391e36cf8ee08b42627469b237c93fbeae617da76c600daf5455a097cca2c7813e25579226c366962f48682e329c28872dd87612bd17853a2ed454db24c05edbbd47d3e11a0a7843e76bef77241925d7b2ac3226fd7791b885b3791063bbcb103163f67ca12009ebacc69e811918cdb9225297b0736ca6d4647091dc911c775dab7919344a6d5f1207088facd3307b57e503608092f8a31967988d09e3b3a0e7787a8afe40834b0a23a66038c0519b5ed7705e1926844a17f264330c0472d9f6ae25f60eea6044cc580cc82b52c7f32c483367ad1282e9c94400444c6a448c8b680de70b850f13ba56e1d25375affe840ff09e563ad03d5859c6571a5644bd97c4730e815880838a2a65d26b8504214ff984a8883ee2f86c293b7a26889122951ec7b653fba5af191390e69959bd719cff476aa2def9a69f52c20fefbfcfc759d46a8c6b7e18b025a73dbdf2196c16b37097c684e7efc132fe80", @ANYRES16, @ANYRES64, @ANYRES32, @ANYBLOB="b8"], 0x54}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="660f3828fec4e2b145554ff2afc4e3f914a7b900000084b81bc300000f23d00f21f835000000080f23f8c4e3f57e8e5e01d36044640f8ef2ffffffc4c179e6f40f001500a0dd8cf30fc7347c", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:15:00 executing program 3: syz_mount_image$qnx6(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[], [{@subj_user={'subj_user', 0x3d, '/!.\\\\'}}]}) 05:15:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:00 executing program 2: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) 05:15:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) [ 1412.273605][T20508] qnx6: invalid mount options. 05:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:01 executing program 3: syz_mount_image$hpfs(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000010c0)) 05:15:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:15:01 executing program 0: syz_mount_image$qnx6(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000001840)=[{0x0, 0x0, 0x80000001}, {&(0x7f0000000600)="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", 0x180}], 0x0, &(0x7f0000001940)) [ 1413.188349][T20521] loop0: detected capacity change from 0 to 264192 [ 1413.254009][T20521] loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1413.263351][T20521] loop0: p1 start 2616801960 is beyond EOD, truncated [ 1413.278120][T20521] loop0: p2 start 3434831683 is beyond EOD, truncated [ 1413.285922][T20521] loop0: p3 start 3263076067 is beyond EOD, truncated [ 1413.293172][T20521] loop0: p4 start 709681680 is beyond EOD, truncated [ 1413.300100][T20521] loop0: p5 start 3159385831 is beyond EOD, truncated [ 1413.307303][T20521] loop0: p6 start 928563738 is beyond EOD, truncated [ 1413.314333][T20521] loop0: p7 start 1008810898 is beyond EOD, truncated [ 1413.321361][T20521] loop0: p8 start 1586937389 is beyond EOD, truncated [ 1413.328538][T20521] loop0: p9 start 129820955 is beyond EOD, truncated [ 1413.335564][T20521] loop0: p10 start 2355989272 is beyond EOD, truncated [ 1413.342816][T20521] loop0: p11 start 3422842995 is beyond EOD, truncated [ 1413.350195][T20521] loop0: p12 start 2036734336 is beyond EOD, truncated [ 1413.378253][T20521] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1413.430504][T20521] qnx6: wrong signature (magic) in superblock #1. [ 1413.437347][T20521] qnx6: unable to read the first superblock 05:15:03 executing program 5: syz_mount_image$hpfs(0x0, &(0x7f0000000580)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:15:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000004c0)={r2}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) syz_mount_image$qnx6(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x2, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="0fe8204d266d16a9719cd25ace0d7e7d2ef7a6447d03ea52c1c1a4fe683bbf241cd154", 0x23, 0x5}, {&(0x7f0000000b80)="e5291a379094f604", 0x8, 0x9}], 0x1000080, &(0x7f0000000c00)={[{':-%'}, {':.+!$,-%.#$'}, {'\x00'}, {'O@!$'}, {}, {'-)@:'}, {'/dev/btrfs-control\x00'}, {'l2tp\x00'}, {'TIPC\x00'}, {'.{}['}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, '/!.\\\\'}}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_gt={'fowner>', 0xee00}}]}) 05:15:03 executing program 3: syz_mount_image$hpfs(&(0x7f0000000f00), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)) 05:15:03 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f00000059c0), 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b05d25a80708c6394f90224fc60100002400a000000053582c137153e373548018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 05:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:15:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1414.272034][T20531] qnx6: invalid mount options. 05:15:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140), 0x4) 05:15:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() 05:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:15:03 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 05:15:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:04 executing program 0: syz_mount_image$qnx6(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000001840)=[{0x0, 0x0, 0x80000001}, {&(0x7f0000000600)="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", 0x1ee}], 0x0, &(0x7f0000001940)={[{}]}) [ 1415.384913][T20546] not chained 470000 origins [ 1415.389796][T20546] CPU: 1 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1415.400483][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1415.410680][T20546] Call Trace: [ 1415.414078][T20546] [ 1415.417103][T20546] dump_stack_lvl+0x1c8/0x256 [ 1415.422007][T20546] dump_stack+0x1a/0x1c [ 1415.426345][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1415.432241][T20546] ? propagate_entity_load_avg+0x32/0x1450 [ 1415.438324][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.443601][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1415.449591][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.454870][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1415.460856][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1415.466258][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.471540][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1415.477531][T20546] ? should_fail+0x3f/0x810 [ 1415.482203][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1415.487481][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.492761][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1415.499185][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.504461][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1415.510448][T20546] __msan_chain_origin+0xbd/0x140 [ 1415.515640][T20546] __get_compat_msghdr+0x514/0x750 [ 1415.520986][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1415.526046][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1415.530957][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1415.535786][T20546] ___sys_recvmsg+0x19d/0x890 [ 1415.540628][T20546] ? __schedule+0x1609/0x21d0 [ 1415.545463][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.550739][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1415.556720][T20546] ? __cond_resched+0x1f/0x40 [ 1415.561554][T20546] do_recvmmsg+0x63a/0x10a0 [ 1415.566237][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1415.572662][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1415.577568][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1415.584165][T20546] __sys_recvmmsg+0x113/0x450 [ 1415.588991][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1415.594289][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1415.600718][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1415.605895][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1415.611868][T20546] do_fast_syscall_32+0x33/0x70 [ 1415.616868][T20546] do_SYSENTER_32+0x1b/0x20 [ 1415.621519][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1415.628061][T20546] RIP: 0023:0xf7f10549 [ 1415.632244][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1415.652050][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1415.660634][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1415.668744][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1415.676843][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.684942][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.693042][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.701166][T20546] [ 1415.713544][T20546] Uninit was stored to memory at: [ 1415.718857][T20546] __get_compat_msghdr+0x514/0x750 05:15:04 executing program 3: syz_mount_image$qnx6(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000001840)=[{&(0x7f0000000600)="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", 0xe00}], 0x0, &(0x7f0000001940)) [ 1415.732689][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1415.744448][T20546] ___sys_recvmsg+0x19d/0x890 [ 1415.749305][T20546] do_recvmmsg+0x63a/0x10a0 [ 1415.754082][T20546] __sys_recvmmsg+0x113/0x450 [ 1415.758932][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1415.765448][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1415.770646][T20546] do_fast_syscall_32+0x33/0x70 [ 1415.775769][T20546] do_SYSENTER_32+0x1b/0x20 [ 1415.780450][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1415.787127][T20546] [ 1415.789535][T20546] Uninit was stored to memory at: [ 1415.794890][T20546] __get_compat_msghdr+0x514/0x750 [ 1415.800215][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1415.805398][T20546] ___sys_recvmsg+0x19d/0x890 [ 1415.810239][T20546] do_recvmmsg+0x63a/0x10a0 [ 1415.814988][T20546] __sys_recvmmsg+0x113/0x450 [ 1415.819824][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1415.826423][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1415.831627][T20546] do_fast_syscall_32+0x33/0x70 [ 1415.836739][T20546] do_SYSENTER_32+0x1b/0x20 [ 1415.841408][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1415.848509][T20546] [ 1415.850914][T20546] Uninit was stored to memory at: [ 1415.856249][T20546] __get_compat_msghdr+0x514/0x750 [ 1415.861573][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1415.866749][T20546] ___sys_recvmsg+0x19d/0x890 [ 1415.871612][T20546] do_recvmmsg+0x63a/0x10a0 [ 1415.876370][T20546] __sys_recvmmsg+0x113/0x450 [ 1415.881207][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 05:15:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) [ 1415.887722][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1415.892996][T20546] do_fast_syscall_32+0x33/0x70 [ 1415.898003][T20546] do_SYSENTER_32+0x1b/0x20 [ 1415.902752][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1415.909317][T20546] [ 1415.911724][T20546] Uninit was stored to memory at: [ 1415.917066][T20546] __get_compat_msghdr+0x514/0x750 [ 1415.922466][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1415.927527][T20546] ___sys_recvmsg+0x19d/0x890 [ 1415.932459][T20546] do_recvmmsg+0x63a/0x10a0 [ 1415.937128][T20546] __sys_recvmmsg+0x113/0x450 [ 1415.941967][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1415.948919][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1415.954205][T20546] do_fast_syscall_32+0x33/0x70 [ 1415.959229][T20546] do_SYSENTER_32+0x1b/0x20 [ 1415.963980][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1415.970542][T20546] [ 1415.973037][T20546] Uninit was stored to memory at: [ 1415.978276][T20546] __get_compat_msghdr+0x514/0x750 [ 1415.983681][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1415.988742][T20546] ___sys_recvmsg+0x19d/0x890 [ 1415.993670][T20546] do_recvmmsg+0x63a/0x10a0 [ 1415.998335][T20546] __sys_recvmmsg+0x113/0x450 [ 1416.003254][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1416.009676][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1416.014951][T20546] do_fast_syscall_32+0x33/0x70 [ 1416.019960][T20546] do_SYSENTER_32+0x1b/0x20 [ 1416.024707][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1416.031264][T20546] [ 1416.033758][T20546] Uninit was stored to memory at: [ 1416.039016][T20546] __get_compat_msghdr+0x514/0x750 [ 1416.044419][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1416.049494][T20546] ___sys_recvmsg+0x19d/0x890 [ 1416.054424][T20546] do_recvmmsg+0x63a/0x10a0 [ 1416.059080][T20546] __sys_recvmmsg+0x113/0x450 [ 1416.063999][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1416.070426][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1416.075769][T20546] do_fast_syscall_32+0x33/0x70 [ 1416.080778][T20546] do_SYSENTER_32+0x1b/0x20 05:15:05 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$hpfs(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0x10001, 0x2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000780)="4468b37a0eea8d7ef3d6fc3757356d7a7e3c6a6a5d4780f7f35de54726ec2d191a92edc9c33979099c7cf57301c88fb946effd763cf76758876ca06db6d421469f2991c46ad9419479d5e36b02a3717afbf001405716cd75d315ee", 0x5b}], 0x10, &(0x7f0000000880)={[{'%'}, {'ethtool\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{$[%-,\\'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) [ 1416.085594][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1416.092153][T20546] [ 1416.094714][T20546] Uninit was stored to memory at: [ 1416.099964][T20546] __get_compat_msghdr+0x514/0x750 [ 1416.105439][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1416.110504][T20546] ___sys_recvmsg+0x19d/0x890 [ 1416.115499][T20546] do_recvmmsg+0x63a/0x10a0 [ 1416.120210][T20546] __sys_recvmmsg+0x113/0x450 [ 1416.125205][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1416.131633][T20546] __do_fast_syscall_32+0x87/0xe0 05:15:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1416.136989][T20546] do_fast_syscall_32+0x33/0x70 [ 1416.142006][T20546] do_SYSENTER_32+0x1b/0x20 [ 1416.146827][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1416.153480][T20546] [ 1416.155889][T20546] Local variable msg_sys created at: [ 1416.161263][T20546] do_recvmmsg+0x5f/0x10a0 [ 1416.166037][T20546] __sys_recvmmsg+0x113/0x450 [ 1416.416054][T20558] loop0: detected capacity change from 0 to 264192 [ 1416.430605][T20562] loop3: detected capacity change from 0 to 7 [ 1416.489978][T20558] loop0: AHDI p4 [ 1416.504224][T20562] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1416.509885][T20562] loop3: partition table partially beyond EOD, truncated [ 1416.518484][T20562] loop3: p1 size 3424534085 extends beyond EOD, truncated 05:15:05 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) [ 1416.577628][T20558] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1416.605351][T20558] qnx6: wrong signature (magic) in superblock #1. [ 1416.612119][T20558] qnx6: unable to read the first superblock [ 1416.663215][T20562] qnx6: unable to read the first superblock [ 1416.703062][T20562] qnx6: wrong signature (magic) in superblock #1. [ 1416.709899][T20562] qnx6: unable to read the first superblock [ 1416.720646][T20564] loop2: detected capacity change from 0 to 128 05:15:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1416.864457][T20564] loop2: [POWERTEC] p1 p2 p3 [ 1416.870608][T20564] loop2: p1 start 939316979 is beyond EOD, truncated [ 1416.877908][T20564] loop2: p2 start 158939587 is beyond EOD, truncated [ 1416.884982][T20564] loop2: p3 start 3297847711 is beyond EOD, truncated [ 1416.988112][T20564] hpfs: bad mount options. [ 1417.601043][T20546] not chained 480000 origins [ 1417.606473][T20546] CPU: 1 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1417.617161][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1417.627346][T20546] Call Trace: [ 1417.630713][T20546] [ 1417.633732][T20546] dump_stack_lvl+0x1c8/0x256 [ 1417.638622][T20546] dump_stack+0x1a/0x1c [ 1417.642959][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1417.648850][T20546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1417.655093][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.660375][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1417.666798][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.672085][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1417.678072][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.683350][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1417.689334][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1417.694733][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.700035][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1417.706043][T20546] ? should_fail+0x3f/0x810 [ 1417.710715][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1417.715992][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.721272][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1417.727699][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.732978][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1417.738964][T20546] __msan_chain_origin+0xbd/0x140 [ 1417.744158][T20546] __get_compat_msghdr+0x514/0x750 [ 1417.749501][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1417.754553][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1417.759464][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1417.764296][T20546] ___sys_recvmsg+0x19d/0x890 [ 1417.769134][T20546] ? __schedule+0x1609/0x21d0 [ 1417.773970][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.779248][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1417.785232][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.790509][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1417.796506][T20546] do_recvmmsg+0x63a/0x10a0 [ 1417.801186][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1417.807618][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1417.812528][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1417.819122][T20546] __sys_recvmmsg+0x113/0x450 [ 1417.823944][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1417.829234][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1417.835681][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1417.840856][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1417.846827][T20546] do_fast_syscall_32+0x33/0x70 [ 1417.851838][T20546] do_SYSENTER_32+0x1b/0x20 [ 1417.856484][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1417.863031][T20546] RIP: 0023:0xf7f10549 [ 1417.867211][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1417.886999][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1417.895566][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1417.903669][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1417.911763][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1417.919855][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.927947][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1417.936067][T20546] [ 1417.948223][T20546] Uninit was stored to memory at: [ 1417.954523][T20546] __get_compat_msghdr+0x514/0x750 [ 1417.959859][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1417.965017][T20546] ___sys_recvmsg+0x19d/0x890 [ 1417.969864][T20546] do_recvmmsg+0x63a/0x10a0 [ 1417.974622][T20546] __sys_recvmmsg+0x113/0x450 [ 1417.979487][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1417.986007][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1417.991204][T20546] do_fast_syscall_32+0x33/0x70 [ 1417.996298][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.000956][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.007604][T20546] [ 1418.010008][T20546] Uninit was stored to memory at: [ 1418.015346][T20546] __get_compat_msghdr+0x514/0x750 [ 1418.020668][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1418.025807][T20546] ___sys_recvmsg+0x19d/0x890 [ 1418.030649][T20546] do_recvmmsg+0x63a/0x10a0 [ 1418.035401][T20546] __sys_recvmmsg+0x113/0x450 [ 1418.040240][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1418.046749][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1418.051951][T20546] do_fast_syscall_32+0x33/0x70 [ 1418.057044][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.061703][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.068358][T20546] [ 1418.070765][T20546] Uninit was stored to memory at: [ 1418.076108][T20546] __get_compat_msghdr+0x514/0x750 [ 1418.081429][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1418.086576][T20546] ___sys_recvmsg+0x19d/0x890 [ 1418.091420][T20546] do_recvmmsg+0x63a/0x10a0 [ 1418.096171][T20546] __sys_recvmmsg+0x113/0x450 [ 1418.101006][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1418.107575][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1418.112852][T20546] do_fast_syscall_32+0x33/0x70 [ 1418.117864][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.122668][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.129233][T20546] [ 1418.131645][T20546] Uninit was stored to memory at: [ 1418.137082][T20546] __get_compat_msghdr+0x514/0x750 [ 1418.142483][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1418.147550][T20546] ___sys_recvmsg+0x19d/0x890 [ 1418.152539][T20546] do_recvmmsg+0x63a/0x10a0 [ 1418.157208][T20546] __sys_recvmmsg+0x113/0x450 [ 1418.162045][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1418.168612][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1418.173887][T20546] do_fast_syscall_32+0x33/0x70 [ 1418.178897][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.183701][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.190268][T20546] [ 1418.192828][T20546] Uninit was stored to memory at: [ 1418.198088][T20546] __get_compat_msghdr+0x514/0x750 [ 1418.203557][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1418.208630][T20546] ___sys_recvmsg+0x19d/0x890 [ 1418.213641][T20546] do_recvmmsg+0x63a/0x10a0 [ 1418.218305][T20546] __sys_recvmmsg+0x113/0x450 [ 1418.223292][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1418.229717][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1418.235048][T20546] do_fast_syscall_32+0x33/0x70 [ 1418.240067][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.244876][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.251440][T20546] [ 1418.253999][T20546] Uninit was stored to memory at: [ 1418.259257][T20546] __get_compat_msghdr+0x514/0x750 [ 1418.264731][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1418.269797][T20546] ___sys_recvmsg+0x19d/0x890 [ 1418.274788][T20546] do_recvmmsg+0x63a/0x10a0 [ 1418.279447][T20546] __sys_recvmmsg+0x113/0x450 [ 1418.284421][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1418.290855][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1418.296192][T20546] do_fast_syscall_32+0x33/0x70 [ 1418.301206][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.306014][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.312666][T20546] [ 1418.315076][T20546] Uninit was stored to memory at: [ 1418.320334][T20546] __get_compat_msghdr+0x514/0x750 [ 1418.325797][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1418.330857][T20546] ___sys_recvmsg+0x19d/0x890 [ 1418.335783][T20546] do_recvmmsg+0x63a/0x10a0 [ 1418.340441][T20546] __sys_recvmmsg+0x113/0x450 [ 1418.345431][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1418.351857][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1418.357198][T20546] do_fast_syscall_32+0x33/0x70 [ 1418.362214][T20546] do_SYSENTER_32+0x1b/0x20 [ 1418.367024][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1418.373737][T20546] [ 1418.376148][T20546] Local variable msg_sys created at: [ 1418.381528][T20546] do_recvmmsg+0x5f/0x10a0 [ 1418.386247][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.189230][T20546] not chained 490000 origins [ 1419.194208][T20546] CPU: 0 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1419.204891][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1419.215085][T20546] Call Trace: [ 1419.218464][T20546] [ 1419.221494][T20546] dump_stack_lvl+0x1c8/0x256 [ 1419.226403][T20546] dump_stack+0x1a/0x1c [ 1419.230156][T20574] udevd[20574]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1419.230711][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1419.246427][T20546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1419.252716][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.258003][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1419.264448][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.269753][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1419.275756][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.281052][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1419.287070][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1419.292489][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.297787][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1419.303800][T20546] ? should_fail+0x3f/0x810 [ 1419.308486][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1419.313780][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.319079][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1419.325515][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.330812][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1419.336820][T20546] __msan_chain_origin+0xbd/0x140 [ 1419.342034][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.347395][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.352466][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1419.357394][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1419.362240][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.367092][T20546] ? __schedule+0x1609/0x21d0 [ 1419.371950][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.377254][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1419.383266][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.388561][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1419.394577][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.399295][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1419.405831][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1419.410764][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.417376][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.422222][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1419.427535][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.433996][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.439197][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1419.445196][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.450221][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.454887][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.461454][T20546] RIP: 0023:0xf7f10549 [ 1419.465650][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1419.485459][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1419.494055][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1419.502176][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1419.510284][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1419.518390][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.526497][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1419.534636][T20546] [ 1419.539986][T20546] Uninit was stored to memory at: [ 1419.545531][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.550862][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.556043][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.560882][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.565674][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.570511][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.577055][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.582244][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.587362][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.592025][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.598730][T20546] [ 1419.601138][T20546] Uninit was stored to memory at: [ 1419.606520][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.611845][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.617024][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.621858][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.626644][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.631487][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.638039][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.643352][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.648367][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.653143][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.659705][T20546] [ 1419.662115][T20546] Uninit was stored to memory at: [ 1419.667488][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.672932][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.677997][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.682968][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.687640][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.692593][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.699025][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.704335][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.709345][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.714131][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.720694][T20546] [ 1419.723221][T20546] Uninit was stored to memory at: [ 1419.728476][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.733921][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.738985][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.743937][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.748604][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.753568][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.760007][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.765317][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.770339][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.775115][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.781681][T20546] [ 1419.784214][T20546] Uninit was stored to memory at: [ 1419.789470][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.789787][T20576] udevd[20576]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1419.794853][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.794995][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.814814][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.819479][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.824430][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.830858][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.836163][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.841243][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.846017][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.852698][T20546] [ 1419.855107][T20546] Uninit was stored to memory at: [ 1419.860366][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.865806][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.870867][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.875823][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.880485][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.885448][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.891879][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.897191][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.902202][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.906967][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.913654][T20546] [ 1419.916063][T20546] Uninit was stored to memory at: [ 1419.921317][T20546] __get_compat_msghdr+0x514/0x750 [ 1419.926751][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1419.931824][T20546] ___sys_recvmsg+0x19d/0x890 [ 1419.936784][T20546] do_recvmmsg+0x63a/0x10a0 [ 1419.941447][T20546] __sys_recvmmsg+0x113/0x450 [ 1419.946402][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1419.952954][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1419.958140][T20546] do_fast_syscall_32+0x33/0x70 [ 1419.963332][T20546] do_SYSENTER_32+0x1b/0x20 [ 1419.968001][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1419.974755][T20546] [ 1419.977169][T20546] Local variable msg_sys created at: [ 1419.982720][T20546] do_recvmmsg+0x5f/0x10a0 [ 1419.987294][T20546] __sys_recvmmsg+0x113/0x450 [ 1420.726749][T20576] udevd[20576]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1420.934752][T20576] udevd[20576]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1421.018453][T20546] not chained 500000 origins [ 1421.024313][T20546] CPU: 1 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1421.034990][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1421.045185][T20546] Call Trace: [ 1421.048564][T20546] [ 1421.051594][T20546] dump_stack_lvl+0x1c8/0x256 [ 1421.056496][T20546] dump_stack+0x1a/0x1c [ 1421.060847][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1421.066755][T20546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1421.073034][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.078340][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1421.084781][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.090082][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1421.096096][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.101401][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1421.107404][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1421.112827][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.118122][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1421.124136][T20546] ? should_fail+0x3f/0x810 [ 1421.128824][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1421.134123][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.139420][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1421.145859][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.151179][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1421.157188][T20546] __msan_chain_origin+0xbd/0x140 [ 1421.162398][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.167761][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.172834][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1421.177759][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1421.182610][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.187465][T20546] ? __schedule+0x1609/0x21d0 [ 1421.192317][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.197617][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1421.203625][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.208924][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1421.214944][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.219633][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1421.226077][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1421.231008][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.237621][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.242473][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1421.247786][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.254239][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.259425][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1421.265422][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.270438][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.275099][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.281676][T20546] RIP: 0023:0xf7f10549 [ 1421.285875][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1421.305681][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1421.314273][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1421.322384][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1421.330488][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1421.338593][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1421.346701][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1421.354835][T20546] [ 1421.365749][T20546] Uninit was stored to memory at: [ 1421.371023][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.377574][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.382844][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.387683][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.392444][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.397277][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.403797][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.409000][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.414104][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.418768][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.425419][T20546] [ 1421.427825][T20546] Uninit was stored to memory at: [ 1421.433173][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.438493][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.443639][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.448475][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.453229][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.458077][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.464654][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.469846][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.475009][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.479682][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.486395][T20546] [ 1421.488803][T20546] Uninit was stored to memory at: [ 1421.494212][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.499536][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.504750][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.509590][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.514393][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.519230][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.525808][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.531004][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.536256][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.540937][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.547660][T20546] [ 1421.550070][T20546] Uninit was stored to memory at: [ 1421.555486][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.560806][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.566017][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.570863][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.575676][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.580514][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.587082][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.592371][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.597380][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.602041][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.608756][T20546] [ 1421.611166][T20546] Uninit was stored to memory at: [ 1421.616568][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.621889][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.627091][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.631932][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.636740][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.641575][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.648140][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.653416][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.658427][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.663241][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.669843][T20546] [ 1421.672259][T20546] Uninit was stored to memory at: [ 1421.677681][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.683162][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.688229][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.693210][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.697876][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.702863][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.709297][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.714695][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.719723][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.724549][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.731124][T20546] [ 1421.733684][T20546] Uninit was stored to memory at: [ 1421.738947][T20546] __get_compat_msghdr+0x514/0x750 [ 1421.744424][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1421.749487][T20546] ___sys_recvmsg+0x19d/0x890 [ 1421.754480][T20546] do_recvmmsg+0x63a/0x10a0 [ 1421.759150][T20546] __sys_recvmmsg+0x113/0x450 [ 1421.764149][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1421.770576][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1421.775905][T20546] do_fast_syscall_32+0x33/0x70 [ 1421.780919][T20546] do_SYSENTER_32+0x1b/0x20 [ 1421.785739][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1421.792414][T20546] [ 1421.794828][T20546] Local variable msg_sys created at: [ 1421.800217][T20546] do_recvmmsg+0x5f/0x10a0 [ 1421.804944][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.140445][T20546] not chained 510000 origins [ 1422.145384][T20546] CPU: 1 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1422.156039][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1422.166183][T20546] Call Trace: [ 1422.169532][T20546] [ 1422.172532][T20546] dump_stack_lvl+0x1c8/0x256 [ 1422.177436][T20546] dump_stack+0x1a/0x1c [ 1422.181792][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1422.187700][T20546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1422.193964][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.199231][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1422.205606][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.210871][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1422.216799][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.222067][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1422.227992][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1422.233335][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.238609][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1422.244567][T20546] ? should_fail+0x3f/0x810 [ 1422.249232][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1422.254459][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.259766][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1422.266206][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.271499][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1422.277503][T20546] __msan_chain_origin+0xbd/0x140 [ 1422.282715][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.288078][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.293145][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1422.298050][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1422.302837][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.307686][T20546] ? __schedule+0x1609/0x21d0 [ 1422.312537][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.317810][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1422.323742][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.329035][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1422.335049][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.339742][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1422.346188][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1422.351112][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.357694][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.362476][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1422.367757][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.374136][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.379325][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1422.385316][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.390310][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.394915][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.401452][T20546] RIP: 0023:0xf7f10549 [ 1422.405606][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1422.425415][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1422.434003][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1422.442095][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1422.450131][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1422.458169][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.466228][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1422.474364][T20546] [ 1422.484926][T20546] Uninit was stored to memory at: [ 1422.490199][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.505109][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.510184][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.516541][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.521214][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.526140][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.532663][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.537829][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.542925][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.547581][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.554296][T20546] [ 1422.556701][T20546] Uninit was stored to memory at: [ 1422.561877][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.567241][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.572370][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.577183][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.581759][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.586672][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.593195][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.598357][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.603452][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.608092][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.614722][T20546] [ 1422.617128][T20546] Uninit was stored to memory at: [ 1422.622494][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.627836][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.633038][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.637852][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.642576][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.647415][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.653970][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.659158][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.664315][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.668980][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.675608][T20546] [ 1422.677994][T20546] Uninit was stored to memory at: [ 1422.683375][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.688701][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.693902][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.698720][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.703467][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.708282][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.714788][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.719954][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.725057][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.729692][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.736326][T20546] [ 1422.738710][T20546] Uninit was stored to memory at: [ 1422.744086][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.749381][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.754514][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.759332][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.764079][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.768916][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.775485][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.780656][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.785756][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.790416][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.797084][T20546] [ 1422.799470][T20546] Uninit was stored to memory at: [ 1422.804842][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.810139][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.815252][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.820093][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.824898][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.829711][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.836220][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.841485][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.846607][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.851241][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.857818][T20546] [ 1422.860205][T20546] Uninit was stored to memory at: [ 1422.865585][T20546] __get_compat_msghdr+0x514/0x750 [ 1422.870887][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1422.876020][T20546] ___sys_recvmsg+0x19d/0x890 [ 1422.880861][T20546] do_recvmmsg+0x63a/0x10a0 [ 1422.885673][T20546] __sys_recvmmsg+0x113/0x450 [ 1422.890485][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1422.896998][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1422.902167][T20546] do_fast_syscall_32+0x33/0x70 [ 1422.907231][T20546] do_SYSENTER_32+0x1b/0x20 [ 1422.911866][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1422.918445][T20546] [ 1422.920845][T20546] Local variable msg_sys created at: [ 1422.926343][T20546] do_recvmmsg+0x5f/0x10a0 [ 1422.930894][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.157957][T20546] not chained 520000 origins [ 1423.162756][T20546] CPU: 0 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1423.173371][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1423.183531][T20546] Call Trace: [ 1423.186861][T20546] [ 1423.189832][T20546] dump_stack_lvl+0x1c8/0x256 [ 1423.194629][T20546] dump_stack+0x1a/0x1c [ 1423.198904][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1423.204810][T20546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1423.211047][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.216256][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1423.222624][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.227913][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1423.233916][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.239207][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1423.245208][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1423.250595][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.255797][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1423.261707][T20546] ? should_fail+0x3f/0x810 [ 1423.266301][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1423.271513][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.276740][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1423.283177][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.288444][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1423.294346][T20546] __msan_chain_origin+0xbd/0x140 [ 1423.299459][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.304742][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.309806][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1423.314708][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1423.319466][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.324259][T20546] ? __schedule+0x1609/0x21d0 [ 1423.329116][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.334385][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1423.340289][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.345485][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1423.351396][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.355992][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1423.362363][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1423.367202][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.373745][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.378580][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1423.383881][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.390324][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.395514][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1423.401478][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.406435][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.411104][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.417640][T20546] RIP: 0023:0xf7f10549 [ 1423.421766][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1423.441474][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1423.449970][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1423.458008][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1423.466040][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1423.474110][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.482194][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1423.490249][T20546] [ 1423.495756][T20546] Uninit was stored to memory at: [ 1423.501023][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.508374][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.513682][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.518518][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.523294][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.528136][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.534680][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.539867][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.544981][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.549648][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.556324][T20546] [ 1423.558728][T20546] Uninit was stored to memory at: [ 1423.564090][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.569408][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.574580][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.579417][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.584199][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.589035][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.595579][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.600769][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.605957][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.610643][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.617388][T20546] [ 1423.619797][T20546] Uninit was stored to memory at: [ 1423.625234][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.630532][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.635681][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.640494][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.645273][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.650083][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.656620][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.661808][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.667004][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.671665][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.678356][T20546] [ 1423.680741][T20546] Uninit was stored to memory at: [ 1423.686080][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.691381][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.696537][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.701376][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.706189][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.711023][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.717638][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.722959][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.727979][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.732804][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.739340][T20546] [ 1423.741715][T20546] Uninit was stored to memory at: [ 1423.747095][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.752526][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.757579][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.762593][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.767243][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.772002][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.778545][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.783855][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.788871][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.793713][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.800255][T20546] [ 1423.802803][T20546] Uninit was stored to memory at: [ 1423.807986][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.813404][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.818458][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.823401][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.828072][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.833121][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.839549][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.844945][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.850028][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.854815][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.861357][T20546] [ 1423.863914][T20546] Uninit was stored to memory at: [ 1423.869099][T20546] __get_compat_msghdr+0x514/0x750 [ 1423.874508][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1423.879549][T20546] ___sys_recvmsg+0x19d/0x890 [ 1423.884510][T20546] do_recvmmsg+0x63a/0x10a0 [ 1423.889177][T20546] __sys_recvmmsg+0x113/0x450 [ 1423.894195][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1423.900633][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1423.906006][T20546] do_fast_syscall_32+0x33/0x70 [ 1423.910996][T20546] do_SYSENTER_32+0x1b/0x20 [ 1423.915768][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1423.922445][T20546] [ 1423.924857][T20546] Local variable msg_sys created at: [ 1423.930234][T20546] do_recvmmsg+0x5f/0x10a0 [ 1423.934982][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.146864][T20546] not chained 530000 origins [ 1424.151536][T20546] CPU: 0 PID: 20546 Comm: syz-executor.5 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1424.162126][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1424.172255][T20546] Call Trace: [ 1424.175599][T20546] [ 1424.178590][T20546] dump_stack_lvl+0x1c8/0x256 [ 1424.183395][T20546] dump_stack+0x1a/0x1c [ 1424.187653][T20546] kmsan_internal_chain_origin+0x78/0x120 [ 1424.193468][T20546] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 1424.199631][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.204861][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1424.211308][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.216614][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1424.222619][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.227914][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1424.233917][T20546] ? __get_compat_msghdr+0x5b/0x750 [ 1424.239303][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.244506][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1424.250417][T20546] ? should_fail+0x3f/0x810 [ 1424.255035][T20546] ? __stack_depot_save+0x21/0x4b0 [ 1424.260325][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.265632][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1424.272071][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.277338][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1424.283258][T20546] __msan_chain_origin+0xbd/0x140 [ 1424.288386][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.293633][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.298588][T20546] ? ___sys_recvmsg+0xa9/0x890 [ 1424.303455][T20546] ? do_recvmmsg+0x63a/0x10a0 [ 1424.308304][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.313125][T20546] ? __schedule+0x1609/0x21d0 [ 1424.317889][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.323090][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1424.329017][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.334312][T20546] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1424.340289][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.344887][T20546] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 1424.351232][T20546] ? __sys_recvmmsg+0x52/0x450 [ 1424.356093][T20546] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.362699][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.367534][T20546] ? kmsan_get_metadata+0x33/0x220 [ 1424.372816][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.379162][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.384267][T20546] ? exit_to_user_mode_prepare+0x119/0x220 [ 1424.390168][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.395097][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.399675][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.406149][T20546] RIP: 0023:0xf7f10549 [ 1424.410343][T20546] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1424.430151][T20546] RSP: 002b:00000000f7eea5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1424.438732][T20546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 1424.446774][T20546] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1424.454844][T20546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1424.462923][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.470958][T20546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1424.479016][T20546] [ 1424.484281][T20546] Uninit was stored to memory at: [ 1424.489552][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.495191][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.500252][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.505212][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.509867][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.514823][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.521246][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.526554][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.531587][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.536367][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.543044][T20546] [ 1424.545462][T20546] Uninit was stored to memory at: [ 1424.550726][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.556184][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.561249][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.566288][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.570934][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.575917][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.582457][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.587652][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.592834][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.597495][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.604223][T20546] [ 1424.606626][T20546] Uninit was stored to memory at: [ 1424.611878][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.617322][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.622525][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.627363][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.632016][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.637034][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.643586][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.648778][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.653951][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.658611][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.665356][T20546] [ 1424.667761][T20546] Uninit was stored to memory at: [ 1424.673245][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.678592][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.683849][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.688683][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.693468][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.698340][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.704886][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.710055][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.715200][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.719837][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.726496][T20546] [ 1424.728909][T20546] Uninit was stored to memory at: [ 1424.734342][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.739659][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.744836][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.749671][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.754450][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.759279][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.765816][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.770986][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.776125][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.780787][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.787469][T20546] [ 1424.789853][T20546] Uninit was stored to memory at: [ 1424.795250][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.800556][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.805735][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.810563][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.815295][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.820112][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.826590][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.831755][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.836852][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.841506][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.848191][T20546] [ 1424.850599][T20546] Uninit was stored to memory at: [ 1424.856032][T20546] __get_compat_msghdr+0x514/0x750 [ 1424.861367][T20546] get_compat_msghdr+0x8c/0x1c0 [ 1424.866631][T20546] ___sys_recvmsg+0x19d/0x890 [ 1424.871451][T20546] do_recvmmsg+0x63a/0x10a0 [ 1424.876200][T20546] __sys_recvmmsg+0x113/0x450 [ 1424.881026][T20546] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 1424.887577][T20546] __do_fast_syscall_32+0x87/0xe0 [ 1424.892889][T20546] do_fast_syscall_32+0x33/0x70 [ 1424.897899][T20546] do_SYSENTER_32+0x1b/0x20 [ 1424.902747][T20546] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1424.909313][T20546] [ 1424.911724][T20546] Local variable msg_sys created at: [ 1424.917237][T20546] do_recvmmsg+0x5f/0x10a0 [ 1424.921791][T20546] __sys_recvmmsg+0x113/0x450 05:15:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='numa_maps\x00') ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, 0x0) 05:15:14 executing program 3: syz_mount_image$hpfs(0x0, 0x0, 0x800, 0x0, &(0x7f0000000440), 0x0, 0x0) syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) 05:15:14 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) 05:15:14 executing program 2: syz_mount_image$hpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x221000, &(0x7f0000000480)) 05:15:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5425, 0x0) 05:15:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) [ 1425.385185][T20586] loop3: detected capacity change from 0 to 4 05:15:14 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f00000012c0), 0x430082, 0x0) 05:15:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) [ 1425.544421][T20586] Dev loop3: unable to read RDB block 4 [ 1425.550286][T20586] loop3: unable to read partition table 05:15:14 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0x4}) [ 1425.717630][T20586] loop3: partition table beyond EOD, truncated 05:15:15 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 05:15:15 executing program 5: syz_io_uring_setup(0x6a3e, &(0x7f0000000000)={0x0, 0x7ee9, 0xf}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 05:15:15 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000640)) 05:15:15 executing program 1: socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, 0x0) 05:15:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 05:15:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x14, 0x19, 0xa, 0x5}, 0x14}}, 0x0) 05:15:15 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:15 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) exit(0x0) 05:15:16 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)="ecc489980a42dddc99a6e01f7daeb340dfc1993c46d7cde347b20cd34253a181fd5eb4a10d931130b46ed3b7a7481b5d87e1822bc2f67f9ecd425fcd84b770eada11ec988ca3349f746403322192c157dab4bbe8c8bb", 0x56}, {&(0x7f00000000c0)="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", 0xaf7}], 0x2, &(0x7f0000002700)=ANY=[@ANYBLOB="28000000000000002900000037000000290100000000000004017a0401050401030000000000000014"], 0x40}}], 0x1, 0x0) 05:15:16 executing program 1: socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, 0x0) 05:15:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x20, 0xa, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xf}}, 0x0) 05:15:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x14, 0xc, 0xa, 0x5}, 0x14}}, 0x0) 05:15:16 executing program 1: socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:16 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x401c5820, 0x0) 05:15:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, 0x0) 05:15:16 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80108906, 0x0) 05:15:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1200}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 1427.825629][ T3565] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1428.082739][ T3565] usb 3-1: Using ep0 maxpacket: 32 05:15:17 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4008b100, 0x0) [ 1428.230323][ T3565] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1428.239417][ T3565] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1428.250027][ T3565] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1428.473598][ T3565] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1428.483141][ T3565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.491411][ T3565] usb 3-1: Product: syz [ 1428.495968][ T3565] usb 3-1: Manufacturer: syz [ 1428.500784][ T3565] usb 3-1: SerialNumber: syz 05:15:19 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5450, 0x0) 05:15:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:15:19 executing program 5: r0 = socket(0x26, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) 05:15:19 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="28000000000000002900000037000000290100000000000004017a0401050401030000000000000014"], 0x40}}], 0x1, 0x0) 05:15:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) 05:15:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) [ 1430.553465][ T3565] usb 3-1: 0:2 : does not exist [ 1430.641431][ T3565] usb 3-1: USB disconnect, device number 21 05:15:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000800) 05:15:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:15:19 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8941, 0x0) 05:15:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) 05:15:19 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8941, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:20 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1431.189296][T20641] udevd[20641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:15:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}}, 0x0) 05:15:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) 05:15:20 executing program 0: socket(0x18, 0x0, 0x2) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xc, r1}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="ff05000000000000c20400000000c20400000000010500000000000401070000000000000000000000000101050200070000000000000000"], 0x38) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x1, 0xff, 0x0, 0x33c, 0x3}, &(0x7f00000000c0)=0x20) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) 05:15:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:15:20 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', 0x0}) 05:15:20 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, 0xe8) 05:15:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x44}}, 0x0) 05:15:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:15:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:21 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, 0x0) 05:15:21 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) 05:15:21 executing program 5: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) 05:15:21 executing program 2: r0 = socket$inet6(0x2, 0x3, 0x2) bind$inet6(r0, 0x0, 0x0) 05:15:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:15:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x30}}], 0x1, 0x0) 05:15:22 executing program 0: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) 05:15:22 executing program 2: r0 = epoll_create(0x2) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 05:15:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 05:15:22 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x9, &(0x7f00000008c0)=[@flowinfo={{0x14}}], 0x18}}], 0x1, 0x0) 05:15:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000100)={0xf010000}) 05:15:22 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000290000000b"], 0x18}}, {{&(0x7f00000001c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x2, 0x0) 05:15:22 executing program 5: r0 = socket(0x26, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 05:15:22 executing program 2: r0 = epoll_create(0x2) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2) 05:15:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 05:15:23 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 05:15:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}}, 0x0) 05:15:23 executing program 5: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 05:15:23 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000040)="ecc489980a42dddc99a6e01f7daeb340dfc1993c46d7cde347b20cd34253a181fd5eb4a10d931130b46ed3b7a7481b5d87e1822bc2f67f9ecd425fcd84b770eada11ec988ca3349f746403322192c157dab4bbe8c8bb", 0x56}, {&(0x7f00000000c0)="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", 0x583}], 0x2, &(0x7f0000002700)=ANY=[@ANYBLOB="28000000000000002900000037000000290100000000000004017a0401050401030000000000000014000000000000002900000034"], 0x40}}], 0x1, 0x0) 05:15:23 executing program 2: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a2, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 05:15:23 executing program 4: r0 = socket$inet6(0x2, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, 0x0, 0x0) 05:15:23 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40047459, 0x0) 05:15:23 executing program 5: r0 = socket(0x26, 0x5, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 05:15:24 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40049409, 0x0) 05:15:24 executing program 2: r0 = socket$inet6(0x2, 0xa, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 05:15:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 05:15:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 05:15:24 executing program 5: r0 = socket$inet6(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @private}, &(0x7f0000000080)=0xc) 05:15:24 executing program 2: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:24 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 05:15:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x6, 0x4) 05:15:25 executing program 4: syz_io_uring_setup(0x729c, &(0x7f00000000c0)={0x0, 0xbe14, 0xe, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000280)) 05:15:25 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:25 executing program 2: r0 = socket$inet6(0x2, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:15:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0xd9, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000000000000}]) 05:15:25 executing program 0: r0 = socket(0x18, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 05:15:25 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1a, 0x0, 0x7) 05:15:25 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x80086601, 0x0) 05:15:25 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 05:15:26 executing program 0: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 05:15:26 executing program 2: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8911, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000780)={@local, 0x0, 0x4}, 0x20) 05:15:26 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5451, 0x0) 05:15:26 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:26 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000280)={{}, 'port0\x00'}) 05:15:27 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xb101, 0x0) 05:15:27 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c, 0x0}, 0x0) 05:15:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000050601040000000000000000020000000500010007000000050001000700000005000100070000000900030073797a31000000000900030073797a3100000000090002"], 0x7c}}, 0x0) 05:15:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 05:15:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:27 executing program 5: syz_io_uring_setup(0x5ff9, &(0x7f0000000180)={0x0, 0x0, 0x121}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 05:15:27 executing program 4: r0 = socket$inet6(0x2, 0xa, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 1438.709664][T20803] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 05:15:27 executing program 3: r0 = socket$inet6(0x2, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 05:15:28 executing program 0: syz_io_uring_setup(0x4743f, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x0, 0xfffffff8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 05:15:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:28 executing program 5: r0 = socket$inet6(0x2, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) 05:15:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x1}) 05:15:29 executing program 2: r0 = socket(0x18, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:15:29 executing program 4: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:29 executing program 3: r0 = socket(0x18, 0x0, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 05:15:29 executing program 0: r0 = socket$inet6(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 05:15:29 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:29 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x300, &(0x7f00000008c0)=[@flowinfo={{0x14}}], 0x18}}], 0x1, 0x0) 05:15:29 executing program 2: r0 = socket(0x18, 0x0, 0x1) accept4$inet6(r0, 0x0, 0x0, 0x0) 05:15:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:29 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 05:15:29 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) [ 1440.881986][T20835] batadv_slave_0: mtu less than device minimum 05:15:30 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:30 executing program 2: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:30 executing program 4: r0 = socket(0x18, 0x800, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 05:15:30 executing program 0: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8932, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000321}) 05:15:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0x14}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 05:15:30 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000600)={0x0, 0x0, 'client0\x00', 0x0, "9882137255c30110", "382691f6a88cd063750d2f9ad2a2d3bebe3c831aad3d369549fae784d0cdbee8"}) 05:15:31 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0xe1502, 0x0) 05:15:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private}}}]}]}, 0x2c}}, 0x0) [ 1442.083092][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0x3, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 05:15:31 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) 05:15:31 executing program 2: syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 05:15:31 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000140)) 05:15:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x2, 0x2, 0x101}, 0x14}}, 0x0) 05:15:31 executing program 0: r0 = epoll_create(0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000010}) 05:15:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) 05:15:32 executing program 2: syz_io_uring_setup(0x5ff9, &(0x7f0000000180)={0x0, 0x0, 0xc00}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 05:15:32 executing program 3: syz_io_uring_setup(0x5ff9, &(0x7f0000000180)={0x0, 0x0, 0x600}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 05:15:32 executing program 4: syz_io_uring_setup(0x743f, &(0x7f0000000000)={0x0, 0xf85d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5ff9, &(0x7f0000000180), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 05:15:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x3c87}, 0x0) 05:15:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:32 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 05:15:33 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, 0x0) 05:15:33 executing program 3: r0 = socket$inet6(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 05:15:33 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x30}}, 0x0) 05:15:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 05:15:33 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x32d2c0, 0x0) 05:15:33 executing program 2: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @remote, @private2}) 05:15:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4014) 05:15:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) 05:15:33 executing program 5: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:33 executing program 4: socket(0x15, 0x5, 0x7f) 05:15:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 05:15:34 executing program 2: r0 = syz_io_uring_setup(0x743f, &(0x7f0000000000)={0x0, 0xf85d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x41c4150, r0, 0x10000000) 05:15:34 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 05:15:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000a0a0500000000000000050000080008090001007379000086"], 0x20}}, 0x0) 05:15:34 executing program 4: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40086602, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:15:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000440)="ec24ba3849abeda039a54e43416f5f1ebff3aad2cb55c524c8e2cb9b10d98ab8810bc95d1ca504b1a8ffea1f77a526a8607df3370145eae45006b6a03cf2d321e93fc02f10a85d", 0x47}], 0x2}, 0x20000000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) 05:15:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 05:15:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)='7', 0x1}, 0x0) 05:15:35 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:35 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x800, &(0x7f0000001340)=""/75) 05:15:35 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x6, 0xbf, &(0x7f00000000c0)=""/191, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:15:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 05:15:35 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x830, 0x9}) socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1698) 05:15:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x44800) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000200)) 05:15:35 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1446.836479][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1446.843228][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 05:15:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x200000000000011, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x5d) 05:15:36 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x800, &(0x7f0000001340)=""/75) 05:15:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0xff, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "81f25679"}, @global=@item_012={0x1, 0x1, 0x5, "87"}]}}, 0x0}, 0x0) 05:15:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCSETSF2(r0, 0x40085500, 0x0) 05:15:36 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:36 executing program 3: syz_emit_ethernet(0x9a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5b46c1", 0x64, 0x3c, 0x0, @private1, @mcast2, {[@dstopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @jumbo]}]}}}}}, 0x0) [ 1447.793370][ T3583] usb 2-1: new high-speed USB device number 7 using dummy_hcd 05:15:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000a40)) [ 1447.955938][T20967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:37 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000880)="a90500000000fd00000100338bb335529f56ed5c", 0x14}], 0x1}}], 0x1, 0x20000018) [ 1448.153564][ T3583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.164881][ T3583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.175200][ T3583] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 1448.190861][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:15:37 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1448.246507][T20969] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) [ 1448.356119][ T3583] usb 2-1: config 0 descriptor?? [ 1448.410300][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x3, 0x0, 0x0) 05:15:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:37 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000880)="a90500000000fd00000100338bb335529f56ed5c", 0x14}], 0x1}}], 0x1, 0x20000018) [ 1448.835882][ T3583] wacom 0003:056A:032C.0004: unbalanced collection at end of report description [ 1448.900086][ T3583] wacom 0003:056A:032C.0004: parse failed [ 1448.918498][ T3583] wacom: probe of 0003:056A:032C.0004 failed with error -22 [ 1449.035622][T15629] usb 2-1: USB disconnect, device number 7 [ 1449.203103][T20989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1449.479553][T20991] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1449.507381][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:38 executing program 1: syz_mount_image$msdos(&(0x7f0000001140), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)) 05:15:38 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:38 executing program 3: modify_ldt$write(0x1, &(0x7f0000000080)={0x1be5}, 0x10) 05:15:38 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0) 05:15:38 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000880)="a90500000000fd00000100338bb335529f56ed5c", 0x14}], 0x1}}], 0x1, 0x20000018) 05:15:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:38 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000080)=""/134, 0x32, 0x86, 0x1}, 0x20) 05:15:39 executing program 0: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)=',.#\x9d*\x00') 05:15:39 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000880)="a90500000000fd00000100338bb335529f56ed5c", 0x14}], 0x1}}], 0x1, 0x20000018) 05:15:39 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1450.213744][T21004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:39 executing program 1: socket$inet(0x2, 0xa, 0xfffff001) 05:15:39 executing program 3: openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair(0x25, 0x0, 0x0, &(0x7f0000000b00)) [ 1450.466723][T21007] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:39 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20}, 0x20) [ 1450.535263][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:39 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:39 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f00000002c0)=""/198, 0x36, 0xc6, 0x1}, 0x20) 05:15:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:40 executing program 1: bpf$BPF_BTF_LOAD(0x14, 0x0, 0x0) 05:15:40 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 05:15:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x6, 0x10000, 0x48}, 0x48) 05:15:40 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1698) 05:15:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1451.445812][T21029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', 0x0}) 05:15:40 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 05:15:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x20) 05:15:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="fb", 0x1}], 0x2}, 0x0) 05:15:41 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1698) 05:15:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:41 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140), 0x8) 05:15:41 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "aa3fed6fe008b23540eb20715b6e82b2dcfda14246fb15c214579787b4ff340d4dba51af309d5598415e1d463da225b0e86e53c454751f8ac2ee81cb8eb15830"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 05:15:41 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1698) 05:15:41 executing program 0: keyctl$search(0x14, 0x0, &(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0) 05:15:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) 05:15:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:42 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140), 0xfffffffffffffff1) 05:15:42 executing program 2: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 05:15:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000001cc0)) 05:15:42 executing program 3: bpf$BPF_BTF_LOAD(0x7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 05:15:42 executing program 2: socketpair(0x1, 0x80001, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) [ 1453.639358][T21071] __nla_validate_parse: 5 callbacks suppressed [ 1453.639435][T21071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:42 executing program 1: r0 = openat$vfio(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) [ 1453.785040][T21071] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1453.801308][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:43 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_read_part_table(0x0, 0x2, &(0x7f0000002640)=[{&(0x7f0000001000)="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", 0xf75}, {0x0}]) 05:15:43 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) 05:15:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x8, 0x4, 0x3ff}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)}, 0x10) 05:15:43 executing program 1: bpf$BPF_BTF_LOAD(0x13, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 1454.404425][T21085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1454.484466][T21087] loop0: detected capacity change from 0 to 7 [ 1454.648397][T21087] Dev loop0: unable to read RDB block 7 [ 1454.654574][T21087] loop0: unable to read partition table [ 1454.771532][T21087] loop0: partition table beyond EOD, truncated [ 1454.778182][T21087] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1454.795030][T21088] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:43 executing program 3: r0 = openat$nvram(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) 05:15:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x6, 0x2f6c, 0x422}, 0x48) [ 1454.893158][ T2849] Dev loop0: unable to read RDB block 7 [ 1454.899087][ T2849] loop0: unable to read partition table [ 1454.917689][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) [ 1454.946205][ T2849] loop0: partition table beyond EOD, truncated 05:15:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:44 executing program 0: socketpair(0x1, 0x80001, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r0, 0x0, 0x0, 0x0) 05:15:44 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:44 executing program 3: bpf$BPF_BTF_LOAD(0x10, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/198, 0x0, 0xc6}, 0x20) 05:15:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4cc, 0x0, 0x360, 0xffffffff, 0x360, 0x22c, 0x44c, 0x44c, 0xffffffff, 0x44c, 0x44c, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'veth0_to_bridge\x00', 'pim6reg0\x00'}, 0x0, 0xa4, 0xec}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [], [], 'veth1_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@dccp={{0x30}}, @common=@icmp6={{0x24}, {0x0, "d651"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@local, @gre_key, @gre_key}}}, {{@ipv6={@local, @remote, [], [], 'netpci0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@mcast1, @port, @gre_key}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'netpci0\x00', 'sit0\x00'}, 0x0, 0xa4, 0xec}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) 05:15:44 executing program 1: bpf$BPF_BTF_LOAD(0x14, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/198, 0x0, 0xc6}, 0x20) [ 1455.698748][T21107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:44 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:45 executing program 0: userfaultfd(0x3f9f5214cf12d2a9) 05:15:45 executing program 3: syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x0) [ 1456.056818][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x0, "f3e9a00fb1c737b8c7ced08866f586ab63e2891cdc46a5af1ad34cbac5912fb2b3969973d3c4486aa965748bb7d835e24f6ee6ebfb15e82031f3965c52716e19"}, 0x48, r0) 05:15:45 executing program 2: socketpair(0x1, 0x0, 0x9, &(0x7f00000045c0)) [ 1456.219096][T21111] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1456.306844][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:45 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:45 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "db500160dbed5285eced5eaad266176a7aab59ac60f63aabedde464a9b4c58331aa31fcd35cf9ec78b7271c9b1b69e2bf047900da27094d3e3edf47ac55e1329"}, 0x48, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 05:15:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) 05:15:45 executing program 2: keyctl$get_persistent(0x16, 0xee01, 0x0) 05:15:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x20, 0x0, 0x3, 0x101, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 05:15:46 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(0x0, 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:46 executing program 0: r0 = openat$urandom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x91c) 05:15:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0xffff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)="04ff7f090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="33f97b645d4b5bf7ec"], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 05:15:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xb}]}}, &(0x7f00000002c0)=""/198, 0x26, 0xc6, 0x1}, 0x20) 05:15:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000140)="f6", 0x1}], 0x3}, 0x0) 05:15:46 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(0x0, 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1457.866892][T21152] loop3: detected capacity change from 0 to 127 05:15:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=@fragment, 0x8) 05:15:47 executing program 0: openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="834a0039eaf7fbcfcabc5f9286dd", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) [ 1457.993014][T21152] FAT-fs (loop3): Unrecognized mount option "./file1" or missing value 05:15:47 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/class/vc', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0xc0c00) 05:15:47 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(0x0, 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x68}}, &(0x7f00000002c0)=""/198, 0x1a, 0xc6, 0x1}, 0x20) 05:15:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:47 executing program 1: keyctl$search(0xc, 0x0, &(0x7f0000000140)='id_legacy\x00', 0x0, 0x0) 05:15:47 executing program 0: r0 = openat$vcs(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5460, 0x0) 05:15:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x4, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/198, 0x2e, 0xc6, 0x1}, 0x20) [ 1458.860227][T21171] __nla_validate_parse: 6 callbacks suppressed [ 1458.860303][T21171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:48 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/198, 0x2f, 0xc6, 0x1}, 0x20) 05:15:48 executing program 1: openat$sysfs(0xffffff9c, 0x0, 0x4808c1, 0x0) 05:15:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) [ 1459.177416][T21179] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:48 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 05:15:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:48 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x0, 0x8, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) 05:15:48 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x0, &(0x7f00000010c0), 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) 05:15:48 executing program 0: syz_mount_image$udf(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0) 05:15:49 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getresgid(&(0x7f0000000e00), 0x0, 0x0) [ 1460.044558][T21195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:49 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:49 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x844083, 0x0) [ 1460.258433][T21199] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:49 executing program 2: syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) 05:15:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:49 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xa542, 0x0) 05:15:49 executing program 3: pselect6(0x40, &(0x7f00000019c0), 0x0, &(0x7f0000001a40), &(0x7f0000001ac0), &(0x7f0000001b40)={&(0x7f0000001b00)={[0x9]}, 0x8}) 05:15:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c03, 0x0) 05:15:50 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1461.233434][T21218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1461.481810][T21223] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:50 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:50 executing program 0: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)) syz_clone(0x10200480, &(0x7f00000010c0), 0x0, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)) 05:15:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x2}, 0x20) 05:15:50 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:51 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:51 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getresgid(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)) 05:15:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2, &(0x7f0000000600)=[{0x10}], 0x10}}], 0x1, 0x0) [ 1462.490281][T21245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0) 05:15:51 executing program 0: syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={[{@partition={'partition', 0x22}}]}) 05:15:51 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004006) [ 1462.970288][T21246] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1463.026980][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:52 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40305829, 0x0) 05:15:52 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5403, 0x7d6e13fe7000) 05:15:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:52 executing program 2: syz_clone(0x88860800, 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) 05:15:52 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:52 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:52 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x40049409, 0x1ffff000) 05:15:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x540a, 0x2) [ 1464.053576][T21270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:53 executing program 0: getresgid(&(0x7f00000063c0), &(0x7f0000006400), &(0x7f0000006440)) [ 1464.317935][T21274] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) 05:15:53 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:53 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev, 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="fd", 0x1}], 0x1}}], 0x1, 0x20048840) 05:15:53 executing program 3: syz_clone(0x40200000, &(0x7f0000000440), 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)="0946b66b2b53b40bafe7") getresgid(0x0, &(0x7f0000000580), &(0x7f00000005c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0}) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0}) getpid() 05:15:53 executing program 0: mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) 05:15:54 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5405, 0x7fffffffefff) [ 1465.166541][T21289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:54 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5453, 0x1e00) 05:15:54 executing program 0: syz_mount_image$udf(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='novrs,partition=0']) [ 1465.764813][T21294] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1465.883865][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:55 executing program 1: memfd_create(&(0x7f0000000000)='/sys/kernel/debug/sync/sw_sync\x00', 0x0) 05:15:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:55 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) 05:15:55 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000006b00)='ns/pid_for_children\x00') [ 1466.294132][T21314] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1466.302020][T21314] UDF-fs: Scanning with blocksize 512 failed [ 1466.421625][T21314] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1466.429764][T21314] UDF-fs: Scanning with blocksize 1024 failed [ 1466.487386][T21314] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1466.496025][T21314] UDF-fs: Scanning with blocksize 2048 failed [ 1466.597528][T21314] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1466.605730][T21314] UDF-fs: Scanning with blocksize 4096 failed [ 1466.611995][T21314] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1466.686733][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:55 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x540b, 0x1ffff000) 05:15:55 executing program 2: syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='novrs,partition=00000000000000000006,iocharset=k']) 05:15:56 executing program 3: syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}]}) 05:15:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4, 0x55d}]}]}}, 0x0, 0x32}, 0x20) 05:15:56 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1467.084972][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:56 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='novrs,partition=00000000000000000006,iocharset=']) [ 1467.680809][T21331] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1467.689066][T21331] UDF-fs: Scanning with blocksize 512 failed 05:15:56 executing program 0: syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=0x0, @ANYBLOB="2c055fcab7bdc12267fc48dfee9c9303fb342b57b2d7e971d32154b6dc4416d646ab3eb3e6f18f3689d3f933b6c53039682bf37508c19b99211a834aacc61f5a270bbe166f629ef77b2b17957424276d09b7832c"]) 05:15:56 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1467.859978][T21331] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1467.868939][T21331] UDF-fs: Scanning with blocksize 1024 failed [ 1467.990043][T21331] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1467.994847][T21329] UDF-fs: iocharset k not found [ 1467.997950][T21331] UDF-fs: Scanning with blocksize 2048 failed [ 1468.012232][T21339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1468.116923][T21331] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 1468.124758][T21331] UDF-fs: Scanning with blocksize 4096 failed 05:15:57 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "8475b156", {0x1, 0x4, 0x0, 0x1, 0x7f}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x428, 0x3f3, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, [0x0, 0x5, 0xc12, 0x0, 0x0, 0x0, 0xe2, 0x5a3c, 0x7fff, 0xffffffff, 0x787, 0xfffff4d9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x3, 0x9, 0x0, 0x401, 0x0, 0x5, 0x2b, 0x4d, 0x5, 0x3f, 0x0, 0x0, 0xd, 0xffffffff, 0x8, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x7, 0x6, 0x0, 0x1, 0x3ff, 0x0, 0x0, 0xffffffff, 0x1ff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x401, 0x0, 0xffffb528, 0x9], [0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x7ff, 0x8, 0x0, 0x10000, 0x1ff, 0xffffff01, 0x0, 0x3, 0x400, 0x0, 0x7, 0x2, 0x296, 0x0, 0x8, 0x2, 0x0, 0x80000001, 0x9340, 0x4, 0x8, 0x0, 0x9, 0x0, 0x0, 0x7, 0x7a4b, 0xdeb3, 0x0, 0x0, 0x3000, 0x0, 0x5, 0x0, 0xff, 0x3, 0x0, 0x0, 0x800, 0x40, 0x81, 0x78a, 0x3f, 0x0, 0xae, 0x0, 0x10001, 0x0, 0x0, 0x6, 0x0, 0xd7, 0x0, 0x7fff, 0x8, 0xffff, 0x0, 0xb469], [0x2, 0x64, 0x7c3e, 0x9, 0x0, 0xfffffff9, 0xfffffffe, 0x18000, 0x0, 0x0, 0x2, 0x5d3e71fa, 0x800, 0xfffffff8, 0x6, 0x400, 0x3e, 0x8000, 0x40, 0x8, 0x27080000, 0x6, 0x81, 0x7, 0xfffffffa, 0x6, 0x0, 0x2, 0x9, 0x3, 0x0, 0xffffff45, 0x0, 0x7fffffff, 0xff, 0x0, 0x9, 0x3, 0x81, 0x1a1e1382, 0x3, 0x7bce, 0xfff, 0x1f, 0x9, 0xfff, 0x0, 0x7fffffff, 0x0, 0x2, 0x9c25, 0x4, 0x159, 0x0, 0x0, 0x0, 0xd4, 0x6, 0x0, 0x3, 0x6, 0xff, 0xfffffffd, 0xda35], [0x0, 0x20, 0x8, 0x1e4a, 0xd4, 0xfb8, 0x7d, 0x0, 0x0, 0x3, 0x2f5, 0x7c, 0x4, 0x7f, 0x0, 0x3, 0x1ff, 0x2, 0x9, 0xfb77, 0xf02, 0x8, 0xfffe0000, 0x0, 0x0, 0x3ff, 0x10001, 0x3, 0xdae, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x8, 0x0, 0x1, 0x400, 0x9ac7, 0x9, 0xffffe851, 0x0, 0x6, 0x0, 0x7f, 0xfffffe19, 0x6, 0xd2d, 0x8, 0x7fffffff, 0x1000, 0x0, 0x0, 0x80000001, 0x10001, 0x9, 0x0, 0x1, 0x5, 0x7, 0xfff, 0x0, 0x3], 0x8, ['\\\\}:-[\'\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4800}, 0x20044090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x100, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/custom0\x00', 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x18000, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x81) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000001000)=@conn_svc_rsp={0x0, 0x0, 0xa, "ed76247a", {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x81) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), 0xffffffffffffffff) [ 1468.198983][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:57 executing program 2: syz_clone(0x42003200, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1468.377453][T21341] UDF-fs: bad mount option "_Ê·½Á"güHßû4+W²×éqÓ!T¶ÜDÖF«>³æñ6‰Óù3¶Å09h+óuÁ›™!ƒJ¬ÆZ' ¾obž÷{+•t$'m ·ƒ" or missing value 05:15:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@seclabel}]}) 05:15:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:57 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}}}}]}}]}}, 0x0) 05:15:57 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1469.055840][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 05:15:58 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1469.476261][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:58 executing program 1: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1469.543265][ T3565] usb 1-1: new full-speed USB device number 15 using dummy_hcd 05:15:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:15:58 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) [ 1469.922944][ T3565] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 05:15:59 executing program 2: syz_mount_image$udf(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c055fcab7bdc12267fc48dfee9c9303fb342b57b2d7e971d32154b6dc4416d646ab3eb3e6f18f3689d3f933b6c53039682bf37508c19b99211a834aacc61f5a270bbe166f629ef77b2b17957424276d09b7832c"]) [ 1470.105571][ T3565] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1470.114992][ T3565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.123363][ T3565] usb 1-1: Product: syz [ 1470.127739][ T3565] usb 1-1: Manufacturer: syz [ 1470.132625][ T3565] usb 1-1: SerialNumber: syz 05:15:59 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}}], 0x18) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1698) [ 1470.315542][ T3565] cdc_ether: probe of 1-1:1.0 failed with error -22 05:15:59 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4e000) 05:15:59 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5403, 0x20000000) [ 1470.535466][T21369] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1470.571776][ T3583] usb 1-1: USB disconnect, device number 15 [ 1470.707296][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:15:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [{@context={'context', 0x3d, 'root'}}]}) 05:16:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0xb}]}}, 0x0, 0x26}, 0x20) 05:16:00 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1698) 05:16:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:00 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@const={0xb, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x3, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x4, 0x55d}, {}, {0x0, 0x0, 0x8}]}, @restrict, @fwd, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @ptr={0x10}]}}, 0x0, 0x86}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0}) getresgid(&(0x7f0000000e00), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_clone(0xaa25711bede07fed, &(0x7f0000000ec0)="bd0dcb2b25902ff14e85538f29281a645c6c6a5fd9e1b35217838f1db2f18ca390f9e769f4ba670ef9bd7f22acc4c9b03aabf51e125cb439c3197cbccb242a", 0x3f, 0x0, 0x0, 0x0) syz_clone(0x90014200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)) syz_clone(0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001100), &(0x7f0000001140), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000c0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x42c, 0x3f3, 0x0, 0x70bd25, 0x25dfdbfb, {0x5, 0x2, 0x0, [0x0, 0x0, 0x2, 0x6, 0x101, 0xade6, 0x0, 0x5114, 0x2, 0x7, 0x7aa2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xffff510e, 0x0, 0x0, 0x8, 0x40, 0x8, 0xffffd457, 0xffff, 0x6, 0x0, 0x0, 0x83e, 0x3, 0xa76, 0x0, 0x0, 0x0, 0x8, 0x81, 0x1ff, 0x10, 0x4930, 0x0, 0x40, 0x3, 0x0, 0x3ad9ef2d, 0x0, 0x1, 0x8f2, 0x0, 0x8001, 0x4, 0x200, 0xb51, 0x8000, 0x0, 0x4, 0x5, 0x0, 0x0, 0x7ff, 0x7], [0x7, 0x0, 0x10000, 0x0, 0x100, 0xfffffe00, 0x9, 0x4, 0x0, 0x3, 0x0, 0x101, 0x0, 0x5, 0x7, 0x6, 0x7, 0x0, 0x8, 0x1000, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1, 0x1, 0x6d, 0x188e647b, 0x6, 0xffff, 0x6, 0x6, 0x158, 0x5, 0x0, 0xd62, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffb, 0x8, 0x0, 0xf2e, 0x71bc2381, 0x0, 0x7fff, 0x7f82, 0x1f, 0x0, 0x2, 0x1f, 0x9, 0x7, 0x3dbe6468], [0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xa0, 0x0, 0x0, 0x8, 0x0, 0x7210, 0x0, 0x0, 0x7, 0x80000000, 0xa70, 0x7, 0x0, 0x0, 0x6, 0xfffffffd, 0x9, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5e3, 0x2d85, 0xfffffffa, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xdf, 0x7f, 0x3, 0x0, 0x3, 0x7, 0x8001, 0x5, 0x5, 0x59a7, 0x0, 0x3ff, 0x20, 0x2, 0x8001, 0x3, 0x6, 0x7d, 0x1928, 0x8], [0x71, 0xc5600000, 0x3, 0x6, 0xb8b7, 0x6, 0x0, 0x0, 0x6323c19e, 0xcce, 0x0, 0x40, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x1ff, 0x0, 0x879, 0x2, 0x10000, 0x0, 0x5, 0x7246134e, 0x0, 0x7fffffff, 0x100, 0x0, 0x1, 0x0, 0x0, 0x100, 0x401, 0x120000, 0x6, 0x100, 0x7, 0x7f, 0x0, 0xfff, 0x0, 0x2, 0x3, 0x0, 0x800, 0x9, 0x17b, 0x0, 0x0, 0x0, 0xee05, 0x5, 0x8, 0x0, 0x7f, 0xfffffffe, 0x7, 0x2, 0x7, 0x1000, 0x0, 0x80, 0x8001], 0xa, ['.\x00', 'ethtool\x00']}, ["", "", ""]}, 0x42c}}, 0x5) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) 05:16:00 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x0) 05:16:00 executing program 2: socket$inet6(0x2, 0x2, 0x1) 05:16:00 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1698) [ 1471.551219][T21384] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1471.659021][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:00 executing program 0: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x30da8f5ee45ef691) 05:16:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="f2fd55cdc9a9e7bbd12285958ff0a1c81ef7f0b4db7ed7ef5454c8c67f16fda6b69e24c8c96c56f0e695bcde56da766fbaa8e0078078b0b89188fe43e2c82694e37fae1794d66220292a8e4b8041b71b475188b15f875bb067a6325f34c43a1a466643ca5f915416f82d250084ee24a09e7d62b094ba0484509fb186183b97d6f676892591ff8f54ae94a8824781394e0f3a6db96d4a24da8d5c28aa15e840319b85bb2bf105011d88316102538464c6a5fb89f1c06d1505ac446e8df3e9d772145356817ff45672cb11d0f3b1a57208552c6b0cb9667c5ba01125c03df0b24a44638102b47fa410b164", &(0x7f0000000c40)=@buf="bcf3fa3e91e4a337c22ca0b1c864390d89bae171776f622d293b5e4c0ffa02d056f302399de7eb7993f9be1b663006201e545ea7329abc440764eac27d64081388c40a3d32587fdd336f4818d28ecc6c00f7a56344506604fa05470255460ac1334086ec8f512c37b7e73b807f300c47ea86519c86e6fb9e87cc826330603ed4dc37d8f251dd8a271b150544c6ea7ca6caa1c5fdc6bd88730995a4e9c864aec1a715c23c6eaaae7c7307d7aff673664764a8aeda817f873a9b6df7f13da99137ee03906635c7ef76d5d7e6cd201453d7964c2564b23a6b65bc3d8c838fe70d25e1507cc23585bd89c6d56728b8c73a0a01c56167fbea652f9be4454e2a7e524ee04ee8767284a2c4cc4a84145010a17e1d81be6cd70b5f91349472481b6119ed03623a1646385d3eb7e734a1715c156394ac2c68ec6076b2c62c4dfea30b3c49a76314101b9a3418f5424c8f6af3ce48c3f45f38abde35348c61a414f58edb69a1366a93009c285b69b2c5ad33c65bd42a0a15b39978f5460c8b2f38a5aea4f7b0ffc8e51352f2835068f5405b75dbfe4e74feb99695905e23b5c714dc245097c846f7e19499ca67dc339e5b26929929e250332084959f14ee14622d0701c267ee6c5ec059fe955e354d669ef8ded9e76ac47837f243e7a065610f89802210d6b945b526a2a0f7208090f2f1a196071381da5788755343e8217f8c8e1880cb31e1c079e4d453f2dd867c20b554a68b80f38c8d9d3f99a4bb4620f2fef9f9c2bc988b3b5e9150979d72ae5a735cd1e967b945adaadd2f7cbef1cc5870f1cfb653ffcbea0658523725d2a1037014f4a1abcebc21d4259a4832ee07e0b0bf604e8b3cbd33f11d4e16f8602d136c792f9c652383a7e10363ca5296c8fed5a83697b1c72c43b39b85f28840caa69669abcec24c0ea7fa7fcf96fae83a2b73a4648963c359b230111673c4ce6bcd9aa2a990518f6ea93b31fb9dc56c2335f4a23054cc69683cc272b1cd57fc2a94e25d1349aded4009e4a6549d1d2bb7b197fe37b3b51e42b6ca147d6a02b56aa5d574fcc9da777e427ce32b1401b62579ba555057af294416c53323cfb6f0f92f82027ec830da909bfb635c8e8e4b7d6e5d5fe6de7a8484f2c3642f1079922ded13134cd15809beefee99fdb654dbff31e95a6af7cab73608e32f9bb8439458f510372cdab8186032e6f1be81d30917f02dee674282f9b6329459c85f147c721b31c061df6c0cfa2a0afc7ddf4a8dd3752ece921ca0c85d99ed1a60a18139cb697031be9a2b5ef39430141137b9b58ec949a1a5f47626601fc295b4e88c3c35c9956673ad4d5822915d0e474bff257380c3297e123287fa01aad85a56077732d169bafd047ed77f1cd63b67f8d9e22c623991020bf9adb6251c3799d8ee8521f70c0dda35012a1cfc4d60a4db8db77d7e82f9c59492216f60d615ae92f0345580a04def7939ff5d649b5bd338beca53263783c5e5b69c3850f5f9f9bac3dbb21b663c38cd483ffdbce5064ccf75dba1b66e3524238a9dbfe4918f911d37e4cdf0d37f627e79a50ebf7d377384dac220e70d91035dbb799245063ae49c075029cc44d479e8360e8653712efd83a5346f71152b831d77f74859bb5b941b52f8e746d200b7f9d6e57507771d971e924e923b5b3fe81199f648faed824b360a5bb8fede3e4350c3324834455ddde6d6931de589f6b4fee90a8b14afac243fac2d38e0faf2c5e435b52fdb050ea2acedcf7607799f52afcbab1b32b75b2eef38a488c2cbe55fc5570854b1a4eccd93c128b1949c71963ef85bdd4d0d64d368aaf98517212b89162400cbab92d1b373fe146a4923d0a1bbe3a23b1fd64d282b35e85f35844bcc72d3f6a51df74a9716e57b8c4a1a9ef0edec8bf6c7d062704f85df80762b6bfffe9b09e03bc8bca492d45c5e884623d711a7bdbcd4f2a0062974d4f2a2e98c5a33384b148da863c872e784be872b2bb2f46cbb014ab8a03e7715d222828561fcdb2635e636f2b812e8f6512ad0a13cf882b10cee593713d6dab3ea44a2738719a029f9292fecab031f40214be5ec4681c5497964dc8d0dbdf26349ae4ea6ead5200be33596112c8b6fcc7fa267ae8c0e65ac934f1df566af24e5b839e63837397d0dbf3f4b46c993e7a4c66dd26470dad5ebb728164659d45ad0f6f246fa101ee3961bec3a5c55afd38e1d7a48419f3ebc9e1e027684ec28baea31e5d30420d41f9262be125b3d46020d614a98c68656c61f891bc2549122859c06739957f4d3f21809874427753efe07025e0270f00091200a69b750764e95c729ddffd5359c11100422582fc6d8c4f4c7fa2926af7110d0709c0987a11d8b4e99a025c464f8fb336977e6500470b352b78990b8a9858779e51a78c684d649cdc442fd5003ba7128c0cb6b90aa97b19dd3d1513477e5d519bc3e2f69d0480b6f6aee90b9662eb7d4d0cdd60a8b906226d2bac47a29084d18533df0f1a548de68b3c675676686e44b229bc63a8d85417378f494262148d27456b92dce92009d425cc54c11a7c19d0833eb6d742340abededdc7c3daf0e07ee21309be780945b00c7fd743b06847471cdfa08842799158a61385f7256d0a0caae95766d8a2d7ea69623167e264cadcf743ac0af2225e4ae4d9b0f0bee32cc4df55695a8fadee8f88d1a7f2efa062492ebb6fb8804ea4daa317200cf77f17fb34c24f9a557f10dac53fd7f75f3214507768d93531eb80306dbe3bbc3b451e48629314749c154f593d32eb4fbb7a820905921e2356a16aaa62c4c88202715622fe494be0c97d40b858f75bbde8eaa1d212e49e79332432f8f2df21abb6b5a9b73d51a86774803a63549553f2577052f82fe8a30a8048e3e2f928468b15fe937f0397cd2d91167382cb71a681c40c172cc9d85a6d9d2b240bf8e42b292926d0a176c10797a3115a4f49c3c826612d01aeb23b741c872f061dba32eac01496c3107c0ebf06e334b7fcec3477096acd4dd5f0afadc3f0171d2451469878658fc3765f78a801a847cf5daa194951f29d2c9e83930b2ea58ce6c0673d65b1f6cb6a54394613ae8b1bed57e8f047721a49783e2725e8037eb5aff6ff7ecc305cbb941cf2239e12476a4540a7a753baf97a66aed0e6d58bd88c05bf7f1d69ea5fb49c82bfa11725984ffded3842b22bdbd392566513cc484e45bc8d280b99b6a509f7b8dbd37d089b0bd92c93053b67eb3668e04eabc6b8ae7fc555dbfd90de8abfe7f159c7750b47e4d5c03718fd46c6cd011f8bca50c7c70c2040bfe094fdf0115db2e0bcdef7621dd21aaad1efb18c14a41dbe4431a050b943c77af60b6ac6f5fe86d2814a9e711505815a1189612872eb853a286267df375bff7c3586d91de7f48341938c86f3f9eb42e0b607a2f47f5046b5164ffa45a2f6ae2b71dd1452e31c1ea19d517337fb4ce3403e71162a4e027723e9ce56182c74936b7ee77cdf144623278e8cc0a656a0095920d6aea517989b509e3e804495b53a1a589802ae264f45f44a416539b71b9e812710498ac20dbb3e1f6997644d1a90f4685fb99ae3dec718a4be21c76f2081ccfff2e8f8c95a6f11b518bef42b4c46dadeb166bd098edb73632062ddfdc8f298c74d5c491cb8fd9367facbbcb29f4894ffab0fc81ce00f58d7ab1a3507c479381bae7de891e370977f36021ba506d4f9dc8d967735cbd16f66aba6308b1ca85ccee862db19ee2e7f759bdad755080ea9a09caf5fbbf1ff2d0746037e52ca277122b74ae53514ce5b9bf119b217f5e4270bdf30c9c520d717bcbdf30b9fe24061e3a84e415481ce5a25a9e8a23e18f7163afe95aced5e8e75e2f0b19ad01950d7d288523a2cfa46d2c5427cd7c37b014ff1a94c2e689df80408afd6d803f36f4353ba9a9fdab4d2d90f68f6e2108772cbe6d90714f516470151bdf4b3519503914bda69f3132205fd00a82cd76756200089304f948ce64c92afd76029396be3ee3e89aad123a86fc258ef08eed3ad480ff2a19d00e59f68aeaa8d930bba9fc78b472b76e35a635513251fe96ff194fc84c1d24377d05acf441477d11df4c199da253468dce0161a8d261f5a15f5e0f895fd9d7312c31b37f5e480d3bfbd153f27a6e7536c60db8db97dcf1d1fae938a180620a76c42e7f57b3a9363279432a0b616cd5b457dd2ef2b496d0eac5f575d367d5e6f343feb645f94c41afda7cf6308af9c2718987298a6e84acff8f6cf85965ebba63a3ea03bea5f5c3666c3065bb757949dcb8ebf430e53f2e579cea21ed120780d8dbbe966603a7290f22f03c7b14cfcf355176c4a20dfb7c61127e4f07288b8b98e4936498479c14e838760bf40e737e5673d2846ead1301c05de73764c863137d12069acaa03be28bffa622e7f103c3c6f1ea0dd780841f1d0265b942fdb00c66ab2218bf9d146d758908361fc77aacb1cd24f6c846cc37bfc5a4b9c688b9be1626bbb997dad98ed47eee879bfe349e69fdbc0aeaff0b03d964f05aa3ec2b6bf705c60345554880424d427db95b68409494fb38f74b13caf083e692c7d43bd3491114f4245c6ef9d99c8f7b41c2ee03989126e6ad9eb7fab7ff5b66903a54efbe30a879f9ffcfbc922b32e30b84da990db5efd0bd7eb790e5e6ca73d6786886e52fc65c70fbc470e856c1f1402796eb9620f7a439c1a2314df0b1629f2afd2a9e0a3a5e22d218152962a78bcd2fadaf2d67880091ed6f69901fe88b0a0fa23664e05252c4f8aa8082ff94db6d9f720d10285f342ac130a9049376d2e15482741217555a22f35fcf5437529ecd00a4503d99cb82e8ca20e2e3eaeb083fb3cc74f57f32ee20c6bccfcb5684e39daf2366d151adb8de26ca677c0f526f86c61705acc2f446f492d83bbe8261690f15a499a19d3a18359654de805c9d0acad680a0be9941f0793fc925aa3d9d84351b1ac9a24b72bdc686520f5937ab18da1b9a202fc945a544f6acf3f689524de1ffb08bb6cbe98311d6f1a0b67b63d3646d8f515d3c34478467b4ea0a2811d6d4434e1dddc35db81006ccaf36decc9459160e892f94d73c9e8503520cc9e7e1ec99ed6eb32634c4cda77e17a5965b01f1b8e91153186b47a686b1d6d5c184a30183597eef4fd583370427021d6c2181ee74204ae8cebfc538d2eb3fccf4d0f1e7b124b8c689dbf8681e70c0e1d2865ac7598c3c34d1fe64c985df081a59f5e017b23123e8c704a09b34c77c2db28ee9ac00c2a079d7eb78591a095666223139618a89ddf796cfccc678b1f63d233ba466c0220b44c4b6fab64a03c9678992bcd14582316de3900936467689eb4ef7640ceeda31f05d050a979f15278e48be47160fb9031eebd32fa44ff98557e6e4f6390c6ba7907dcf2ed95a5733edf8f91c2eccad23e658742b929731a56df0bbd8aa0f17972ef2b782157f00a54bc5590d564719a71b557a85db5580ba516830771c4088ab9f5ca02dc49c631043d7796685cc52f7c642e929c55d1796bca0345b1c6a0a3faeb5ac457efc750f59de5e62a98460b66be073f886da04392f7d57701ce4dbc3c200e8feca80339a23895d538a7509baa4bdd28f5139ee702702e500efb9e895033a19c89946b54a7bc18efb891e0ed3c9d80b163989c30deaddf5138ee4ff9cf54cf1f2bf2647052d90c209a50b105fa410469fc4d62ce6b45292d16f9db977b19fd1b1cff21641df703194143055ab829d16e33062079136e1b7450d2e1566c51232c8c17d8bb808b94ff30bdea50c45cb9605c42e38d7908b02c3f3af6d6cbd2748ee6a"}, 0x79) 05:16:01 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x540a, 0x3) 05:16:01 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1698) [ 1472.397600][T21404] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1472.489528][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:01 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0}) getresgid(&(0x7f0000000e00), 0x0, 0x0) syz_clone(0xaa25711bede07fed, &(0x7f0000000ec0)="bd0dcb2b25902ff14e85538f29281a645c6c6a5fd9e1b35217838f1db2f18ca390f9e769f4ba670ef9bd7f22acc4c9b03aabf51e125cb439c3197cbccb242a", 0x3f, 0x0, &(0x7f0000000f40), 0x0) getuid() syz_clone(0x90014200, 0x0, 0x0, &(0x7f0000001000), 0x0, &(0x7f0000001080)) syz_clone(0x10200480, &(0x7f00000010c0), 0x0, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="90fb0a4dd1f5052aaae4a4274eea6fd268fd5a52097707af0945370c9e94b5cfb675334ad9a58eff8972d97e1210d36f63") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000c0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x42c, 0x3f3, 0x100, 0x70bd25, 0x25dfdbfb, {0x5, 0x2, 0x12, [0xffff, 0x0, 0x2, 0x6, 0x101, 0xade6, 0x0, 0x5114, 0x2, 0x7, 0x7aa2, 0x1, 0x3f, 0xff, 0x9, 0xffffffff, 0x3, 0x4, 0x4, 0x0, 0x0, 0xffff510e, 0x0, 0xa7, 0x0, 0x40, 0x8, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x8, 0x81, 0x1ff, 0x0, 0x4930, 0x0, 0x40, 0x3, 0x1, 0x3ad9ef2d, 0x0, 0x0, 0x8f2, 0x7, 0x8001, 0x4, 0x200, 0xb51, 0x8000, 0x0, 0x4, 0x5, 0x100, 0x0, 0x7ff, 0x7], [0x7, 0x2e9, 0x10000, 0x9, 0x100, 0xfffffe00, 0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x7, 0x6, 0x7, 0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x1, 0x6d, 0x188e647b, 0x6, 0xffff, 0x6, 0x6, 0x158, 0x5, 0x1, 0xd62, 0x200, 0x0, 0x3ff, 0x9, 0x263, 0x37, 0x0, 0x1, 0x0, 0xef, 0x0, 0x8, 0xfffffffb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7f82, 0x1f, 0x0, 0x2, 0x1f, 0x9, 0x7, 0x3dbe6468], [0x0, 0x80000001, 0x0, 0x4, 0x3, 0xa0, 0x7, 0x0, 0x8, 0xe98, 0x7210, 0x8000, 0x88be, 0x0, 0x80000000, 0xa70, 0x7, 0x8, 0x7, 0x0, 0x0, 0x9, 0x1ff, 0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x582, 0x82, 0x0, 0x0, 0x4, 0x0, 0x2d85, 0xfffffffa, 0x81f4, 0x8001, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xdf, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x8001, 0x5, 0x5, 0x0, 0x8000, 0x3ff, 0x20, 0x2, 0x8001, 0x3, 0x6, 0x7d, 0x1928, 0x8], [0x71, 0x0, 0x3, 0x6, 0xb8b7, 0x6, 0x0, 0x0, 0x6323c19e, 0xcce, 0x3, 0x40, 0x3, 0x4, 0x0, 0x0, 0x4, 0x0, 0x9a8e, 0x879, 0x2, 0x0, 0x758, 0x5, 0x7246134e, 0x3, 0x7fffffff, 0x100, 0x83c0, 0x1, 0x0, 0xffffffff, 0x100, 0x0, 0x120000, 0x0, 0x100, 0x7, 0x7f, 0x5, 0xfff, 0x0, 0x2, 0x3, 0x0, 0x800, 0x9, 0x17b, 0x9, 0x10001, 0x0, 0x0, 0x5, 0x8, 0x9, 0x7f, 0x0, 0x7, 0x2, 0x7, 0x0, 0x7, 0x80, 0x8001], 0xc, ['.\x00', 'ethtool\x00', '\xc0\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x10}, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) 05:16:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@loopback, @private2, @private1, 0x0, 0x1f, 0x0, 0x0, 0x2, 0x80000, r2}) 05:16:02 executing program 3: io_setup(0x1ff, &(0x7f0000000180)=0x0) io_setup(0x800, &(0x7f0000000000)=0x0) io_destroy(r1) io_destroy(r0) 05:16:02 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 05:16:02 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, 0x0, 0x0) [ 1473.457594][T21419] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1473.719908][T21427] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@hopopts={{0x1038, 0x29, 0x36, {0x0, 0x203, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x0, 0xfff, "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"}, @jumbo]}}}, @rthdrdstopts={{0xfd0, 0x29, 0x37, {0x0, 0x1f6, '\x00', [@ra, @enc_lim, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x8}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @jumbo, @generic={0x0, 0xf74, "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"}]}}}], 0x2008}, 0x0) 05:16:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7ae92cf24f9e14fd740757340f2137ce430d783ce29a7f3c9b41b7e302e1ecf15ec8624c468d96384d79650cda5a92cd864538a68b61897c2f184868cdf4002e", "a173b7d9d2f8fcc21611e0e5511e5dcc6bdc5faeb473ce1bd1e57139572f89425be864ef248bb5284ef0872c11def3f319da76cc087906b43495e93db4174622", "94ab92964d42036b0d3c5af2217ad8f7fb7be50d36c1f5ed83b15864f839c567"}}) 05:16:02 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, 0x0, 0x0) 05:16:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) [ 1473.867971][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:03 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x204042, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 05:16:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:03 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 05:16:03 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, 0x0, 0x0) 05:16:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000001340)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=[@hopopts_2292={{0x18, 0x29, 0x4}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 1474.661909][T21440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:03 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80001) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x1001) 05:16:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) [ 1475.005340][T21441] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1475.143425][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:04 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5421, 0x0) 05:16:04 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040), 0x0) 05:16:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000000040)={0x10}, 0x10}, {0x0}, {0x0}], 0x3, &(0x7f0000005840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x0) 05:16:04 executing program 1: open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="f2", 0x1}], 0x48, &(0x7f0000000100)) 05:16:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x3, 0x9}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) 05:16:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:05 executing program 3: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x98f004) 05:16:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80001) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x7ffff000) 05:16:05 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040), 0x0) [ 1476.021763][T21463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x22000004) syz_open_dev$usbfs(0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x48) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x10001}, {0x1, 0x7f, 0xf2, 0xffff8000}, {0x4}]}) 05:16:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8080) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)='V', 0x1}], 0x1}, 0x0) [ 1476.371406][T21466] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1476.473042][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1}, 0x20) 05:16:05 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x92b301) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x0, 0x1}], 0x18) write$char_usb(r0, &(0x7f0000000040), 0x0) 05:16:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:06 executing program 1: bpf$BPF_PROG_QUERY(0x13, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x402}, 0x20) [ 1477.221257][T21483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:06 executing program 3: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 05:16:06 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0001, 0x0) [ 1477.619009][T21486] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:06 executing program 2: request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) [ 1477.739216][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x10}, 0x20) 05:16:06 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0xf}, 0x14}}, 0x0) 05:16:07 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000001f80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 05:16:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:07 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000500)='pids.events\x00', 0x0, 0x0) 05:16:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x2, 0x1}, 0x20) 05:16:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x10}, 0x20) 05:16:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) [ 1478.579963][T21505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 05:16:08 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 05:16:08 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) 05:16:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 05:16:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x10}, 0x20) 05:16:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x30) [ 1479.739054][T21526] __nla_validate_parse: 1 callbacks suppressed [ 1479.739129][T21526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 05:16:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0x0) [ 1480.021731][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1480.051757][T21530] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x10}, 0x20) 05:16:09 executing program 3: syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x115a42) 05:16:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:09 executing program 2: bpf$MAP_CREATE(0x7, &(0x7f0000000040), 0x48) 05:16:09 executing program 1: syz_clone3(&(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, {0x41}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:16:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)) 05:16:10 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000040), 0x48) [ 1480.998326][T21545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:10 executing program 4: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 05:16:10 executing program 2: io_setup(0x1ff, &(0x7f0000000180)) io_setup(0xc7, &(0x7f0000000040)) 05:16:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) mlock2(&(0x7f0000fea000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) [ 1481.472180][T21548] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:10 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x30040, 0x0) [ 1481.515494][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1481.642013][T21559] erofs: (device loop4): erofs_read_superblock: cannot find valid erofs superblock 05:16:10 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x30, 0xffffffffffffffff, 0x0) 05:16:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x0) 05:16:11 executing program 2: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@umask}, {@codepage={'codepage', 0x3d, 'macgaelic'}}], [{@subj_role}, {@appraise}]}) 05:16:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:11 executing program 1: pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) read$rfkill(r0, 0x0, 0x0) 05:16:11 executing program 0: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000, 0x1}], 0x48, &(0x7f0000000100)) 05:16:11 executing program 3: mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) [ 1482.555689][T21570] exfat: Deprecated parameter 'codepage' [ 1482.561596][T21570] exfat: Bad value for 'codepage' [ 1482.639027][T21572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:11 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dstopts_2292={{0x18}}], 0x18}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000080), 0xa, &(0x7f00000000c0)=[@dontfrag={{0x14}}], 0x18}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0xfffffffffffffdd7, &(0x7f0000000440)=[{&(0x7f0000000140)="4fbb6f9a66b05cf3eb3984b41353ad500b0640472bbb441f882677c7804bbfd715c28d40938458bed17bfbf03373b226dff06f9b5860d48790861812d4ecc62e293b19f5e7acf12e0e54601bc25e03fb64f9695b5b7ea98661d24058c858900c9557498f93c576096839e72af8402d8590c9841f5d64b02bf8fddfcbf8b850957d594811627eeae8e054ebd4e64df9110f493ce6e4908e7fc7e28af2d3532e76d526d4965b325e48650b1c5a61cccf5c0b5841c5c633e5757d08a0f050b19686", 0xc0}, {&(0x7f0000000740)="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", 0x8a}, {&(0x7f00000002c0)="96180401d2ee5c386c735940ecdb53e278f7685209a023563a3d7375d08371595bc323e5487dec0d7a38e275b1c3a97c657a6475f10531ffdcd56a0a377dde53dc510877a3cb21f670331967e4fca7c62e78a514b89061ec51310274d0118068c89303736f5425c02b682b9ccbd8c3de09286b989119b5c699df21fb888a514198c5bea34bb3a55f23fd44dba9eba604726da40324553ab7dd8f9ed128f97279141bc9eafb659b09060cb58af18ca9bb100f198e2b645b6fa227339f0d3d4afeaeb8e67719274d9cb3f5dd", 0xcb}, {&(0x7f00000003c0)="4481c029f176fb9a03af7ab8d764799634bc6f2a992a0d33e1af7dbff9c50607b223a3978300e96e2fd4af335c69d3f77e6c7c3b81b50c35453b5df83b8b9f540daf8605b26bb12fe14872f0276d949a2b5ee9b93f930d4dbfab7db104f3c1905a861be804b6", 0x66}], 0x4, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], 0x50}}], 0x3, 0x0) [ 1482.794859][T21577] loop0: detected capacity change from 0 to 8 [ 1482.866952][T21577] Dev loop0: unable to read RDB block 8 [ 1482.873362][T21577] loop0: unable to read partition table [ 1482.904268][T21577] loop0: partition table beyond EOD, truncated 05:16:11 executing program 2: mlock2(&(0x7f0000fea000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) 05:16:11 executing program 1: r0 = socket(0x1, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={&(0x7f0000001340)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="300000000000000029000000360000002b02000000000000c204000000010106000000000000c20400008000000000008801"], 0x1b8}, 0x0) [ 1482.910955][T21577] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 05:16:12 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) [ 1483.050954][T21579] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1483.128581][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:12 executing program 0: pkey_mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x4000)=nil) 05:16:12 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xed0}]}) 05:16:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:12 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), &(0x7f0000000a80)=ANY=[], 0x1015, 0x0) 05:16:12 executing program 2: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:16:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000000280)={@dev}, 0x14) 05:16:12 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x80000000, 0x68ef, 0x1000000080000}) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0xf36, 0x100000000, 0xffffffffffffffc2, 0x41c}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r3, 0x0, 0x100000000008) 05:16:13 executing program 4: socketpair(0x2, 0x803, 0x6, &(0x7f0000000000)) [ 1483.984551][T21596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:13 executing program 1: r0 = socket(0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) 05:16:13 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 05:16:13 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffd4e) 05:16:13 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) 05:16:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) 05:16:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x3) 05:16:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe2(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x396e}, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}, {0x0, 0x0, 0x10e00}], 0x2010080, &(0x7f0000000800)={[{@uni_xlateno}, {@rodir}, {@shortname_lower}, {@utf8}, {@fat=@dmask}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:16:14 executing program 2: syz_clone3(&(0x7f00000014c0)={0x10000, 0x0, 0x0, 0x0, {}, &(0x7f0000000380)=""/213, 0xd5, 0x0, &(0x7f0000001480)=[0x0], 0x1}, 0x58) [ 1485.206716][T21621] __nla_validate_parse: 2 callbacks suppressed [ 1485.206791][T21621] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1485.367523][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 05:16:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:14 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x8}, 0x0) 05:16:14 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x5) 05:16:14 executing program 1: io_setup(0xefff, &(0x7f0000000040)) io_setup(0x0, 0x0) io_destroy(0x0) 05:16:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0x2, 0xe22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@rthdr_2292={{0x14, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@local]}}}], 0x28}}], 0x2, 0x0) [ 1486.075026][T21634] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:15 executing program 4: io_setup(0x2, &(0x7f0000000340)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) io_destroy(r0) [ 1486.153872][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:15 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x80000000, 0x0, 0x1000000080000, 0x7}) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0xf36, 0x100000000, 0xffffffffffffffc2, 0x41c}) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RCREATE(r0, 0xfffffffffffffffe, 0x0) 05:16:15 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 05:16:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:15 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0) 05:16:15 executing program 0: pkey_mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 05:16:16 executing program 3: open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) 05:16:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) socketpair(0x25, 0x800, 0x800, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x88080, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x7fff, 0x4) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) [ 1487.014205][T21656] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1487.073067][T21656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:16 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x80001) write$P9_RLOPEN(r0, 0x0, 0x0) 05:16:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80001) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x8800000) 05:16:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x994, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 05:16:16 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x80001) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18}, 0x18) [ 1487.848606][T21667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:17 executing program 2: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@umask}, {@codepage={'codepage', 0x3d, 'macgaelic'}}], [{@subj_role}, {@uid_gt}]}) [ 1487.958233][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:17 executing program 0: bpf$MAP_CREATE(0x5, &(0x7f0000000040), 0x99) 05:16:17 executing program 3: pipe(0x0) io_setup(0xf71c, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) [ 1488.646217][T21678] exfat: Deprecated parameter 'codepage' [ 1488.652109][T21678] exfat: Bad value for 'codepage' [ 1488.769689][T21680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:18 executing program 2: bpf$BPF_PROG_QUERY(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:18 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}, 0x20) [ 1489.338356][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:19 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 05:16:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:19 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xf, 0x0, 0x0) 05:16:19 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001280), 0x2040, 0x0) 05:16:19 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 05:16:19 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000040), 0x0) [ 1490.354231][T21700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)={0x10}, 0x10}], 0x1}, 0x0) 05:16:19 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 05:16:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) 05:16:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x20) [ 1490.708484][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1, 0x600}, 0x20) 05:16:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:20 executing program 2: r0 = socket(0x1, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0x1b8}, 0x0) 05:16:20 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000001840), 0x200542, 0x0) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001800)=[0x0], 0x1}, 0x58) 05:16:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x2, 0x1}, 0x20) 05:16:20 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000280)=0x81, 0x4) 05:16:20 executing program 4: syz_clone3(&(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) [ 1491.509489][T21718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:20 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0, &(0x7f0000000580)=[&(0x7f0000000340)=',[-#(%(\x00', &(0x7f0000000380)='\\#\x00'], 0x1000) [ 1491.831678][T21724] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1, 0x0, 0x600}, 0x20) [ 1491.931381][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x54, r6}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r7, 0x4008af10, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r8, 0x4008af10, 0x0) getsockname$inet6(r8, &(0x7f0000000200), &(0x7f0000000240)=0x1c) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=""/82, &(0x7f0000000100)=0x52) 05:16:21 executing program 0: bpf$BPF_PROG_QUERY(0x1e, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:21 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0ff7f00000000}}, 0x0) pipe(&(0x7f0000000a40)) io_setup(0xffff, &(0x7f00000001c0)) 05:16:21 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:16:21 executing program 3: r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r1, r0, 0x0) 05:16:21 executing program 1: pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000002c0), 0x0, 0x16, 0x0) 05:16:21 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) [ 1492.735882][T21743] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.891162][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:22 executing program 2: syz_usb_connect(0x0, 0x59, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xcc, 0xfb, 0xee, 0x10, 0xaf0, 0x8800, 0xbc48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xb7, 0x40, 0x0, [@uac_control={{}, [@feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0]}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, '\\'}, @output_terminal={0x9}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x4}]}]}}]}}]}}, 0x0) 05:16:22 executing program 3: bpf$MAP_CREATE(0x8, &(0x7f0000000040), 0x48) [ 1493.202996][T21747] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:22 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0ff7f00000000}}, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) io_setup(0xffff, &(0x7f00000001c0)) [ 1493.282711][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:22 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x2010080, &(0x7f0000000800)={[{@utf8}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:16:22 executing program 4: r0 = socket(0x1, 0x2, 0x0) connect$packet(r0, &(0x7f0000000080), 0x14) 05:16:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:22 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1493.777861][T21761] ieee802154 phy0 wpan0: encryption failed: -22 [ 1493.905083][T21764] loop0: detected capacity change from 0 to 270 [ 1493.965792][ T3565] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1494.004551][T21767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x3, 0x1}, 0x21) [ 1494.253441][ T3565] usb 3-1: Using ep0 maxpacket: 16 [ 1494.261609][T21769] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x20) 05:16:23 executing program 1: ptrace$peeksig(0x4209, 0xffffffffffffffff, 0x0, 0x0) 05:16:23 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) [ 1494.444484][ T3565] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1494.453697][ T3565] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.635313][ T3565] usb 3-1: New USB device found, idVendor=0af0, idProduct=8800, bcdDevice=bc.48 [ 1494.645392][ T3565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.653953][ T3565] usb 3-1: Product: syz [ 1494.658336][ T3565] usb 3-1: Manufacturer: syz [ 1494.663264][ T3565] usb 3-1: SerialNumber: syz 05:16:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1494.844396][ T3565] usb 3-1: config 0 descriptor?? [ 1494.917068][ T3565] hso 3-1:0.0: Not our interface [ 1495.146786][ T3565] usb 3-1: USB disconnect, device number 22 [ 1495.618906][T21785] __nla_validate_parse: 2 callbacks suppressed [ 1495.618978][T21785] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1495.676419][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:24 executing program 2: io_setup(0x2, &(0x7f0000000340)=0x0) io_setup(0x1ff, &(0x7f0000000180)) io_destroy(r0) 05:16:24 executing program 4: r0 = socket(0x1, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:16:24 executing program 3: bpf$BPF_PROG_QUERY(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:24 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x181001) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x18) 05:16:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x3, 0x1, 0x0, 0x9}, 0x20) 05:16:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) 05:16:25 executing program 3: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) 05:16:25 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 05:16:25 executing program 2: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) [ 1496.836864][T21803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:26 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x14}, 0x14}, 0x8}, 0x0) 05:16:26 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 05:16:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000000000000000000000018600000000000000100000000000000852000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:16:26 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x10}, 0x14}}, 0x0) [ 1497.350641][T21808] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1497.433682][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:26 executing program 2: io_setup(0x1ff, &(0x7f0000000180)=0x0) io_cancel(0x0, 0x0, 0x0) io_pgetevents(r0, 0x5, 0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r0) 05:16:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000280)) 05:16:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 05:16:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x6200, 0x0) 05:16:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000017c0), &(0x7f00000001c0)=0x4) 05:16:27 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 05:16:27 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000040), 0x48) [ 1498.844218][T21830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:28 executing program 4: pipe(&(0x7f0000000a40)={0xffffffffffffffff}) read$rfkill(r0, 0x0, 0x0) 05:16:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 1499.265616][T21835] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:28 executing program 1: r0 = socket(0x1, 0x1, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1499.417828][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:28 executing program 2: io_setup(0xefff, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000240), 0xffffffffffffffff, 0x200000) 05:16:28 executing program 3: syz_clone(0x10200480, 0x0, 0x0, 0x0, &(0x7f0000001140), 0x0) 05:16:29 executing program 4: r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r1, r0, 0x11) 05:16:29 executing program 1: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x0, 0x0) 05:16:29 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1500.523160][T21850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:29 executing program 3: socket$inet(0x2, 0xa, 0xf64) 05:16:29 executing program 4: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1501.003605][T21856] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1501.245497][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d0030000030a03"], 0x3d0}}, 0x0) 05:16:30 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) 05:16:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="f3a897734f706bb3889bb0", 0xb}, {&(0x7f0000000180)="3163a53dfa0fabf7cf059f2d10a578da2acd11750be6b9e7f2e54a6dc0a3ecd91b0e3efc9922aff236e3cf67d6f73ea29f8d1ebe896cf059cb9e5b7f851d7d7b12074af79ab3b50c4ca114dd5e18f96946ca8a64c9816143c14a2700aa7e9e7329cb2ef3e2fac8682eded64c684ede97224913139bb89a50062c0ce9f0fd02088d520bc9148dc113a2c9956ac2d960deea2d86b6c96c40d8dd75aaf42d3453b83b3c5bdf0599da59baea96850a7436f4778898fa", 0xb4}, {&(0x7f0000000240)="6151e63ceeafac77d4087e3c4e12d91c83705372aa0342bd8aebf93eee6a353c1921f441c69018128d040011fdb3bf9998b3d3ab3d42c9f60e1c7a05ae1069933836152dca2008209ecab91b904ffa0f9c669bdf3b0a958ba75a33992d6ef330ac21c78b8baa1fb588d6a38d88b07b205fa6d2794f72a8cb9878cd884d0c294ed69e5b369cb8c217bb31ab5caa732fea1b", 0x91}, {&(0x7f0000000300)="3e6e29a71b25e338c9547b50bda8b0fc9d30a7426b1ff4390952e1f2acb75e3e124fa2d3461fb28eb62c02e75c285a85d05d7286e1180fe5dce6d8efbaf129c4d61d10cf30c1d65c0662e8dbe2b4ca8180eca6e542c4da7d8da3209fa6acaa6c1a7bc3af1eb493c9d2c76b8428cdc64c57f7131522b06e289a38516e725b0c03008944c0686eeed7f29f422b3208f2803039d33acc1d24157254a726a68d2935b18e1c5a83e03b09ecbbac2fa767ef89d6e2b0e0ddaa56dc056b60234b6b07a9cff234e066d76f12fa3a51b608a567f296d15718933bcea6d7ba7820f92e4a7728cdcb705f9b2dcbf5557ff0b7ae75bf56f809af361b1ae03ba26d7338f8a3d2510bc10665c72453f41dc29f55cfbcb2ab96cbded87ecb2133d9ff7320c248de0c43a9826d39306a45ef0bc8e49201ccfeb63b7bef555dae27d8dbf41e3ff8c25bc89b15256f36cd6f48d731ba584da84af39a8be1380bcef7b918f42784c9a7e098e60f2b0d4e3e470f046361f0d3aa16981937d8eae287accc8fd3b306a413b5a5d5ab386bc381c353d2a2759f68f6f3fd8c4c4ebb79b7ec7f6155cdfc9d5d420a99b124f9a3dadede9580041c371d63e5e1d495c03b1a0f859506e992fe75934a19a4576642503f2ffdc27431a8f5587b6909e9e513bd24d357d4265b1711f6d98ee2048c79bc100df79142ed6f100841e059745fad2a7fb5ee17a38b5ab2011fee18cbb020c9f0a436a5aa4e256ef2592b60d11ee3b4a3ee2d5f05f0aff8bc402273380c17f98f2709ac94e74ed3892cf8315910c6b91bc00f6b6eb70b513fa781d4f3bcddabbb5127b1927976957a1ee05746d1cbe0409e32f366d1538c17739bb6b1c570d522720ad59dd88067d887db522f204658912801b11abf2fe6fab96c60568a7899b3aeb4ebfc0e8c7570282bb7c34751a0689c428d949e643e1404cdbd0d24187f1ad45b430a987e1e4ae8efdc76ff77317dfe7e3c2caf88519826950088298a0ee27a0abed4b0de556ca7603b55c68edd89909d6f1d8134a87f9c3bd278d8bc055c67ff89dc19dc484ac9135bff29a1eb11b8349d1e6c22209f249b633ab06999e62ce4957e93143095b100ccc2228c253451c78111b1f7f560273a92384030ddeff4a436056ce345ca1459b5ae06b2efb3084802dadf5f77a1549c58cd86dcbc0e9ab0c71ae376614a4856b8ef0e9d194e28c560a9364bc7a03c25451e6b24c0fd033d88c22284ff23e25174347ce6a3af22e62a98e5b78daa810a498b608b8b479cf0e6431c8b2e9d35345cb5b439a0728ea2d22bf4d1e83d0b3d5126f915c0e83fcdfde6e147ae32ae8faff519f30f3932c983c8d4405eb731f81be9c53dbe408262e02d005a9fe9b25d6dea6bb036db724ebec478c394fa425298a7194752305c33130f857828a60be88a8df190a985bdbdcd857a771e52e47b3855a2037fcaa73838b95589860681f8312475cb791f7c32ce277d08a87bae5658320473cc5431133cb3baa64f71ca3124774bfe55b146c8cb921c7ed91e58f65e4127c3c3fcab9a8af04aef67b881ae11b87ab15b72fcb1545275967881396122680fd78dbd84ce70aecfa43e20cc9df6640120c8ae2b624379711b403f45558a814c7576cbb9cf7b11e7b940b9a3b3635a5219a64c57085f9d4e6ecbd51f092819935ff5f2993f354ca18a4c061d628422f2d9565f1b3233cf3a6e5e22cd65417466ef16824308665b493b18e69383283c301dcfe642337d9f5ce654585612b4f8630463e48f5d4acc51ee33bc26fa15e0f8b9afee73e9c7b273c48c2c73c9f6aea571aa7ee001c7650399c10741c0f137ccd3817e49e365e842a622ac9b81815bae84adf32a3a077e06d2754fdbe9ab1ec0e1fc5df2a131bee86226ebac9ca9fc34515bbcb1d0a5e56e64c9a232b4f587e213d57c3049b8f6136a8f8c54e5e8c121149787569230e766a62b2a81052344f5350cdf8506e022a5c505665a5fd53794df0fbc536167b05cb7e55599fa0491333c297f13bca95a715e5a9556fb80ea360f2840fd1e224214b0b8142bd7f937b6acad1db8f9e96b98692a882c6381ef47b2d7599da3f55653399141744299bd5b0a9f38686da14b12d6e59af0dd0f88c7bb656cd729769a2b8a84898cb2c868320376f18762893f9e392b3ef977200ef5b9a1efbc71d0a9f922f63bbc22be10a1b4aadd4763ca9ba56251f2005daab6758a1403e029106542e190d40a096cec0be45f1f42e8ff80419acdb7a17491c4651312589006b1b737100932d436299b8cded619797e56205c8cb7ad1e6a09978b62dd7db469030e809971108485095e8c9a3414ba25baadef0e21d980da3727b7c28a3ef2c2b99ac9f436cf987ed72135ea9156851ff3842f36d63e4bf73b2b54f739d4199dacf34ad917dc4367b3fb9c918125f2517198d98c31f1754e40080f446a32ec29a7b910d789f72622c7830f0f6102bce01d67729479d797fec3e632d2d55808e37f88055390884e543761a26e08bd7436c7c508f660a393b5cb5cc727f61031bdae2bc9ea4049a17d9a13e84b18bd21f0400a175844c4a0fd9724ffb737ede5adbf13d7be49e5762899dad4447156365dc96d4c9639e6e7be01cff16fc9ee7d8cb5506e7556f4b2b754897d1501854257b8247bc33d7dfbcbe5cf0c375cb71a41e35aba1e94f96e0fa2d56b0de02760195245b5a3460c9206e0b8e2398e5e4ec1a3c080645efdc32bf8f809b31f7ce02381a2fdefe0e26c417b0c7290a742272b0561e9f8d909f2417f1e3e2a736a1ed294bf5ed9656bc12b28d5103318d8b72338d73e04b7b3f79892353e1b23ef39cd4b4c7e163ee456fb595c621eccb5642391791f57e912d19b8ff7235b51e815b23ef0e75fe8e684ce3e6e71caaf05db9779dc75c00a8c7a8cec81087545ae091b284794f4736cac226ce1c6bfa5b56117479444a999b9063abbf22e9ef0a05b87f9d2eabc593ac285b0619539b04980adf7f4f8d020c698b02634d26861515107cc53899ab3506cd3c54a431f04bef61200b24771fefa9fb9db8783b714a41ae5dd89bc0b10945618c517607f10c051717f942746785016fef2ec9c4159d0474d42e55b4e1c007154ef5e0c1b0caf8391dbb8b20621b51995dc08ea48a921c07d4b61eea0a6f774fbd90a801ca728d421e11559d0e9eaf0cb8ab5704448d2fd71d128e65fdd378d2fc049f7c85a15b2f2671441b4e5d6632e1c8f46f47551d557a8c0b0f59535090dc7e4ee5c306b85c1a688c9fe3c2b4d37cadafff2efa2564d2f5269a6b27fdabb95fbc572a831d7b0d4391e1eec998f74a57cf027c261967e7eb928bd8031b7c921edc403f7f984da0ffe257a45a78efae752cf9ef62580477200eb5873b47b640cee5bc978930e0032963dcae355ce06e6ae955bdc26ae361d180a8c369ef837dedb3fbba5fa51d9f8b44705f086bceff2995cd2d6471e1adecb2b602d5f0f18cde45c6630d65dfc9eb05ab243cfb7c6dd6d730da14e073bb6567bf0831c80ff64e93f4700c462a4d705808399140616d1441760440842266797b89fdc7bf0d1836ceffea39694a032528d455ca1628628c9fd17453a39339565042197", 0xa00}], 0x4}}, {{&(0x7f0000001340)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001380)="4c7e7f0c89ff41ee1b6d0167be6811201b89f6faccb25b5c9932a5fb901347e48d2ec5a877626295a86cdca22390b48524df5ee108ab35c3df1b151afbf8a5b1dbd76766be17b72cfeeefa4428b4a1fc9f5c1f38f6a764797732292183c8256b07f607c19d0535208de6949ab30b6e4c26b07f04d0e60e1908618a83227b16ab8b2c38cb619825cb04e1d45be5366517da478d18f5bbdfce7819a3cfc76778328b84d5129954cb412121ff0e", 0xac}, {&(0x7f0000001440)="da18993ea39b69df8407d11ac866ea95cca89e11e1dc118c4f8da73dfbbfd27d1852c6c6f9b24693117bb75e6f8351c179eeda5424540554cd888b0df2b50bc1d95561774c3565abeb732931e7b0a02b887cce83759b85e10e09ff17075fe0f3e62b1e260954b8443d8c970600429910a6b13684f3a66c5aa65dd2b7a2c3f80846285113144cfa4f043e0099d0489efa521e43f36b9c2b4b3bdcd0fda90ab30db4b907fbe038600c38f3e8694ae7c6d1e575033d10d19664b4cd9477d695be3de776f6d84ff3ba2c35", 0xc9}, {&(0x7f0000001540)="9b5f74378c34feeeac042e2e09a02239105c916ab59f1dc72fa46d34415365ed2a547ebebfe5443a6ac2dd65a43c3a62383b37b1163afc4ab245d6d49a0f1fd3bb6a615bd40eacb3", 0x48}, {&(0x7f00000015c0)="394b2580c09ad6a2a7d7069a3bdf72c03ac7e4caaa0f493aeb0b62e1c63d6ad42d8f52f4df1c7f055394480c97257800d296ff7d7c7f2901858e6d82efcb960a73c368516678ee7c8cab4722baa47a215b65c7f900734ae72a1309e2adbe31a12168f6553d97dcd6d82a8dce8c8e5c2fdb7f31af3414a55c576228f05ce3f5ef4173515635bcba3d45f616a3866a1cbb253cf854af468ec45f5a33391384df794f27a5f55027b2f9e6ec6f6cfd0ac32df3fde6729008eadca2cb153c9f4fb25650d5a2aa156c2c13", 0xc8}, {&(0x7f00000016c0)="92e0f7583af10e25b53d34080242458c068486465c9932304daa16def57b5e1c047d31122656ddd6665be60060a2b90c42bee8b87bf76281a4b986c7d8ae82848eb1839e38e141acaf04e215ec4e33033e669d77988c3ea8b8259046af51c553f0f9bcf849a2a6a9f5c3a684", 0x6c}, {&(0x7f0000001740)="191e1f317a4342f4b8ff8bdb59f2dc9e28ab268b35768e7a958319cc638349354a590397b50770e90c05f4c046c8007cd9cfdb6005c5b29c1f54c5c1e89e4fc605e2f3e193b0fc640b3fa1e9206736adc4a03c9149a0dab49d823de65ce5c5c1c49a1821effdc92e3b0f5c0e2681aa8b795943683d24b6dbbeabf693c1c3a09823f360a4771dd351d09e155301f223cb1c2951eb49015a8fd63b7a5d0a2666199f60fe7d23a475cede225f48e716b7fc4d88e7bce752948d1b999892dcafdbf0615a154ec776da24714e3cf0a53e4819b0e491b2a2e4b0c4d5c94019fafe65", 0xdf}, {&(0x7f0000001840)="3bb5b1cd428263e5bf61747fa1ed51ca6e0a0aacdae0a496e2790e046e360a8d5bbb995eeedfe00c2efedd360e71db63d064074fde52138bbaf53db5c7eb4adb634f536ec2b3fb551df06f0a5b50cf85397658f0cf55b3b6153efa31d4625ea00d463433550491ff7144c63c3298d39d086ce2", 0x73}, {&(0x7f00000018c0)="e187becbeba5f5a32fb36bd39cbc63420503fb2b63e9900de47e3e93424b6291273c83a7f55195b46d261874095e8cac31fc42d26a99ee2d67b082bcd3539d050005b2bab058554bbb790d46da8b75ace50bf8349a501d7cbc25ca1a3848e06d228d68ed0c4770ea36610cc735367939826cc14b8cc39c4a5c5e64d87bbb74c197025727cd47095e564f344408f3ba526eea356c2cf55bd175616a93efa3db6738a119c763b6c52ef4d551b466a4de0a2e4eacc16e8a628b3b87be6de2f03bc5463cf32f5f80ef1ab39a4c88dfffb25ff7cc1182ceec", 0xd6}], 0x8, &(0x7f0000001a40)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x0, 0xb, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim, @pad1]}}}], 0xa0}}], 0x2, 0x0) 05:16:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1501.878543][T21871] netlink: 956 bytes leftover after parsing attributes in process `syz-executor.2'. 05:16:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000480)={0x14}, 0x14) 05:16:31 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, 0x20) 05:16:31 executing program 0: io_setup(0x1ff, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000140)) io_getevents(r0, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0) io_destroy(r0) 05:16:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) [ 1502.269344][T21877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:31 executing program 1: syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80281) 05:16:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) [ 1502.776232][T21878] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:31 executing program 4: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x541b, 0x0) [ 1502.919905][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:32 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 05:16:32 executing program 0: syz_open_dev$vcsn(0x0, 0x0, 0x0) io_setup(0xffff, &(0x7f00000001c0)) 05:16:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:32 executing program 4: getresuid(&(0x7f0000000080), &(0x7f0000000040), &(0x7f00000000c0)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x3000)=nil) 05:16:32 executing program 3: bpf$BPF_PROG_QUERY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x40840) [ 1504.025875][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xb9, &(0x7f0000000180)=""/185, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1504.391591][T21904] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:33 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 05:16:33 executing program 0: mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:16:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) [ 1504.657863][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:33 executing program 2: open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000, 0x1}], 0x48, &(0x7f0000000100)) 05:16:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x18}}], 0x2, 0x0) 05:16:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 05:16:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000001, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}, {0x0, 0x0, 0x10e00}], 0x2010080, &(0x7f0000000800)={[{@uni_xlateno}, {@rodir}, {@shortname_lower}, {@utf8}, {@fat=@dmask}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) [ 1505.498527][T21922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:34 executing program 0: mlock2(&(0x7f0000fea000/0x3000)=nil, 0x3000, 0x0) [ 1505.648707][T21923] loop2: detected capacity change from 0 to 8 [ 1505.724181][T21923] Dev loop2: unable to read RDB block 8 [ 1505.730170][T21923] loop2: unable to read partition table [ 1505.825816][T21923] loop2: partition table beyond EOD, truncated [ 1505.832924][T21923] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock 05:16:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x14}}, 0x0) [ 1506.053504][T21928] __nla_validate_parse: 2 callbacks suppressed [ 1506.053577][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1506.147760][T21932] loop4: detected capacity change from 0 to 270 05:16:35 executing program 3: io_setup(0x1fc, &(0x7f0000000180)=0x0) io_destroy(r0) 05:16:35 executing program 2: mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x0, 0x133, 0xffffffffffffffff, 0x0) 05:16:35 executing program 0: clock_gettime(0x4, &(0x7f00000002c0)) 05:16:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:35 executing program 4: socketpair(0xa, 0x2, 0x401, &(0x7f0000000080)) 05:16:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x7d) 05:16:36 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xd5, &(0x7f0000000100)=""/213, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:16:36 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) [ 1507.151877][T21943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:36 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80001) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x200001d8) [ 1507.342132][T21943] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:36 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x400) [ 1507.495773][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:36 executing program 1: bpf$BPF_PROG_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:36 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000040), 0x48) 05:16:37 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) [ 1508.265522][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.272205][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 05:16:37 executing program 4: sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80001) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0xfdef) 05:16:37 executing program 1: io_setup(0xffff, &(0x7f00000001c0)) io_setup(0x4, &(0x7f0000000040)) [ 1508.409077][T21962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:37 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 05:16:37 executing program 0: socketpair(0x10, 0x0, 0x5, &(0x7f0000000040)) 05:16:37 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) [ 1508.783848][T21965] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1508.834445][T21970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:38 executing program 4: pipe(&(0x7f0000000a40)={0xffffffffffffffff}) read$rfkill(r0, &(0x7f0000000000), 0x8) 05:16:38 executing program 2: socket$inet(0x2, 0x80005, 0x3f) 05:16:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:38 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0) 05:16:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 05:16:38 executing program 1: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) [ 1509.618811][T21987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1509.988679][T21988] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1510.133422][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:39 executing program 3: mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) 05:16:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000200)=0x10001, 0x4) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18"], 0x18}}], 0x1, 0x0) 05:16:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x109c21) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x18) 05:16:39 executing program 2: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x6}, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 05:16:39 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) 05:16:40 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x0) 05:16:40 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 05:16:40 executing program 0: pipe(&(0x7f0000000a40)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 05:16:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x20, 0x4) 05:16:40 executing program 2: r0 = socket(0x1, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) [ 1511.121781][T22002] __nla_validate_parse: 2 callbacks suppressed [ 1511.121854][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:40 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000140)='\x00', &(0x7f0000000300)=[&(0x7f0000000180)='}/\x00'], 0x0, 0x1000) 05:16:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x10001}]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) 05:16:40 executing program 2: syz_clone(0x5088e000, 0x0, 0x0, 0x0, 0x0, 0x0) 05:16:40 executing program 0: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004) 05:16:40 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1c9e83, 0x0) [ 1511.885729][T22025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1512.096039][T22027] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1512.154797][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:41 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000980)=[&(0x7f00000007c0)='/dev/vcsa\x00'], 0x0) 05:16:41 executing program 1: syz_clone3(&(0x7f00000014c0)={0x10000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:16:41 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$rfkill(r0, &(0x7f00000000c0), 0x8) 05:16:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x600, 0x0, 0x2, 0x1}, 0x20) 05:16:41 executing program 3: syz_mount_image$erofs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1512.931658][T22046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r2}}}], 0x28}}], 0x2, 0x0) 05:16:42 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) [ 1513.187717][T22048] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:42 executing program 4: r0 = socket(0x1, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x2) [ 1513.252761][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:42 executing program 2: pipe(&(0x7f0000000a40)) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 05:16:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:42 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001f000000000000000000000001008000"], 0x14}}, 0x0) 05:16:42 executing program 1: r0 = epoll_create(0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) 05:16:42 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0x16, 0x0, 0x0, 0x0}, 0x20) 05:16:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0xf}}], 0x2, 0x4) [ 1513.947902][T22062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:43 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 05:16:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 1514.169777][T22065] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1514.311478][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:43 executing program 0: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x1000)=nil) 05:16:43 executing program 1: r0 = socket(0x1, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:16:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff}, 0x20) 05:16:43 executing program 2: syz_clone3(&(0x7f00000014c0)={0x10000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:16:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@empty, 0x0, r1}) 05:16:44 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x2106, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = creat(0x0, 0x0) ftruncate(r1, 0x800) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) lseek(0xffffffffffffffff, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x396e, 0x7}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x8000000000000001, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}, {0x0, 0x0, 0x10e00}], 0x2010080, &(0x7f0000000800)={[{@uni_xlateno}, {@rodir}, {@shortname_lower}, {@utf8}, {@fat=@dmask}]}) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x0) 05:16:44 executing program 1: syz_mount_image$exfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 05:16:44 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000040), 0x48) 05:16:44 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe06f17bc60f8050f, 0x0, 0x0}, 0x20) 05:16:44 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x3, 0x6) 05:16:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1515.677078][T22092] loop0: detected capacity change from 0 to 270 05:16:44 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 05:16:45 executing program 0: io_setup(0x1ff, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r0, 0x1, 0x1, &(0x7f0000000240)=[{}], &(0x7f00000001c0)={0x0, r1+10000000}) io_destroy(r0) 05:16:45 executing program 4: bpf$MAP_CREATE(0x1b, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 05:16:45 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x48, &(0x7f0000000100)) 05:16:45 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) [ 1516.353984][T22103] __nla_validate_parse: 3 callbacks suppressed [ 1516.354147][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:45 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 05:16:45 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xe) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x2000011a) 05:16:45 executing program 0: pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) [ 1516.882809][T22104] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1516.920340][T22117] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock 05:16:46 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x68803) [ 1516.984552][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:46 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x1000)=nil) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) 05:16:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:46 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:16:46 executing program 0: bpf$MAP_CREATE(0x2, &(0x7f0000000040), 0x48) 05:16:46 executing program 3: syz_mount_image$exfat(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000680)=ANY=[]) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) [ 1517.794924][T22128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:47 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x9b, &(0x7f00000001c0)=""/155, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1518.087832][T22131] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1518.199511][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:47 executing program 1: socket(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, 0x0, &(0x7f00000002c0), 0x0) 05:16:47 executing program 0: syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000000)="9c") r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xfe, 0x0, 0x2}}, [{}]}}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write(r0, 0x3, 0x0, &(0x7f0000000c40)) open_tree(0xffffffffffffffff, &(0x7f0000000d00)='./file0/file0\x00', 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000002400)={0x2c, &(0x7f0000002080)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, &(0x7f0000002380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x80, 0x0, "5fe14935", "d88883de"}}, 0x0}, 0x0) 05:16:47 executing program 3: fchownat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0xee00, 0x0) 05:16:47 executing program 4: bpf$MAP_CREATE(0x11, &(0x7f0000000040), 0x48) 05:16:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x0) 05:16:48 executing program 1: r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r1, r0, 0x900) [ 1519.098027][T22148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:48 executing program 3: bpf$MAP_CREATE(0x22, &(0x7f0000000040), 0x48) [ 1519.214632][T13478] usb 1-1: new high-speed USB device number 16 using dummy_hcd 05:16:48 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0}, 0x20) 05:16:48 executing program 4: io_setup(0xa0ce, &(0x7f0000000000)=0x0) io_destroy(r0) [ 1519.497665][T22150] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1519.645672][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:48 executing program 1: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 1519.703071][T13478] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1519.716439][T13478] usb 1-1: config 1 interface 0 has no altsetting 0 05:16:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0) [ 1520.023841][T13478] usb 1-1: string descriptor 0 read error: -22 [ 1520.030697][T13478] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1520.040298][T13478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.527972][T22170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1520.627118][ T8417] usb 1-1: USB disconnect, device number 16 05:16:50 executing program 0: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="f2", 0x1}], 0x48, &(0x7f0000000100)) 05:16:50 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000040), 0x9) 05:16:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) 05:16:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 05:16:50 executing program 3: syz_usb_connect(0x0, 0x29f, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xcc, 0xfb, 0xee, 0x10, 0xaf0, 0x8800, 0xbc48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x2c, 0xb7, 0x40, 0x0, [@uac_control={{}, [@output_terminal={0x9}, @input_terminal={0xc}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xc1, 0x0, "95026f933fe942209994d41fdfa86154f4821bf80b4e037a158bb2b7d6be208ac147ca39edf1df6a246546d3643fd2677e5cd7976439862f33244b429fefa358901fda80b5d224997a96a159801b79bfdad1592c6f663e6c87a0bafb8c0a3d2cf28d1dc25c3b85036ab47e501a95e99231803a60dd2e4220c182d5085d979682e625f79c0367d6d5396396d1d36254677607125cf00080ee2a9e9ff59d2f069224dcaad4127ecf3642e22a82bcd69a164fed14fe91a7fae8fa051d91e9160f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xeb, 0x0, "4dac3f80f74a58a689e426520f60639d998d77008f2d9c960c81b2213ad237e9ec398b1f841ff9c649a66cc236b1da91ad1a36f991250b611520feca9d46d65b0b2f649b51c94d7c5951dc82c0bf6bf7aff861d30a1d2dc5f2b41252f527cf62016a6cfd1e0a9479ea897a098fc6d1c5741702ef4da95e5bb2f41e8969e9f1457dad58cf3b0e0fdcc5458f85f07ed1573ffb4bfd0322a3d9921e54014dcab7056bc62ae45e2d073486f0ccb5da6f5cb0f3f2cc062f5701bbef731950fb33a1ebde63d8a55b543e5f22d7adc74fffc7ac5a486c26d1902a37e5fe8a422c6a4544ad5631ad60d4baeee7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x1f, 0x0, "086f12c5a118bca8699f3bf7ac159970d2b4e1df93074f131297fda3f4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x44, 0x0, "1ba1143e919d8f2b18d26350d7eeb2416b162f435741147e32bda1f9cf4a9687078a2a3ef64054af1eb89e6999c931db5d8349edbe7f6505696334101288b23e132b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x21, 0x0, "21984e7ed9c4a98e060c4574b441b5dc63590a73b7f7bbb67b7e577deec1be"}]}}]}}]}}]}}, 0x0) 05:16:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1521.564291][T22183] __nla_validate_parse: 2 callbacks suppressed [ 1521.564366][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:50 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x80000000, 0x68ef, 0x1000000080000, 0x7}) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r1, 0xf36, 0x100000000, 0xffffffffffffffc2, 0x41c}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r4, &(0x7f0000000240), 0x100000000008) write$P9_RCREATE(r0, 0xfffffffffffffffe, 0x0) 05:16:50 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x80001) write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18}, 0x200001d8) 05:16:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18}, 0x48) [ 1521.783437][ T8417] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1522.027968][ T8417] usb 4-1: Using ep0 maxpacket: 16 [ 1522.136412][T22189] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 1522.154239][ T8417] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1522.324990][ T8417] usb 4-1: New USB device found, idVendor=0af0, idProduct=8800, bcdDevice=bc.48 [ 1522.334713][ T8417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.344011][ T8417] usb 4-1: Product: syz [ 1522.348391][ T8417] usb 4-1: Manufacturer: syz [ 1522.353292][ T8417] usb 4-1: SerialNumber: syz [ 1522.470330][T22185] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:51 executing program 0: syz_clone(0x1800600, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1522.584287][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1522.675758][ T8417] usb 4-1: config 0 descriptor?? [ 1522.716111][ T8417] hso 4-1:0.0: Not our interface 05:16:51 executing program 4: bpf$BPF_PROG_QUERY(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:16:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1522.988056][ T8417] usb 4-1: USB disconnect, device number 18 05:16:52 executing program 1: syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000380), 0x0, 0x0, 0x0}, 0x58) 05:16:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x541b, 0x0) [ 1523.575659][T22206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:52 executing program 0: io_setup(0xefff, &(0x7f0000000040)) io_setup(0x1ff, &(0x7f0000000180)=0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80001) syz_open_dev$rtc(&(0x7f0000000080), 0x1ff, 0x80) io_getevents(r0, 0x0, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000001c0)) io_destroy(r0) 05:16:52 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x989680}, 0x0) 05:16:52 executing program 2: r0 = socket(0x1, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 05:16:52 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) [ 1524.092862][T22209] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:53 executing program 4: socket$inet(0x2, 0x3, 0x63) [ 1524.177308][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:53 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2a2000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x10, r0, 0x0) 05:16:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xc54, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) 05:16:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:53 executing program 1: r0 = socket(0x1, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@dontfrag={{0x14}}], 0xf}}], 0x1, 0x0) 05:16:53 executing program 0: mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 05:16:54 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x7fffffff}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 05:16:54 executing program 3: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}, {0x0, 0x0, 0x10e00}], 0x2010080, &(0x7f0000000800)={[{@uni_xlateno}, {@rodir}, {@shortname_lower}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 05:16:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002580)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'caif0\x00', 'pimreg\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'geneve0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@local, @private2, [], [], 'vxcan1\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) [ 1525.187606][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 05:16:54 executing program 0: io_setup(0xc7, &(0x7f0000000040)) 05:16:54 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) [ 1525.633487][T22237] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1525.716926][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1525.728594][T22243] loop3: detected capacity change from 0 to 270 05:16:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5411, 0x0) 05:16:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:55 executing program 3: request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/dev/vcsu\x00', 0x0) 05:16:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) 05:16:55 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 05:16:55 executing program 4: io_setup(0x1ff, &(0x7f0000000180)=0x0) io_destroy(r0) 05:16:55 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) [ 1526.586788][T22257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:55 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000040), 0x48) 05:16:55 executing program 3: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x1000, 0x1}], 0x0, 0x0) 05:16:55 executing program 0: r0 = getpgrp(0x0) syz_clone3(&(0x7f0000000780)={0xc2004000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0], 0x1}, 0x58) 05:16:56 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 1527.025063][T22265] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1527.052803][T22269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1527.122058][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@rthdr_2292={{0x28, 0x29, 0x2, {0x30, 0x2, 0x0, 0x0, 0x0, [@local]}}}], 0x28}}], 0x2, 0x0) [ 1527.295432][T22273] loop3: detected capacity change from 0 to 8 05:16:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) [ 1527.474683][ T2849] Dev loop3: unable to read RDB block 8 [ 1527.480643][ T2849] loop3: unable to read partition table [ 1527.526678][ T2849] loop3: partition table beyond EOD, truncated 05:16:56 executing program 4: open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="f2", 0x1}], 0x48, &(0x7f0000000100)={[{@fault_injection}]}) 05:16:57 executing program 1: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000) 05:16:57 executing program 2: pkey_mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) [ 1528.090928][T22282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1528.163744][T22286] erofs: Unknown parameter 'fault_injection' 05:16:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x8000000}, 0x1c, 0x0}}], 0x2, 0x0) 05:16:57 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000040), 0x48) [ 1528.358626][T22285] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1528.505895][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:16:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:16:57 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xcc, 0xfb, 0xee, 0x10, 0xaf0, 0x8800, 0xbc48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xb7, 0x40, 0x0, [@uac_control]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0x3, 0x66}}]}}]}}, 0x0) [ 1529.349717][T22299] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1529.395673][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1529.702941][ T3565] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1529.963014][ T3565] usb 3-1: Using ep0 maxpacket: 16 [ 1530.083022][ T3565] usb 3-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 1530.093866][ T3565] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1530.273313][ T3565] usb 3-1: New USB device found, idVendor=0af0, idProduct=8800, bcdDevice=bc.48 [ 1530.282941][ T3565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.291191][ T3565] usb 3-1: Product: syz [ 1530.295769][ T3565] usb 3-1: Manufacturer: syz [ 1530.300577][ T3565] usb 3-1: SerialNumber: syz [ 1530.325191][ T3565] usb 3-1: config 0 descriptor?? [ 1530.375581][ T3565] hso 3-1:0.0: Not our interface [ 1530.589070][ T8417] usb 3-1: USB disconnect, device number 23 05:17:00 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x14}, 0x37fe0}}, 0x0) 05:17:00 executing program 1: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0xffffffffffffffff) 05:17:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x3, 0x9}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) 05:17:00 executing program 4: pipe2$9p(&(0x7f0000000000), 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x1000)=nil) 05:17:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x400}, 0x20) [ 1531.251570][T22310] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1531.325297][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:00 executing program 4: io_setup(0x3, &(0x7f0000000540)) io_setup(0x1ff, &(0x7f0000000180)=0x0) io_setup(0x7, &(0x7f0000000000)) io_destroy(r0) 05:17:00 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x80001) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), 0x0, 0x1015, 0x0) 05:17:00 executing program 1: pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x10, 0x0, 0x0, 0x0}, 0x20) 05:17:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000480), 0x4) 05:17:00 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x2}, 0x0) 05:17:01 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 05:17:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') read$usbmon(r0, 0x0, 0x1000000) 05:17:01 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000001300000900000000000100", @ANYRES64=0x2710], 0x48}}, 0x0) [ 1532.258637][T22325] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:01 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0xc0502100, &(0x7f0000000100)) [ 1532.405635][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:01 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x4, 0x30, 0xffffffffffffffff, 0x0) [ 1532.851639][ T24] audit: type=1326 audit(1659331021.897:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=22335 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7549 code=0x0 05:17:01 executing program 1: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x80) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1532.992204][T22339] loop2: detected capacity change from 0 to 131456 [ 1533.113245][T22339] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1533.124858][T22339] EXT4-fs (loop2): group descriptors corrupted! [ 1533.131076][T22343] loop4: detected capacity change from 0 to 131456 [ 1533.145867][T22342] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1533.223972][T22184] I/O error, dev loop2, sector 131328 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1533.256961][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1533.305996][T22343] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended 05:17:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1533.408790][T22343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 05:17:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000002140)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r0, 0x4000000043) accept4$inet6(r0, 0x0, 0x0, 0x0) [ 1533.578252][ T24] audit: type=1804 audit(1659331022.627:36): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1349650115/syzkaller.hnuL1a/1246/bus" dev="sda1" ino=1156 res=1 errno=0 05:17:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:02 executing program 0: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x80) r1 = open(&(0x7f0000000240)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 05:17:02 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@kfunc={0x85, 0x0, 0x4, 0x4c00}]}, &(0x7f0000002700)='GPL\x00', 0x7, 0xf6, &(0x7f0000002740)=""/246, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1533.838488][ T3513] EXT4-fs (loop4): unmounting filesystem. [ 1533.908873][T22353] loop2: detected capacity change from 0 to 131456 [ 1534.050702][T22353] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1534.062618][T22353] EXT4-fs (loop2): group descriptors corrupted! [ 1534.077044][T22356] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1534.151654][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x8}, 0x8) [ 1534.396183][T22364] loop0: detected capacity change from 0 to 87 05:17:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1534.488571][T22365] loop4: detected capacity change from 0 to 131456 [ 1534.580796][ T24] audit: type=1804 audit(1659331023.627:37): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir142000099/syzkaller.ZDQhc1/1326/file1/bus" dev="sda1" ino=1158 res=1 errno=0 [ 1534.607680][ T24] audit: type=1800 audit(1659331023.627:38): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1158 res=0 errno=0 [ 1534.704121][T22365] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1534.760591][T22365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 05:17:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fallocate(r2, 0x0, 0x1000000, 0x1000f4) [ 1534.949444][ T3513] EXT4-fs (loop4): unmounting filesystem. 05:17:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000001300100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1535.211057][T22372] loop2: detected capacity change from 0 to 131456 [ 1535.334283][T22374] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1535.378306][T22372] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1535.389870][T22372] EXT4-fs (loop2): group descriptors corrupted! 05:17:04 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sendfile(r1, r2, 0x0, 0xffffdffa) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) [ 1535.448268][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1535.670061][T22376] loop4: detected capacity change from 0 to 131456 [ 1535.753649][T22379] loop0: detected capacity change from 0 to 4096 [ 1535.815474][T22380] loop3: detected capacity change from 0 to 131456 [ 1536.019798][T22376] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1536.039593][T22380] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1536.115913][T22376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1536.133747][T22379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1536.160116][T22380] ext4 filesystem being mounted at /root/syzkaller-testdir3241779197/syzkaller.XZrJss/1380/file0 supports timestamps until 2038 (0x7fffffff) [ 1536.172588][ T24] audit: type=1800 audit(1659331025.217:39): pid=22389 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 1536.243536][T22391] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1536.260922][T22395] loop2: detected capacity change from 0 to 131456 [ 1536.364710][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000100)=0x8) 05:17:05 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x1) [ 1536.471497][T22395] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1536.482955][T22395] EXT4-fs (loop2): group descriptors corrupted! 05:17:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1536.542717][ T3515] EXT4-fs (loop3): unmounting filesystem. 05:17:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1536.725406][ T3513] EXT4-fs (loop4): unmounting filesystem. 05:17:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="230000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1537.433563][T22407] loop4: detected capacity change from 0 to 131456 [ 1537.457323][T22406] loop2: detected capacity change from 0 to 131456 [ 1537.592196][T22407] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1537.690295][T22407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1537.929071][ T3513] EXT4-fs (loop4): unmounting filesystem. [ 1538.046880][T22412] __nla_validate_parse: 2 callbacks suppressed [ 1538.046957][T22412] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1538.214897][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1538.670295][ T24] audit: type=1800 audit(1659331027.717:40): pid=22381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1160 res=0 errno=0 05:17:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000100)=0x8) 05:17:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x25, 0xb}, 0x18}}, 0x0) 05:17:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:07 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}}]}, 0x94}}, 0x0) 05:17:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1538.933572][T22419] loop2: detected capacity change from 0 to 131456 [ 1538.957889][ T3511] EXT4-fs (loop0): unmounting filesystem. [ 1538.976115][T22422] loop4: detected capacity change from 0 to 131456 [ 1539.002991][T22423] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1539.086106][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000100)=0x8) 05:17:08 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}}]}, 0x94}}, 0x0) 05:17:08 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1539.724990][T22432] loop4: detected capacity change from 0 to 131456 05:17:08 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40000) 05:17:08 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={r2}, &(0x7f0000000380)=0x10) [ 1539.920363][T22435] loop2: detected capacity change from 0 to 131456 05:17:09 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000002140)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x4000000043) accept4$inet6(r0, 0x0, 0x0, 0x0) 05:17:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1540.035066][T22437] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1540.145257][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x3}]}]}]}}]}, 0xa4}}, 0x0) [ 1540.540818][T22449] loop4: detected capacity change from 0 to 131456 05:17:09 executing program 3: syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x5, 0x4) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1540.689751][T22451] loop2: detected capacity change from 0 to 131456 [ 1540.876320][T22453] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1540.981804][T22453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1541.155065][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:17:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1541.255115][T22457] loop3: detected capacity change from 0 to 87 05:17:10 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000002140)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x4000000043) accept4$inet6(r0, 0x0, 0x0, 0x0) 05:17:10 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) [ 1541.397022][ T24] audit: type=1804 audit(1659331030.437:41): pid=22457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3241779197/syzkaller.XZrJss/1385/file1/bus" dev="sda1" ino=1167 res=1 errno=0 [ 1541.509693][T22461] loop2: detected capacity change from 0 to 131456 05:17:10 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) [ 1541.561017][T22462] loop4: detected capacity change from 0 to 131456 05:17:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1541.841676][T22464] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1542.233166][ T8417] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1542.331537][T22476] loop2: detected capacity change from 0 to 131456 [ 1542.379480][T22478] loop4: detected capacity change from 0 to 131456 [ 1542.443897][T15629] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1542.473647][ T8417] usb 1-1: Using ep0 maxpacket: 16 05:17:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1542.633529][ T8417] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1542.693804][T15629] usb 4-1: Using ep0 maxpacket: 8 05:17:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1542.714747][ T8417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.726251][ T8417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.736428][ T8417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1542.746530][ T8417] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1542.756730][ T8417] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1542.766767][ T8417] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1542.863583][T15629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.876084][T15629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.886248][T15629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1542.896339][T15629] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1542.906501][T15629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1542.916498][T15629] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 05:17:12 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) [ 1543.060131][T22481] loop2: detected capacity change from 0 to 8 [ 1543.101069][T22481] Dev loop2: unable to read RDB block 8 [ 1543.107278][T22481] loop2: unable to read partition table [ 1543.130664][T22483] __nla_validate_parse: 5 callbacks suppressed [ 1543.130738][T22483] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1543.151089][T22481] loop2: partition table beyond EOD, truncated [ 1543.167702][T22481] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (4 blocks) [ 1543.180872][T22483] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1543.193872][ T8417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1543.203439][ T8417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.213344][ T8417] usb 1-1: Product: syz [ 1543.217730][ T8417] usb 1-1: Manufacturer: syz [ 1543.223044][ T8417] usb 1-1: SerialNumber: syz [ 1543.286576][T15629] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1543.288114][T22486] loop4: detected capacity change from 0 to 131456 [ 1543.296464][T15629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.311183][T15629] usb 4-1: Product: syz [ 1543.317162][T15629] usb 4-1: Manufacturer: syz [ 1543.321975][T15629] usb 4-1: SerialNumber: syz [ 1543.331504][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1543.391030][T15629] cdc_ether: probe of 4-1:1.0 failed with error -22 05:17:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1543.600872][T15629] usb 4-1: USB disconnect, device number 19 [ 1543.619773][ T8417] cdc_ncm 1-1:1.0: bind() failure [ 1543.640881][ T8417] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1543.648096][ T8417] cdc_ncm 1-1:1.1: bind() failure [ 1543.776955][ T8417] usb 1-1: USB disconnect, device number 17 [ 1544.013862][T22491] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1544.024911][ T3565] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1544.062705][T22493] loop2: detected capacity change from 0 to 8 [ 1544.066910][T22495] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1544.092819][T22494] loop4: detected capacity change from 0 to 140 [ 1544.099092][ T2849] Dev loop2: unable to read RDB block 8 [ 1544.105495][ T2849] loop2: unable to read partition table [ 1544.115472][ T2849] loop2: partition table beyond EOD, truncated [ 1544.141096][T22493] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (4 blocks) 05:17:13 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x68, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x0, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "d19c3b06"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x4, 0x2}, [@mdlm_detail={0xe, 0x24, 0x13, 0xf8, "4f6fc352fae59a490f61"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x0, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x80, 0x0, 0x6}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x7f, 0xb7, 0x0, 0xff, 0x20}, 0x102, &(0x7f0000000400)={0x5, 0xf, 0x102, 0x6, [@ptm_cap={0x3}, @generic={0xc8, 0x10, 0xa, "d28874ae8ff9fe018fe6c7ee1bae3cc53a89f1d3374c7085b3bc21445e929c94536543e896f0fac20f83a04f4a817705ead1790d27fea07555a9edc6755d6ca11d5347803c580c5d7b0e82a07dbb894945fd2d825d8bafa23b3c765cb7f303914e01c29501517141633bdc5daf0098d3c24dd7b89c3ff100bbfff4729e15abe418c8ac8e87cbf9bca0d55e15ac190434c86182cdb17b5e511218e8d1c8ad362d1457bbc76a69a8eca81b8773e63582dc87805333e3377beaa4ba4df1718c9aa9c6616073f5"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xd, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x2f, 0x11, 0x7f, [0xc0cf, 0xff0180]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "44b0c20c928ff3fbe2d266de634bc03b"}]}, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x852c6689fc805d6a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x448}}]}) syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x202000) [ 1544.174048][T22494] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (70 blocks) [ 1544.196739][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:13 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 'syz1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6}, 0x10) sendmsg$AUDIT_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x300, 0x0, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x48081) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2, r0, 0x7ff}, 0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000380)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x430001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@bridge_delneigh={0x6c, 0x1d, 0x200, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0x5, 0x8, 0x3ff, 0xfff}}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_PROTOCOL={0x5, 0xc, 0x3f}, @NDA_SRC_VNI={0x8, 0xb, 0xa953}, @NDA_CACHEINFO={0x14, 0x3, {0x401, 0x2, 0xfffffff8, 0x1}}, @NDA_SRC_VNI={0x8, 0xb, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) fanotify_init(0x0, 0x400) bind$packet(r1, &(0x7f0000000780)={0x11, 0x9, 0x0, 0x1, 0xc0}, 0x14) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x34}}, 0xc041) syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x80, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "f598d66358d6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x8, 0x7ff}, {0x6, 0x24, 0x1a, 0x7}, [@country_functional={0x6, 0x24, 0x7, 0x12, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0xff}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xd9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x3, 0x1f, 0x81, 0x40, 0x6}, 0x10, &(0x7f00000009c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x16, 0x7f, 0x0, 0x2}]}, 0x3, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x408}}, {0x7a, &(0x7f0000000a40)=@string={0x7a, 0x3, "a954e742aaf50b2876bc74d9a61cde4711a2ebe63aefe743a8e031fb7b0035b767a65f61ee0f6eaa7bd51cbe5d0d2bb541b5bfb32c3ee16db7cf81989f53986ec1b385b5cbf8d784cbc7832f3d9977aceab60ab20c7b66894fdf4829a78d65ef68a4026b412ecb64d7c704ce2b52999c16a16b7de782b3eb"}}, {0x2, &(0x7f0000000ac0)=@string={0x2}}]}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000, 0x0) [ 1544.292656][ T3565] usb 2-1: Using ep0 maxpacket: 8 05:17:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1544.434665][ T3565] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 05:17:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1544.634733][ T3565] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1544.644239][ T3565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.652603][ T3565] usb 2-1: Product: syz [ 1544.656984][ T3565] usb 2-1: Manufacturer: syz [ 1544.661803][ T3565] usb 2-1: SerialNumber: syz [ 1544.805369][T22488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1544.877813][T22488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1544.896727][ T3565] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1544.923241][ T8417] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1544.956792][T22503] loop2: detected capacity change from 0 to 8 [ 1544.968741][T22505] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1544.993377][T22506] loop4: detected capacity change from 0 to 140 [ 1545.008716][T22505] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1545.038049][T22503] Dev loop2: unable to read RDB block 8 [ 1545.044266][T22503] loop2: unable to read partition table [ 1545.065271][T22506] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (70 blocks) [ 1545.066986][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1545.088359][T22503] loop2: partition table beyond EOD, truncated [ 1545.103593][T22503] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (4 blocks) [ 1545.133353][T15629] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1545.141853][ T3583] usb 2-1: USB disconnect, device number 8 05:17:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) [ 1545.323223][ T8417] usb 1-1: not running at top speed; connect to a high speed hub [ 1545.414074][ T8417] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1545.543851][T15629] usb 4-1: not running at top speed; connect to a high speed hub [ 1545.613885][ T8417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.623690][ T8417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.631972][ T8417] usb 1-1: Product: syz [ 1545.636581][ T8417] usb 1-1: Manufacturer: ш [ 1545.641320][ T8417] usb 1-1: SerialNumber: syz [ 1545.648272][T15629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1545.659588][T15629] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1545.729070][T22508] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x27, 0x5, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=""/229, &(0x7f0000000200)=0xe5) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000303798ec21c"], 0x28}}, 0x0) [ 1545.836648][T22498] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1545.863935][T15629] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1545.874783][T15629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.883178][T15629] usb 4-1: Manufacturer: 咩䋧⠋뱶Ღ䟞ꈑä§î‚¨ï¬±{뜵ꙧ慟࿮ꩮ핻븜àµë”«ë•ëŽ¿ã¸¬æ·¡ì¾·é¢åŽŸæº˜ë떅蓗쟋⾃餽걷뛪눊笌襦⥈趧ꑨ欂â¹æ“‹ìŸ—츄别鲙ꄖ絫苧 [ 1545.902871][T15629] usb 4-1: SerialNumber: syz [ 1545.937217][T22512] loop4: detected capacity change from 0 to 140 05:17:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) 05:17:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1546.004392][T22500] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1546.035684][T22512] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (70 blocks) [ 1546.193462][T21858] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1546.196395][ T8417] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1546.203003][T21858] Buffer I/O error on dev loop4, logical block 0, async page read [ 1546.217881][T21858] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1546.227593][T21858] Buffer I/O error on dev loop4, logical block 2, async page read [ 1546.235868][T21858] I/O error, dev loop4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1546.245410][T21858] Buffer I/O error on dev loop4, logical block 3, async page read [ 1546.346175][ T8417] usb 1-1: USB disconnect, device number 18 05:17:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) [ 1546.403322][T15629] cdc_ncm 4-1:1.0: bind() failure [ 1546.422699][T15629] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1546.429809][T15629] cdc_ncm 4-1:1.1: bind() failure [ 1546.702202][T15629] usb 4-1: USB disconnect, device number 20 05:17:15 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x48081) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x0, 0x0, 0x81}, 0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:17:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x0, 0x5}) 05:17:16 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote, @in6}}, {{@in=@remote}, 0x0, @in6=@dev}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000180)={0x2, 0x1, 0x4, 0x0, 'syz1\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r0, 0x1, 0x6}, 0x10) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x0, 0x0, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x48081) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7ff}, 0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000380)=0x6) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', 0x0}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, 0x0}, 0xc041) syz_usb_connect$cdc_ncm(0x2, 0x84, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x80, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "f598d6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7ff}, {0x6, 0x24, 0x1a, 0x7}, [@country_functional={0x6, 0x24, 0x7, 0x12, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0xff}, @obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x3, 0x0, 0x0, 0x40, 0x6}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x408}}, {0x3e, &(0x7f0000000a40)=@string={0x3e, 0x3, "a954e742aaf50b2876bc74d9a61cde4711a2ebe63aefe743a8e031fb7b0035b767a65f61ee0f6eaa7bd51cbe5d0d2bb541b5bfb32c3ee16db7cf8198"}}, {0x0, 0x0}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00), 0x200000, 0x0) 05:17:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) 05:17:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) [ 1547.793039][T15629] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1547.887419][ T8417] usb 2-1: new full-speed USB device number 9 using dummy_hcd 05:17:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) 05:17:17 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 1548.204495][T15629] usb 1-1: unable to get BOS descriptor or descriptor too short 05:17:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) [ 1548.254811][T15629] usb 1-1: not running at top speed; connect to a high speed hub [ 1548.294053][ T8417] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1548.335202][ T8417] usb 2-1: not running at top speed; connect to a high speed hub [ 1548.348170][T15629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1548.360147][T15629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.370264][T15629] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1548.381587][T15629] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1548.494876][ T8417] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1548.506413][ T8417] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1548.517848][ T8417] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1548.638066][T22539] loop2: detected capacity change from 0 to 131456 [ 1548.697635][T22540] __nla_validate_parse: 7 callbacks suppressed [ 1548.697720][T22540] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.763936][T15629] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1548.773416][T15629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.781674][T15629] usb 1-1: Product: syz [ 1548.786367][T15629] usb 1-1: Manufacturer: syz [ 1548.791194][T15629] usb 1-1: SerialNumber: syz [ 1548.818312][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.840804][T22539] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1548.853227][T22539] EXT4-fs (loop2): group descriptors corrupted! [ 1549.053236][ T8417] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1549.062708][ T8417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.070956][ T8417] usb 2-1: Manufacturer: 咩䋧⠋뱶Ღ䟞ꈑä§î‚¨ï¬±{뜵ꙧ慟࿮ꩮ핻븜àµë”«ë•ëŽ¿ã¸¬æ·¡ì¾·é¢ [ 1549.083147][ T8417] usb 2-1: SerialNumber: syz [ 1549.136783][ T3583] usb 4-1: new high-speed USB device number 21 using dummy_hcd 05:17:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) 05:17:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1549.264789][T22525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1549.393237][T15629] cdc_ncm 1-1:1.0: bind() failure [ 1549.402851][ T3583] usb 4-1: Using ep0 maxpacket: 8 [ 1549.484532][T15629] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1549.491836][T15629] cdc_ncm 1-1:1.1: bind() failure [ 1549.540065][T15629] usb 1-1: USB disconnect, device number 19 [ 1549.553324][ T3583] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1549.633305][ T3583] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1549.641182][ T3583] usb 4-1: can't read configurations, error -71 [ 1549.643233][ T8417] cdc_ncm 2-1:1.0: bind() failure [ 1549.712158][ T8417] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1549.719425][ T8417] cdc_ncm 2-1:1.1: bind() failure [ 1549.858728][T22548] loop2: detected capacity change from 0 to 131456 [ 1549.981510][ T8417] usb 2-1: USB disconnect, device number 9 [ 1550.001101][T22549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:19 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0) 05:17:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1550.063472][T22548] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1550.076307][T22548] EXT4-fs (loop2): group descriptors corrupted! [ 1550.143729][T22551] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:19 executing program 1: select(0x18, &(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xea60}) 05:17:19 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1550.296112][T22553] loop4: detected capacity change from 0 to 131456 [ 1550.334130][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) [ 1550.479590][T22553] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated 05:17:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1550.613202][T22553] EXT4-fs (loop4): get root inode failed [ 1550.619269][T22553] EXT4-fs (loop4): mount failed 05:17:20 executing program 1: socket(0x28, 0x0, 0xb6) [ 1551.104844][T22184] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1551.154933][T22565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1551.181981][T22566] loop2: detected capacity change from 0 to 131456 [ 1551.223185][ T8417] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1551.322884][ T3565] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1551.332535][T22567] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1551.463054][ T8417] usb 1-1: Using ep0 maxpacket: 8 [ 1551.478567][T22566] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1551.490101][T22566] EXT4-fs (loop2): group descriptors corrupted! [ 1551.514826][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1551.583506][ T3565] usb 4-1: Using ep0 maxpacket: 8 [ 1551.583630][ T8417] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1551.719338][ T3565] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 05:17:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000013800)) [ 1551.833698][ T8417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1551.843718][ T8417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.851968][ T8417] usb 1-1: Product: syz [ 1551.856559][ T8417] usb 1-1: Manufacturer: syz [ 1551.861378][ T8417] usb 1-1: SerialNumber: syz 05:17:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 1552.013639][ T3565] usb 4-1: string descriptor 0 read error: -22 [ 1552.027076][ T3565] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1552.037768][ T3565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.086023][T22559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1552.128728][ T8417] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1552.245184][T22571] loop4: detected capacity change from 0 to 131456 [ 1552.257570][ T3565] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1552.367279][T22571] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1552.407007][ T3583] usb 1-1: USB disconnect, device number 20 [ 1552.436304][T22571] EXT4-fs (loop4): get root inode failed [ 1552.442527][T22571] EXT4-fs (loop4): mount failed [ 1552.470778][ T3565] usb 4-1: USB disconnect, device number 23 [ 1552.615591][T22574] loop2: detected capacity change from 0 to 131456 05:17:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1552.749804][T22574] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1552.760682][T22574] EXT4-fs (loop2): group descriptors corrupted! [ 1552.789272][T22578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1552.895908][T22579] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:22 executing program 0: socketpair(0x26, 0x5, 0x9, &(0x7f0000000000)) 05:17:22 executing program 1: ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 05:17:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000013800)) 05:17:22 executing program 3: syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 05:17:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1553.398677][T22581] loop4: detected capacity change from 0 to 131456 05:17:22 executing program 1: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) [ 1553.710953][T22593] loop2: detected capacity change from 0 to 131456 [ 1553.722796][T22594] __nla_validate_parse: 2 callbacks suppressed [ 1553.722869][T22594] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x4abe148bb18f54a1}]}, 0x18}}, 0x0) [ 1553.837490][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1553.848079][T22581] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1553.885329][T22581] EXT4-fs (loop4): get root inode failed [ 1553.891295][T22581] EXT4-fs (loop4): mount failed [ 1553.899665][T22593] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1553.910373][T22593] EXT4-fs (loop2): group descriptors corrupted! 05:17:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000013800)) 05:17:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00400000000001"], 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 05:17:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x322, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000140)="fa", 0xffffff1f, 0x0, 0x0, 0x0) 05:17:23 executing program 0: mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) [ 1554.809278][T22603] loop2: detected capacity change from 0 to 131456 [ 1554.869477][T22605] loop4: detected capacity change from 0 to 131456 [ 1554.880656][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1554.967756][T22603] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1554.978765][T22603] EXT4-fs (loop2): group descriptors corrupted! [ 1555.005428][T22608] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1555.044110][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1555.112818][T22605] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1555.141811][T22184] I/O error, dev loop2, sector 131328 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1555.230324][T22605] EXT4-fs (loop4): get root inode failed [ 1555.236625][T22605] EXT4-fs (loop4): mount failed 05:17:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}], 0x0, &(0x7f0000013800)) 05:17:24 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x7100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:17:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:24 executing program 0: syz_mount_image$nfs(0x0, &(0x7f00000012c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x12000108) [ 1556.143917][T22623] loop2: detected capacity change from 0 to 131456 [ 1556.153918][T22622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:25 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0xc0189436, 0x0) [ 1556.274104][T22624] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1556.345154][T22627] loop4: detected capacity change from 0 to 131456 05:17:25 executing program 1: ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) [ 1556.437717][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1556.604263][T22627] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1556.644025][T22623] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1556.655512][T22623] EXT4-fs (loop2): group descriptors corrupted! [ 1556.673731][T22627] EXT4-fs (loop4): get root inode failed [ 1556.679746][T22627] EXT4-fs (loop4): mount failed 05:17:25 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xb4, &(0x7f0000000300)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:17:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}], 0x0, &(0x7f0000013800)) 05:17:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 05:17:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 05:17:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 1557.393955][T22642] loop4: detected capacity change from 0 to 131456 [ 1557.434773][T22640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1557.494096][T22641] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1557.531725][T22642] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1557.685263][T22642] EXT4-fs (loop4): get root inode failed [ 1557.691529][T22642] EXT4-fs (loop4): mount failed [ 1557.707641][T22649] loop2: detected capacity change from 0 to 131456 [ 1557.836407][T22649] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1557.848045][T22649] EXT4-fs (loop2): group descriptors corrupted! 05:17:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00), 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:27 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000480)="17429df4f9d09ab05107b793a2bbb4c857d0954060a2de58a94964c9dc3a44a21812e89c48b7342e84d4d868437356c50b72db9cb5e448e86d18f12c14b9a23b4ba2e5dc383e863619171fdafc0c1754b0bfe74213f18e0fc66ebd1a19e06bb645b3f418e93e7e18c0fce55256191fe8b50cffcdb3433d727227a4f0611b8722d94670d9d67514d6147063c259fdc1431ebb265c51302f81e8da7087850361a510e9f473993b5ff6402522575eae039d8dbeffa8af5ab2432c4e66d1439b21ccdb647b2b837f93f4e531ef5c9f97c618d42adb01c4597e828f5b20a560b33ba925c9bb4b2b6e7c67a991d582c5405d7682bb92861a", 0xf5, 0xf0c}, {&(0x7f0000001480)="e2", 0x1, 0xffffffffffffffff}], 0x0, 0x0) 05:17:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}], 0x0, &(0x7f0000013800)) 05:17:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:27 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xb4, &(0x7f0000000300)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:17:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) [ 1558.569602][T22657] loop3: detected capacity change from 0 to 264192 [ 1558.595939][T22658] loop4: detected capacity change from 0 to 131456 [ 1558.657505][T22661] loop2: detected capacity change from 0 to 131456 [ 1558.770780][T22665] __nla_validate_parse: 3 callbacks suppressed [ 1558.770857][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1558.791926][T22661] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1558.803018][T22661] EXT4-fs (loop2): group descriptors corrupted! 05:17:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5411, 0x0) 05:17:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="019748000040000000000100000008000800", @ANYBLOB='\f'], 0x28}}, 0x0) [ 1558.841853][T22658] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1558.949041][T22658] EXT4-fs (loop4): get root inode failed [ 1558.955825][T22658] EXT4-fs (loop4): mount failed 05:17:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00', 0x3, 0x800}], 0x0, &(0x7f0000013800)) 05:17:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x0, 0x0) 05:17:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00), 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1559.363525][T22671] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 05:17:28 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) 05:17:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8940, &(0x7f0000000200)) [ 1559.727207][T22676] loop2: detected capacity change from 0 to 131456 [ 1559.771198][T22678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1559.842713][T22682] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1559.869005][T22676] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1559.870279][T22683] loop4: detected capacity change from 0 to 131456 [ 1559.880814][T22676] EXT4-fs (loop2): group descriptors corrupted! [ 1559.955118][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.119614][T22683] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1560.194232][T22683] EXT4-fs (loop4): get root inode failed [ 1560.200266][T22683] EXT4-fs (loop4): mount failed 05:17:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00', 0x3, 0x800}], 0x0, &(0x7f0000013800)) 05:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 05:17:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8912, 0x0) 05:17:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r0, 0xf139f63a2bb542e7, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x28}}, 0x0) 05:17:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00), 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1560.746319][T22693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.805518][T22700] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.816145][T22698] loop2: detected capacity change from 0 to 131456 [ 1560.866920][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 05:17:30 executing program 3: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003600), 0x8) [ 1560.919853][T22698] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1560.932561][T22698] EXT4-fs (loop2): group descriptors corrupted! 05:17:30 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[]) [ 1561.064260][T22705] loop4: detected capacity change from 0 to 131456 05:17:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00', 0x3, 0x800}], 0x0, &(0x7f0000013800)) [ 1561.168080][T22705] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated 05:17:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1561.225466][T22705] EXT4-fs (loop4): get root inode failed [ 1561.231506][T22705] EXT4-fs (loop4): mount failed 05:17:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0040000000000100000008000e"], 0x28}}, 0x0) 05:17:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x28}}, 0x0) 05:17:30 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)) [ 1561.786482][T22716] loop2: detected capacity change from 0 to 131456 [ 1561.797318][T22715] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1561.884308][T22719] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1561.918028][T22716] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1561.928922][T22716] EXT4-fs (loop2): group descriptors corrupted! [ 1561.973704][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00400000000001"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) 05:17:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1562.167277][T22723] loop4: detected capacity change from 0 to 131456 05:17:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00\x00', 0x4, 0x800}], 0x0, &(0x7f0000013800)) [ 1562.379118][T22723] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated 05:17:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x4, 0x3ff}, 0x48) [ 1562.427786][T22723] EXT4-fs (loop4): get root inode failed [ 1562.434102][T22723] EXT4-fs (loop4): mount failed 05:17:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0197480000400000000001000000080003"], 0x28}}, 0x0) 05:17:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:31 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x4024700a, &(0x7f0000000640)) [ 1562.818448][T22733] loop2: detected capacity change from 0 to 131456 05:17:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1562.953923][T22733] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1562.964620][T22733] EXT4-fs (loop2): group descriptors corrupted! 05:17:32 executing program 0: unshare(0x4a000000) unshare(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 05:17:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00\x00', 0x4, 0x800}], 0x0, &(0x7f0000013800)) [ 1563.209497][T22740] loop4: detected capacity change from 0 to 131456 [ 1563.404263][T22740] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated 05:17:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x0) [ 1563.569754][T22740] EXT4-fs (loop4): get root inode failed [ 1563.576276][T22740] EXT4-fs (loop4): mount failed 05:17:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1563.879798][T22751] loop2: detected capacity change from 0 to 131456 05:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000043b745"], 0x14}}, 0x0) 05:17:33 executing program 0: unshare(0x4a000000) unshare(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) [ 1563.993406][T22751] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1564.005821][T22751] EXT4-fs (loop2): group descriptors corrupted! 05:17:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x0) 05:17:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00\x00', 0x4, 0x800}], 0x0, &(0x7f0000013800)) [ 1564.320705][T22755] __nla_validate_parse: 8 callbacks suppressed [ 1564.320778][T22755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1564.414176][T22757] loop4: detected capacity change from 0 to 131456 [ 1564.545993][T22757] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1564.628859][T22757] EXT4-fs (loop4): get root inode failed [ 1564.635208][T22757] EXT4-fs (loop4): mount failed [ 1564.817045][T22771] loop2: detected capacity change from 0 to 131456 05:17:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x0) 05:17:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1564.981852][T22758] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1564.995539][T22767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}}, 0x0) [ 1565.043675][T22771] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 1565.054546][T22771] EXT4-fs (loop2): group descriptors corrupted! 05:17:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5}], 0x0, &(0x7f0000013800)) 05:17:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1565.600502][T22775] loop4: detected capacity change from 0 to 131456 05:17:34 executing program 0: unshare(0x4a000000) unshare(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) [ 1565.785494][T22775] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated 05:17:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00400000000011"], 0x28}}, 0x0) [ 1565.881864][T22775] EXT4-fs (loop4): get root inode failed [ 1565.888245][T22775] EXT4-fs (loop4): mount failed [ 1565.916532][T22781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}}, 0x0) [ 1566.092782][T22784] loop2: detected capacity change from 0 to 131456 05:17:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1566.200093][T22783] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1566.220860][T22784] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1566.232036][T22784] EXT4-fs (loop2): group descriptors corrupted! [ 1566.433658][T22791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1566.499275][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5}], 0x0, &(0x7f0000013800)) [ 1566.632834][T22794] loop4: detected capacity change from 0 to 131456 05:17:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@base={0x3, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) 05:17:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0040000000006b"], 0x28}}, 0x0) 05:17:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1566.879803][T22794] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1566.942931][T22794] EXT4-fs (loop4): get root inode failed [ 1566.948986][T22794] EXT4-fs (loop4): mount failed 05:17:36 executing program 0: unshare(0x4a000000) unshare(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) [ 1567.293705][T22800] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1567.316371][T22802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1567.341699][T22803] loop2: detected capacity change from 0 to 131456 05:17:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) [ 1567.433916][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1567.506269][T22803] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1567.516921][T22803] EXT4-fs (loop2): group descriptors corrupted! 05:17:36 executing program 1: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:17:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5}], 0x0, &(0x7f0000013800)) [ 1567.943407][T22810] loop4: detected capacity change from 0 to 131456 05:17:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000640)={0x0, 0x0, 0xc}) 05:17:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f000000bc80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001180)='_', 0x1}], 0x1, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) [ 1568.227773][T22810] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1568.239853][T22817] loop2: detected capacity change from 0 to 131456 [ 1568.358656][T22810] EXT4-fs (loop4): get root inode failed [ 1568.364833][T22810] EXT4-fs (loop4): mount failed [ 1568.415695][T22817] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1568.426393][T22817] EXT4-fs (loop2): group descriptors corrupted! 05:17:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:37 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000080)=@framed={{0x18, 0xa}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:17:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1569.177905][T22829] loop4: detected capacity change from 0 to 131456 [ 1569.334295][T22830] __nla_validate_parse: 3 callbacks suppressed [ 1569.334375][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1569.384122][T22829] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1569.467872][T22833] loop2: detected capacity change from 0 to 131456 05:17:38 executing program 3: unshare(0x200) unshare(0x60060200) [ 1569.564223][T22829] EXT4-fs (loop4): get root inode failed [ 1569.570272][T22829] EXT4-fs (loop4): mount failed 05:17:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1569.618950][T22833] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1569.720266][ T1197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1569.727038][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 05:17:38 executing program 1: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) 05:17:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:39 executing program 0: syz_open_dev$rtc(&(0x7f0000000000), 0x400, 0x210200) [ 1570.293957][T22838] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1570.385871][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:39 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RUNLINKAT(r0, 0x0, 0x0) 05:17:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1570.725351][T22847] loop4: detected capacity change from 0 to 131456 [ 1570.737252][T22848] loop2: detected capacity change from 0 to 131456 05:17:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000640)) 05:17:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) [ 1570.855261][T22848] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1570.885558][T22847] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1570.978068][T22847] EXT4-fs (loop4): get root inode failed [ 1570.978649][T22853] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1570.984690][T22847] EXT4-fs (loop4): mount failed [ 1571.007159][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:40 executing program 0: syslog(0x3, &(0x7f0000000000)=""/111, 0x6f) 05:17:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x1, &(0x7f0000000300)=[{&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x29, 0x0, &(0x7f0000000100)) 05:17:40 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='GPL\x00', 0x5, 0xbd, &(0x7f0000002a00)=""/189, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1571.889284][T22862] loop2: detected capacity change from 0 to 131456 [ 1572.064701][T22862] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1572.535912][T22867] loop4: detected capacity change from 0 to 131456 05:17:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1572.582762][T22868] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1572.626751][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:41 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@exit, @jmp]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xb4, &(0x7f0000000300)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:17:41 executing program 1: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2002000, &(0x7f0000001600)) [ 1572.687913][T22867] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1572.745522][T22867] EXT4-fs (loop4): get root inode failed [ 1572.751644][T22867] EXT4-fs (loop4): mount failed 05:17:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:41 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 05:17:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1573.164259][T22874] loop2: detected capacity change from 0 to 131456 [ 1573.290546][T22874] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)) 05:17:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e7268f31b731c29afaf564da097198634006f81efff502938b0e260f3ca3"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) [ 1573.376360][T22880] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.441065][T22882] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1573.514564][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.612978][T22886] loop4: detected capacity change from 0 to 131456 [ 1573.755841][T22886] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1573.763393][T22886] EXT4-fs (loop4): mount failed 05:17:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="019748000040000000000100000008000300", @ANYBLOB='\f'], 0x28}}, 0x0) 05:17:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00400000000001"], 0x28}}, 0x0) [ 1574.129547][T22893] loop2: detected capacity change from 0 to 131456 05:17:43 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000003300), 0x1010c0, 0x0) [ 1574.294057][T22893] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1574.615774][T22895] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.634170][T22896] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.729160][T22905] loop4: detected capacity change from 0 to 131456 [ 1574.868497][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.880612][T22905] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1574.880651][T22904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1574.897796][T22905] EXT4-fs (loop4): mount failed [ 1574.903133][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:44 executing program 0: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 05:17:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 05:17:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x80108906, 0x0) 05:17:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1575.197263][T22911] loop2: detected capacity change from 0 to 131456 05:17:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1575.353544][T22911] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x4004040) [ 1575.826124][T22919] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:45 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xb4, &(0x7f0000000300)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1575.925932][T22923] loop4: detected capacity change from 0 to 131456 [ 1576.101745][T22927] loop2: detected capacity change from 0 to 131456 [ 1576.115477][T22921] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1576.146973][T22923] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1576.154048][T22923] EXT4-fs (loop4): mount failed [ 1576.225891][T22927] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0xc, 0x0, &(0x7f0000000100)) [ 1576.472215][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000013800)) 05:17:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:45 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8905, 0x0) 05:17:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000100000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0197480000400000000001000000080001"], 0x28}}, 0x0) 05:17:46 executing program 0: unshare(0x28000000) unshare(0x200) unshare(0x60060200) [ 1577.143520][T22938] loop2: detected capacity change from 0 to 131456 [ 1577.147085][T22939] loop4: detected capacity change from 0 to 131456 05:17:46 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 1577.330841][T22938] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1577.338790][T22939] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1577.433219][T22939] EXT4-fs (loop4): get root inode failed [ 1577.439291][T22939] EXT4-fs (loop4): mount failed [ 1577.554541][T22945] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0197480000400000000001000000040003"], 0x28}}, 0x0) 05:17:46 executing program 0: syslog(0x2, &(0x7f0000000080)=""/211, 0xd3) [ 1577.673607][T22945] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000013800)) 05:17:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000100000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:47 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) [ 1578.218453][T22956] loop2: detected capacity change from 0 to 131456 05:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5411, 0x0) [ 1578.309185][T22957] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1578.393514][T22956] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1578.414521][T22960] loop4: detected capacity change from 0 to 131456 05:17:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1578.577703][T22960] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated 05:17:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000100000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1578.714094][T22960] EXT4-fs (loop4): get root inode failed [ 1578.720152][T22960] EXT4-fs (loop4): mount failed 05:17:47 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8936, 0x0) 05:17:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000013800)) 05:17:48 executing program 0: mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000001580)=[{&(0x7f0000000480)="17429df4f9d09ab05107b793a2bbb4c857d0954060a2de58a94964c9dc3a44a21812e89c48b7342e84d4d868437356c50b72db9cb5e448e86d18f12c14b9a23b4ba2e5dc383e863619171fdafc0c1754b0bfe74213f18e0fc66ebd1a19e06bb645b3f418e93e7e18c0fce55256191fe8b50cffcdb3433d727227a4f0611b8722d94670d9d67514d6147063c259fdc1431ebb265c51302f81e8da7087850361a510e9f473993b5ff6402522575eae039d8dbeffa8af5ab2432c4e66d1439b21ccdb647b2b837f93f4e531ef5c9f97c618d42adb01c4597e828f5b20a560b33ba925c9bb4b2b6e7c67a991d582c5405d7682bb92861a", 0xf5, 0xf0c}, {&(0x7f0000001480)="e263", 0x2, 0xffffffffffffffff}], 0x100420, &(0x7f0000001600)) [ 1579.189423][T22971] loop2: detected capacity change from 0 to 131456 05:17:48 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xb4, &(0x7f0000000300)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:17:48 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, 0x0) [ 1579.475360][T22976] loop4: detected capacity change from 0 to 131456 [ 1579.487433][T22971] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000100000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1579.726593][T22979] loop0: detected capacity change from 0 to 264192 05:17:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1579.789759][T22976] EXT4-fs error (device loop4): __ext4_fill_super:5234: inode #2: comm syz-executor.4: iget: root inode unallocated [ 1579.851365][T22976] EXT4-fs (loop4): get root inode failed [ 1579.857660][T22976] EXT4-fs (loop4): mount failed 05:17:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00400000000015"], 0x28}}, 0x0) 05:17:49 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) 05:17:49 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) 05:17:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1580.192126][T22985] __nla_validate_parse: 7 callbacks suppressed [ 1580.192204][T22985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1580.323597][T22985] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1580.387754][T22987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1580.412153][T22988] loop2: detected capacity change from 0 to 131456 [ 1580.457102][T22988] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1580.534401][T22990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:17:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000100000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:49 executing program 1: mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000001580)=[{&(0x7f0000000480)="17429df4f9d09ab05107b793a2bbb4c857d0954060a2de58a94964c9dc3a44a21812e89c48b7342e84d4d868437356c50b72db9cb5e448e86d18f12c14b9a23b4ba2e5dc383e863619171fdafc0c1754b0bfe74213f18e0fc66ebd1a19e06bb645b3f418e93e7e18c0fce55256191fe8b50cffcdb3433d727227a4f0611b8722d94670d9d67514d6147063c259fdc1431ebb265c51302f81e8da7087850361a510e9f473993b5ff6402522575eae039d8dbeffa8af5ab2432c4e66d1439b21ccdb647b2b837f93f4e531ef5c9f97c618d42adb01c4597e828f5b20a560b33ba925c9bb4b2b6e7c67a991d582c5405d7682bb92861a", 0xf5, 0xf0c}, {&(0x7f0000001480)="e263", 0x2, 0xffffffffffffffff}], 0x100420, &(0x7f0000001600)={[], [{@fowner_lt={'fowner<', 0xee01}}]}) [ 1580.755288][T22996] loop4: detected capacity change from 0 to 131456 05:17:49 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:17:49 executing program 3: syz_open_dev$vcsn(0x0, 0x7, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) pipe(&(0x7f0000001d00)) openat$uhid(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) [ 1580.898247][T22996] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1580.909026][T22996] EXT4-fs (loop4): group descriptors corrupted! 05:17:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1581.279288][T23000] loop2: detected capacity change from 0 to 131456 [ 1581.385255][T23002] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1581.403276][T23000] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1581.485299][T23002] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:50 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000080)=@raw=[@alu={0x7}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xb4, &(0x7f0000000140)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1581.560054][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a0, &(0x7f0000000200)) 05:17:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x4004040) 05:17:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000", 0x2c, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000100000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1581.735543][T23008] loop4: detected capacity change from 0 to 131456 [ 1581.868188][T23008] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1581.879502][T23008] EXT4-fs (loop4): group descriptors corrupted! 05:17:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1582.259575][T23018] loop2: detected capacity change from 0 to 131456 [ 1582.267909][T23017] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:51 executing program 3: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), 0x0, 0x0, 0x1, &(0x7f0000001580)=[{&(0x7f0000000480)="17", 0x1}], 0x0, &(0x7f0000001600)={[{@rodir}]}) 05:17:51 executing program 0: bpf$MAP_CREATE(0x15, &(0x7f0000001d00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:17:51 executing program 1: ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x3, &(0x7f0000001580)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="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", 0xff, 0xf0c}, {&(0x7f0000001480)="e26351dd1967", 0x6, 0xffffffffffffffff}], 0x100420, 0x0) [ 1582.315749][T23018] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1582.371632][T23017] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1582.486886][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000", 0x2c, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1582.980870][T23027] loop4: detected capacity change from 0 to 131456 [ 1583.131211][T23027] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1583.142111][T23027] EXT4-fs (loop4): group descriptors corrupted! 05:17:52 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7}, 0x7) 05:17:52 executing program 1: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [{@context={'context', 0x3d, 'user_u'}}]}) 05:17:52 executing program 3: mq_open(&(0x7f0000000080)='.-[&\'](@(\x00', 0x0, 0x0, 0x0) [ 1583.325164][T23030] loop2: detected capacity change from 0 to 131456 [ 1583.451393][T23030] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000", 0x2c, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1583.958193][T23036] nfs: Unknown parameter 'context' 05:17:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x2, 0x9}, 0x1c) 05:17:53 executing program 3: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 05:17:53 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x4}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0xb4, &(0x7f0000000300)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1584.216661][T23040] loop4: detected capacity change from 0 to 131456 [ 1584.337276][T23040] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1584.348494][T23040] EXT4-fs (loop4): group descriptors corrupted! 05:17:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000000010000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1584.630335][T23044] loop2: detected capacity change from 0 to 131456 05:17:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1584.770983][T23044] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:53 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000012"]) 05:17:53 executing program 0: socket$netlink(0x10, 0x3, 0x0) select(0x18, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0xb}, &(0x7f0000000140)={0x0, 0xea60}) 05:17:54 executing program 1: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="fe", 0x1, 0xfffffffffffffffb) 05:17:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f465", 0x33, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1585.408576][T23057] loop4: detected capacity change from 0 to 131456 05:17:54 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x300, 0x0) 05:17:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000100), 0x4) 05:17:54 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000002940)={0x18, 0x0, r1}, 0x18) [ 1585.487419][T23057] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1585.498433][T23057] EXT4-fs (loop4): group descriptors corrupted! [ 1585.517044][T23061] loop2: detected capacity change from 0 to 131456 [ 1585.658052][T23063] __nla_validate_parse: 9 callbacks suppressed [ 1585.658127][T23063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1585.743577][T23061] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f465", 0x33, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x59, 0x0, 0x0, 0xfffffffffffffee5) [ 1586.158389][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:55 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) pipe(&(0x7f00000001c0)) 05:17:55 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) [ 1586.421501][T23073] loop4: detected capacity change from 0 to 131456 05:17:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1586.560681][T23073] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1586.564108][T23075] loop2: detected capacity change from 0 to 131456 [ 1586.571676][T23073] EXT4-fs (loop4): group descriptors corrupted! [ 1586.686110][T23075] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="67725d90ae0dafa9942a2a6e3c39e7194d81000000000000c070702ffff6f43bd4e58be0d0cf6625b11d"]}) 05:17:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xfca5afac68c6b9cd, 0x1}, 0x48) 05:17:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f465", 0x33, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1586.989710][T23083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:56 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) [ 1587.433057][T23093] loop4: detected capacity change from 0 to 131456 [ 1587.471291][T23095] loop2: detected capacity change from 0 to 131456 [ 1587.574552][T23093] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1587.585339][T23093] EXT4-fs (loop4): group descriptors corrupted! 05:17:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @multicast2}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @loopback}, 'veth0_macvtap\x00'}) 05:17:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x401870cc, 0x0) [ 1587.623359][T23095] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:57 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}, 0x38) [ 1588.197487][T23100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1588.304705][T23105] loop2: detected capacity change from 0 to 131456 [ 1588.406800][T23105] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1588.439450][T23110] loop4: detected capacity change from 0 to 131456 05:17:57 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}}) [ 1588.537580][T23110] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1588.548408][T23110] EXT4-fs (loop4): group descriptors corrupted! 05:17:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={0x0}}, 0x0) 05:17:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1588.596947][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x80) 05:17:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:58 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 1589.108989][T23119] loop2: detected capacity change from 0 to 131456 05:17:58 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), 0xffffffffffffffff) [ 1589.226954][T23119] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:17:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)) [ 1589.310104][T23122] loop4: detected capacity change from 0 to 131456 05:17:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1589.421276][T23122] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1589.432083][T23122] EXT4-fs (loop4): group descriptors corrupted! [ 1589.684307][T23125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:17:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0xc08012e9, &(0x7f0000000180)) 05:17:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0xa) [ 1589.893743][T23132] loop2: detected capacity change from 0 to 131456 05:17:59 executing program 1: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 1589.979536][T23132] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1590.038485][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:17:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:17:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:17:59 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1000000, &(0x7f00000003c0)={[{@session}]}) [ 1590.451708][T23141] loop4: detected capacity change from 0 to 131456 05:17:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x17, 0x0, 0x0) 05:17:59 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xc, 0x0, 0x0) [ 1590.709252][T23144] loop2: detected capacity change from 0 to 131456 [ 1590.717319][T23141] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1590.730211][T23141] EXT4-fs (loop4): group descriptors corrupted! [ 1590.772621][T23145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1590.863812][T23144] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1590.904800][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:18:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:00 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0xfffffffffffffffe}], 0x2}, 0x0) 05:18:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0xc0189436, 0x0) [ 1591.333360][T23148] ISOFS: Unable to identify CD-ROM format. [ 1591.593882][T23155] loop4: detected capacity change from 0 to 131456 05:18:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x0, 0x210}, 0x48) [ 1591.664518][T23156] loop2: detected capacity change from 0 to 131456 [ 1591.722586][T23155] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1591.733159][T23155] EXT4-fs (loop4): group descriptors corrupted! [ 1591.802871][T23156] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1591.832854][T23160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlinkprop={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bond\x00'}]}, 0x34}}, 0x0) 05:18:01 executing program 3: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, 0x15, 0xa, 0x101}, 0x14}}, 0x0) 05:18:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1592.153516][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:01 executing program 0: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x88f9c0e78e5e4889) 05:18:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1592.482042][T23168] loop4: detected capacity change from 0 to 131456 [ 1592.647022][T23172] loop2: detected capacity change from 0 to 131456 05:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @loopback}}}}) [ 1592.698227][T23168] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1592.708817][T23168] EXT4-fs (loop4): group descriptors corrupted! [ 1592.812041][T23172] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1592.816136][T23177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/partitions\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 05:18:01 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x16, 0x0, 0x0) 05:18:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e000000130000", 0x7, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1593.121864][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x1260, &(0x7f0000000180)) [ 1593.522919][T23188] loop2: detected capacity change from 0 to 131456 05:18:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x407412ec, &(0x7f0000000180)) 05:18:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x21, 0x0, 0x0) [ 1593.668603][T23190] loop4: detected capacity change from 0 to 131456 [ 1593.675799][T23188] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1593.783617][T23193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1593.792135][T23190] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1593.806166][T23190] EXT4-fs (loop4): group descriptors corrupted! 05:18:02 executing program 1: sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) 05:18:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) 05:18:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e000000130000", 0x7, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1594.087962][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:03 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@ng, 0x2, 0x2) 05:18:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:03 executing program 0: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x5800, 0x0) [ 1594.394382][T23204] loop2: detected capacity change from 0 to 131456 05:18:03 executing program 1: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0) [ 1594.479895][T23204] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1594.505292][T23206] loop4: detected capacity change from 0 to 131456 [ 1594.700858][T23209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, &(0x7f0000013800)) [ 1594.767066][T23206] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1594.777713][T23206] EXT4-fs (loop4): group descriptors corrupted! 05:18:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0xc06012e6, &(0x7f0000000180)) 05:18:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e000000130000", 0x7, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:04 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0x19, 0x0, 0x0) [ 1595.016538][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:04 executing program 1: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0) [ 1595.152161][T23218] loop2: detected capacity change from 0 to 131456 [ 1595.253664][T23218] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 05:18:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, 0x0) 05:18:04 executing program 1: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0) [ 1595.613602][T23225] loop4: detected capacity change from 0 to 131456 05:18:04 executing program 3: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x30d1000, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}}) [ 1595.718960][T23225] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1595.730077][T23225] EXT4-fs (loop4): group descriptors corrupted! 05:18:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0xae4d1868388cccad) [ 1595.908926][T23229] __nla_validate_parse: 1 callbacks suppressed [ 1595.909003][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1595.938433][T23232] loop2: detected capacity change from 0 to 131456 05:18:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e00000013000000", 0x8, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, 0x0) 05:18:05 executing program 1: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 05:18:05 executing program 3: io_setup(0x10000, &(0x7f0000000000)) clock_gettime(0x0, 0x0) io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100), 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:18:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:05 executing program 0: fanotify_mark(0xffffffffffffffff, 0x2, 0x1a, 0xffffffffffffffff, 0x0) [ 1596.560533][T23241] loop4: detected capacity change from 0 to 131456 [ 1596.639558][T23242] loop2: detected capacity change from 0 to 131456 [ 1596.648183][T23241] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1596.659377][T23241] EXT4-fs (loop4): group descriptors corrupted! 05:18:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e00000002", 0x5, 0x800}], 0x0, 0x0) [ 1596.930472][T23247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e00000013000000", 0x8, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) [ 1597.131887][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 05:18:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x40081271, &(0x7f0000000180)) 05:18:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1597.564309][T23254] loop4: detected capacity change from 0 to 131456 [ 1597.616554][T23257] loop2: detected capacity change from 0 to 131456 [ 1597.652986][T23254] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1597.663543][T23254] EXT4-fs (loop4): group descriptors corrupted! 05:18:06 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xc, 0x0, 0x0) [ 1597.812128][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e00000013000000", 0x8, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000d012d1"], 0x28}}, 0x0) [ 1598.284169][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:07 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}) 05:18:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) 05:18:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1598.634732][T23272] loop4: detected capacity change from 0 to 131456 05:18:07 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1600bd7d, 0x0, 0x0) 05:18:07 executing program 3: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) [ 1598.782223][T23272] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1598.792969][T23272] EXT4-fs (loop4): group descriptors corrupted! 05:18:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0xc08012e9, 0x0) 05:18:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x401012f7, &(0x7f0000000180)) [ 1599.105380][T23278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1599.217532][T23282] fuse: Bad value for 'fd' [ 1599.290459][T23283] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) [ 1599.355935][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xfca5afac68c6b9cd, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 05:18:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x12, 0x0, &(0x7f0000001600)) [ 1599.660179][T23290] loop4: detected capacity change from 0 to 131456 05:18:08 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) [ 1599.818158][T23290] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1599.828896][T23290] EXT4-fs (loop4): group descriptors corrupted! 05:18:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x407012ef, &(0x7f0000000180)) 05:18:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1600.157825][T23298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:09 executing program 2: syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x82) 05:18:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x53, 0x0, &(0x7f0000001600)) [ 1600.411525][T23300] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 05:18:09 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0x1e, 0x0, 0x0) [ 1600.627057][T23307] loop4: detected capacity change from 0 to 131456 [ 1600.715006][T23307] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1600.727093][T23307] EXT4-fs (loop4): group descriptors corrupted! 05:18:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x800412f9, 0x0) 05:18:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef13", 0x3b, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x801012f0, 0x0) 05:18:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0xc09812e8, &(0x7f0000000180)) 05:18:10 executing program 1: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) [ 1601.248226][T23317] __nla_validate_parse: 1 callbacks suppressed [ 1601.248304][T23317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:10 executing program 3: mq_open(&(0x7f0000000080)='.-[&\'](@(\x00', 0x40, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0xc7}) [ 1601.536448][T23327] loop4: detected capacity change from 0 to 131456 05:18:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0xc05812fe, 0x0) [ 1601.673869][T23327] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1601.691929][T23327] EXT4-fs (loop4): group descriptors corrupted! [ 1601.716381][T23318] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:10 executing program 0: syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 05:18:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x5450, 0x0) 05:18:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 05:18:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) 05:18:11 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f00000001c0), 0x0) 05:18:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000001600)=0xff000000) [ 1602.267252][T23339] fuse: Bad value for 'fd' 05:18:11 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) 05:18:11 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60ca80, 0x0) [ 1602.557802][T23343] loop4: detected capacity change from 0 to 131456 [ 1602.656238][T23346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={0x0}}, 0x0) [ 1602.699849][T23343] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:18:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000040)={0xd04, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xcd4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xb0, 0x4, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x81, 0x2, "cb5af05de954b6cc9d507d54abefbb9247d9b73d0cdbe1576cd0b179bee1339a032827f51748f69515c5a126231e22e51f02fe7f9429537b15f31dd739dcae792ed9ebe64d25e03bffc3f8755e6ac1c597e11d5668232033f9c686193a8e778ec896582e51d868515fcb4af632a96e87c58452028eb8ed1bcaeff29f8b"}, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "0d2954c9711f53dea2cbe152f96b4026ff9b4d29a8"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xc1c, 0x4, 0x0, 0x1, [{0xc18, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa5, 0x2, "e1bf39f574b27b0b9b242dd5721c2cf658763bfb8b9ed3c90ec5cbd7170b85fad4b3b8b8a926b392cc2a76a115f903e5a3d7f061c2813b022e306d7adf62a80fcc8d9757d85c087970320d0db0604d4ffe591a8fbd2064f7c9feb06e558e2656587671db0d941c60121833cb965b47d33acb2542a1e80d52d80a0259a17ddae64791266b4feb7e5cb35d8760fe3233b74b94f7f54e89b4f4d3ad9738832f18a358"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xb61, 0x2, "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"}]}]}]}]}, 0xd04}}, 0x0) 05:18:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1603.006658][T23349] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1603.099308][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1603.109688][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:18:12 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) 05:18:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x80, 0x7, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/ldiscs\x00', 0x0, 0x0) 05:18:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 05:18:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0400000000000000040000000a00010062617369470000000c000200080001000c000000060005"], 0x4c}}, 0x0) [ 1603.489947][T23361] loop4: detected capacity change from 0 to 131456 05:18:12 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_rm_watch(r0, 0x0) [ 1603.582901][T23361] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:18:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1603.824093][T23368] ===================================================== [ 1603.824353][T23368] BUG: KMSAN: uninit-value in set_selection_kernel+0x2f3f/0x3960 [ 1603.824521][T23368] set_selection_kernel+0x2f3f/0x3960 [ 1603.824669][T23368] set_selection_user+0xdd/0x120 [ 1603.824805][T23368] tioclinux+0x16f/0x680 [ 1603.824908][T23368] vt_ioctl+0x53e/0x2910 [ 1603.825028][T23368] vt_compat_ioctl+0x35f/0x880 [ 1603.825156][T23368] tty_compat_ioctl+0x559/0x910 [ 1603.825281][T23368] __se_compat_sys_ioctl+0x781/0xfa0 [ 1603.825435][T23368] __ia32_compat_sys_ioctl+0x8f/0xd0 [ 1603.825555][T23368] __do_fast_syscall_32+0x87/0xe0 [ 1603.825660][T23368] do_fast_syscall_32+0x33/0x70 [ 1603.825757][T23368] do_SYSENTER_32+0x1b/0x20 [ 1603.825849][T23368] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1603.826017][T23368] [ 1603.826036][T23368] Uninit was created at: [ 1603.826181][T23368] __alloc_pages+0x9f1/0xe80 [ 1603.826295][T23368] __alloc_pages_bulk+0x1adc/0x2510 [ 1603.826416][T23368] alloc_pages_bulk_array_mempolicy+0xc2f/0xf40 [ 1603.826563][T23368] __vmalloc_node_range+0xad6/0x2700 [ 1603.826675][T23368] vmalloc+0x8c/0xa0 [ 1603.826761][T23368] vc_do_resize+0x6d4/0x2ba0 [ 1603.826883][T23368] vc_resize+0x5a/0x70 [ 1603.826982][T23368] fbcon_do_set_font+0x11f4/0x17a0 [ 1603.827119][T23368] fbcon_set_font+0x116a/0x1330 [ 1603.827229][T23368] con_font_op+0x11fb/0x1330 [ 1603.827337][T23368] vt_compat_ioctl+0x685/0x880 [ 1603.827469][T23368] tty_compat_ioctl+0x559/0x910 [ 1603.827594][T23368] __se_compat_sys_ioctl+0x781/0xfa0 [ 1603.827721][T23368] __ia32_compat_sys_ioctl+0x8f/0xd0 [ 1603.827842][T23368] __do_fast_syscall_32+0x87/0xe0 [ 1603.827943][T23368] do_fast_syscall_32+0x33/0x70 [ 1603.828038][T23368] do_SYSENTER_32+0x1b/0x20 [ 1603.828130][T23368] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1603.828296][T23368] [ 1603.828316][T23368] CPU: 1 PID: 23368 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1603.828428][T23368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1603.828487][T23368] ===================================================== [ 1603.828516][T23368] Disabling lock debugging due to kernel taint [ 1603.828549][T23368] Kernel panic - not syncing: kmsan.panic set ... [ 1603.828591][T23368] CPU: 1 PID: 23368 Comm: syz-executor.3 Tainted: G B 5.19.0-rc8-syzkaller-32495-g3ea9edba19ef #0 [ 1603.828708][T23368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1603.828763][T23368] Call Trace: [ 1603.828795][T23368] [ 1603.828826][T23368] dump_stack_lvl+0x1c8/0x256 [ 1603.828984][T23368] dump_stack+0x1a/0x1c [ 1603.829118][T23368] panic+0x4d3/0xc69 [ 1603.829238][T23368] ? kmsan_get_shadow_origin_ptr+0x70/0xa0 [ 1603.829378][T23368] ? add_taint+0x104/0x1a0 [ 1603.829527][T23368] kmsan_report+0x2cc/0x2d0 [ 1603.829660][T23368] ? kmsan_get_metadata+0x33/0x220 [ 1603.829779][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.829904][T23368] ? __msan_warning+0x92/0x110 [ 1603.830013][T23368] ? set_selection_kernel+0x2f3f/0x3960 [ 1603.830160][T23368] ? set_selection_user+0xdd/0x120 [ 1603.830300][T23368] ? tioclinux+0x16f/0x680 [ 1603.830405][T23368] ? vt_ioctl+0x53e/0x2910 [ 1603.830529][T23368] ? vt_compat_ioctl+0x35f/0x880 [ 1603.830667][T23368] ? tty_compat_ioctl+0x559/0x910 [ 1603.830799][T23368] ? __se_compat_sys_ioctl+0x781/0xfa0 [ 1603.830923][T23368] ? __ia32_compat_sys_ioctl+0x8f/0xd0 [ 1603.831048][T23368] ? __do_fast_syscall_32+0x87/0xe0 [ 1603.831149][T23368] ? do_fast_syscall_32+0x33/0x70 [ 1603.831245][T23368] ? do_SYSENTER_32+0x1b/0x20 [ 1603.831344][T23368] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1603.831518][T23368] ? should_fail+0x3f/0x810 [ 1603.831644][T23368] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 1603.831788][T23368] ? memcg_slab_post_alloc_hook+0x2d/0x980 [ 1603.831952][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.832089][T23368] ? kmsan_get_metadata+0x33/0x220 [ 1603.832204][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.832340][T23368] ? kfree+0x29/0x9c0 [ 1603.832467][T23368] ? kmsan_get_metadata+0x4d/0x220 [ 1603.832586][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.832729][T23368] ? screen_glyph_unicode+0xe0/0x320 [ 1603.832860][T23368] __msan_warning+0x92/0x110 [ 1603.832971][T23368] set_selection_kernel+0x2f3f/0x3960 [ 1603.833151][T23368] set_selection_user+0xdd/0x120 [ 1603.833301][T23368] tioclinux+0x16f/0x680 [ 1603.833415][T23368] vt_ioctl+0x53e/0x2910 [ 1603.833558][T23368] ? capable+0x120/0x1d0 [ 1603.833728][T23368] vt_compat_ioctl+0x35f/0x880 [ 1603.833865][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.834005][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.834140][T23368] ? vc_SAK+0x260/0x260 [ 1603.834260][T23368] tty_compat_ioctl+0x559/0x910 [ 1603.834407][T23368] ? tty_poll+0x3c0/0x3c0 [ 1603.834524][T23368] __se_compat_sys_ioctl+0x781/0xfa0 [ 1603.834655][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.834792][T23368] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 1603.834929][T23368] __ia32_compat_sys_ioctl+0x8f/0xd0 [ 1603.835060][T23368] __do_fast_syscall_32+0x87/0xe0 [ 1603.835172][T23368] do_fast_syscall_32+0x33/0x70 [ 1603.835275][T23368] do_SYSENTER_32+0x1b/0x20 [ 1603.835374][T23368] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 1603.835543][T23368] RIP: 0023:0xf7f4e549 [ 1603.835614][T23368] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 1603.835717][T23368] RSP: 002b:00000000f7f495cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1603.835810][T23368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541c [ 1603.835880][T23368] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1603.835945][T23368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1603.836007][T23368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.836068][T23368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1603.836153][T23368] [ 1603.836346][T23368] Kernel Offset: disabled [ 1604.415529][T23368] Rebooting in 86400 seconds..