][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x3, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)

03:03:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
socket(0x23, 0x4, 0x0)

03:03:33 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:33 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x406)

[  370.909132][T18818] loop2: detected capacity change from 264192 to 0
[  371.046666][T18818] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
socket(0x23, 0x4, 0x0)

[  371.088723][T18828] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
03:03:33 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff04000100"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  371.152530][T18818] loop2: detected capacity change from 264192 to 0
[  371.212070][T18818] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  371.257597][T18835] loop5: detected capacity change from 264192 to 0
03:03:34 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x1200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)

03:03:34 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x500)

[  371.358028][T18835] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:34 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x600)

03:03:34 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfc03000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
socket(0x23, 0x4, 0x0)

03:03:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x5, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)

[  371.497025][T18847] loop2: detected capacity change from 264192 to 0
[  371.585311][T18847] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:34 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x1800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:34 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

03:03:34 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x604)

[  371.741339][T18863] loop5: detected capacity change from 264192 to 0
03:03:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x2, 'rose0\x00'}]}, 0x30}}, 0x0)

03:03:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff0400"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  371.879415][T18863] erofs: (device loop5): mounted with root inode @ nid 36.
[  371.913880][T18868] loop2: detected capacity change from 264192 to 0
[  371.970043][T18868] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:34 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff0400"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:34 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:34 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x700)

[  372.046322][T18868] loop2: detected capacity change from 264192 to 0
[  372.082502][T18868] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:34 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:34 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

03:03:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x18, 'rose0\x00'}]}, 0x30}}, 0x0)

03:03:35 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x900)

03:03:35 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4100)

03:03:35 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff0400"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  372.297040][T18894] loop5: detected capacity change from 264192 to 0
03:03:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x2001, 'rose0\x00'}]}, 0x30}}, 0x0)

03:03:35 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

[  372.358449][T18894] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:35 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x6201)

03:03:35 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  372.457140][T18905] loop2: detected capacity change from 264192 to 0
[  372.507134][T18905] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:35 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x34000)

03:03:35 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0xf800, 'rose0\x00'}]}, 0x30}}, 0x0)

03:03:35 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:35 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

03:03:35 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x2100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x10}}, 0x0)

03:03:35 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xff00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  372.832760][T18934] loop2: detected capacity change from 264192 to 0
[  372.861056][T18934] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:35 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:35 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x400300)

03:03:35 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

[  372.917688][T18934] loop2: detected capacity change from 264192 to 0
[  372.928742][T18934] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x1c}}, 0x0)

03:03:35 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x2500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:35 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

[  373.069169][T18951] loop5: detected capacity change from 264192 to 0
[  373.233449][T18951] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:36 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:36 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xff0f000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:36 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x1000000)

03:03:36 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

[  373.369450][T18968] loop2: detected capacity change from 264192 to 0
03:03:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0xc0}}, 0x0)

03:03:36 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

[  373.534401][T18968] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:36 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:36 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x2000000)

03:03:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0xec0}}, 0x0)

03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:03:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

[  373.751769][T18986] loop5: detected capacity change from 264192 to 0
03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  373.807521][T18986] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:36 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffefffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

03:03:36 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x2040000)

[  373.949154][T19007] loop2: detected capacity change from 264192 to 0
03:03:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x33fe0}}, 0x0)

03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  374.085518][T19007] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:03:36 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:03:37 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x3000000)

03:03:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socket(0x23, 0x4, 0x0)

03:03:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x200001b0}}, 0x0)

03:03:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

[  374.324907][T19025] loop5: detected capacity change from 264192 to 0
[  374.372520][T19025] erofs: (device loop5): mounted with root inode @ nid 36.
[  374.389065][T19031] loop2: detected capacity change from 264192 to 0
[  374.425831][T19031] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:37 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffff1f0000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:03:37 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000000)

03:03:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x7ffff000}}, 0x0)

03:03:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
socket(0x23, 0x4, 0x0)

[  374.612399][T19031] loop2: detected capacity change from 264192 to 0
[  374.627799][T19031] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
socket(0x23, 0x4, 0x0)

03:03:37 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x4100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004300510000000000000000001c00f6ff040001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:03:37 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x5000000)

03:03:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0xfffffdef}}, 0x0)

[  374.787852][T19061] loop5: detected capacity change from 264192 to 0
03:03:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x2}, 0x0)

[  374.895346][T19061] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
socket(0x23, 0x4, 0x0)

[  374.987513][T19075] loop2: detected capacity change from 264192 to 0
03:03:37 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x5}, 0x0)

03:03:37 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x6000000)

03:03:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x4, 0x0)

03:03:37 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  375.096705][T19075] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:37 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x6040000)

[  375.233075][T19090] loop1: detected capacity change from 264192 to 0
[  375.252114][T19075] loop2: detected capacity change from 264192 to 0
[  375.264855][T19090] erofs: (device loop1): mounted with root inode @ nid 36.
[  375.297114][T19095] loop5: detected capacity change from 264192 to 0
[  375.330140][T19075] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  375.395473][T19095] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:38 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x7000000)

03:03:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x7}, 0x0)

03:03:38 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xebffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:38 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:38 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x4, 0x0)

03:03:38 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x4800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:38 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x9000000)

03:03:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x8}, 0x0)

03:03:38 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x41000000)

[  375.681201][T19118] loop5: detected capacity change from 264192 to 0
[  375.701293][T19118] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:38 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x0, 0x4, 0x0)

03:03:38 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  375.773940][T19120] loop1: detected capacity change from 264192 to 0
[  375.811729][T19128] loop2: detected capacity change from 264192 to 0
03:03:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x300}, 0x0)

[  375.841310][T19120] erofs: (device loop1): mounted with root inode @ nid 36.
[  375.885936][T19128] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:38 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x62010000)

[  375.982682][T19128] loop2: detected capacity change from 264192 to 0
03:03:38 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:38 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x23, 0x0, 0x0)

[  376.043611][T19128] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0xffffff1f}, 0x0)

[  376.119609][T19147] loop5: detected capacity change from 264192 to 0
03:03:38 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x4c00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  376.191393][T19147] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:39 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x9effffff)

03:03:39 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x2}, 0x0)

03:03:39 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xefffffff)

03:03:39 executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0xffffff7f}, 0x0)

[  376.423398][T19160] loop2: detected capacity change from 264192 to 0
[  376.462181][T19168] loop1: detected capacity change from 264192 to 0
03:03:39 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:39 executing program 0:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x1f000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  376.473829][T19160] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:39 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xf0ffffff)

[  376.517162][T19168] erofs: (device loop1): mounted with root inode @ nid 36.
03:03:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x3}, 0x0)

[  376.608515][T19160] loop2: detected capacity change from 264192 to 0
03:03:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x4}, 0x0)

03:03:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

[  376.674721][T19182] loop0: detected capacity change from 264192 to 0
03:03:39 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x5c00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x5}, 0x0)

03:03:39 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xffffff7f)

[  376.756727][T19182] erofs: (device loop0): mounted with root inode @ nid 36.
[  376.777181][T19191] loop5: detected capacity change from 4 to 0
[  376.787115][T19191] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:39 executing program 0:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  376.924560][T19202] loop2: detected capacity change from 264192 to 0
[  376.942209][T19202] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  376.951077][T19201] x_tables: duplicate underflow at hook 1
03:03:39 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  376.987205][T19201] __nla_validate_parse: 5 callbacks suppressed
[  376.987226][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:39 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xffffff9e)

03:03:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x6}, 0x0)

[  377.031670][T19202] loop2: detected capacity change from 264192 to 0
03:03:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

[  377.083648][T19202] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:39 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xffffffef)

[  377.160250][T19216] loop0: detected capacity change from 65536 to 0
[  377.243188][T19216] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x6000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  377.301133][T19228] loop5: detected capacity change from 4 to 0
03:03:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x7}, 0x0)

03:03:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x605f84f900000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  377.371802][T19228] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:40 executing program 0:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x6000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:40 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  377.481037][T19237] x_tables: duplicate underflow at hook 1
[  377.521293][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:40 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xfffffff0)

03:03:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8}, 0x0)

03:03:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

[  377.591769][T19246] loop0: detected capacity change from 264192 to 0
[  377.643987][T19245] loop2: detected capacity change from 264192 to 0
[  377.730637][T19246] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 0
[  377.747865][T19245] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x6800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:40 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0xcc, 0x0)

[  377.845472][T19257] loop5: detected capacity change from 4 to 0
03:03:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x9}, 0x0)

03:03:40 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x40030000000000)

[  377.917007][T19257] erofs: (device loop5): mounted with root inode @ nid 36.
[  377.974993][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:40 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:40 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x100000000000000)

03:03:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xa}, 0x0)

[  378.069745][T19271] loop2: detected capacity change from 264192 to 0
[  378.184354][T19271] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:41 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x6c00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  378.316219][T19284] loop5: detected capacity change from 4 to 0
[  378.341897][T19287] x_tables: duplicate underflow at hook 1
[  378.384805][T19284] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xc}, 0x0)

03:03:41 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  378.425028][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:41 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x200000000000000)

03:03:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')

[  378.493160][T19294] loop2: detected capacity change from 264192 to 0
[  378.615899][T19294] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  378.661162][T19294] loop2: detected capacity change from 264192 to 0
[  378.694159][T19294] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  378.714199][T19309] x_tables: duplicate underflow at hook 1
[  378.869655][T19310] loop5: detected capacity change from 4 to 0
[  378.884739][T19310] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="9177b3e2c3bb573cf0aaa104012532743c17c38b529490a81977fd5e354e2383ae70e1a5978e842187e53f72eb4ea8c54c87c14b5d3bb3954d4d365a5b5f6ac1cad2df25885cc4affa6d0430e86bb4cd1d96eb722c02cc905cc7006722f43446b27250963a380e4ebf295a27daca19746bc30d8274715ae84e3069bf601da066d56d4c436528d58da89cd7ead2fe1360a6971fd4a0dabdd9fa2d3fd04fff833d9cc4d008e6f89c5a87da5d3efe0bcd74e4b3eea8a002f2849002008596b26d20709f00a24ebe4d530fa259dcf21387119ef311dade00620d4b3c1d3e2d3e02e64efb71d109839b063372771805669dc67afd45a5c6af373937272065", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0xcc, 0x0)

03:03:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xf}, 0x0)

03:03:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')

03:03:41 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x7400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:41 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x204000000000000)

03:03:41 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')

[  379.035041][T19321] loop2: detected capacity change from 264192 to 0
[  379.058483][T19323] x_tables: duplicate underflow at hook 1
03:03:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x10}, 0x0)

[  379.087439][T19321] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  379.116967][T19328] x_tables: duplicate underflow at hook 1
03:03:41 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x300000000000000)

[  379.238130][T19321] loop2: detected capacity change from 264192 to 0
[  379.262670][T19321] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  379.298854][T19339] x_tables: duplicate underflow at hook 1
03:03:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x60}, 0x0)

03:03:42 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x400000000000000)

[  379.379309][T19343] loop5: detected capacity change from 4 to 0
[  379.465989][T19343] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r8, &(0x7f0000000140), 0xcc, 0x0)

03:03:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:42 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:42 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:42 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x500000000000000)

03:03:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x83}, 0x0)

[  380.157309][T19366] loop2: detected capacity change from 264192 to 0
[  380.178095][T19369] x_tables: duplicate underflow at hook 1
03:03:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x179}, 0x0)

03:03:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x300}, 0x0)

[  380.218187][T19365] loop5: detected capacity change from 4 to 0
03:03:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x500}, 0x0)

03:03:43 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x600000000000000)

[  380.268792][T19366] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  380.285745][T19365] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  380.407585][T19366] loop2: detected capacity change from 264192 to 0
03:03:43 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  380.449288][T19366] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  380.537626][T19388] x_tables: duplicate underflow at hook 1
[  380.651896][T19394] loop5: detected capacity change from 4 to 0
[  380.664636][T19394] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:43 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:03:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x600}, 0x0)

03:03:43 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x604000000000000)

03:03:43 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:43 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  381.222125][T19410] loop2: detected capacity change from 264192 to 0
[  381.222182][T19411] x_tables: duplicate underflow at hook 1
03:03:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x700}, 0x0)

[  381.278588][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  381.299633][T19407] loop5: detected capacity change from 4 to 0
03:03:44 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x700000000000000)

[  381.369294][T19410] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  381.380886][T19407] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:44 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x900000000000000)

03:03:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x900}, 0x0)

03:03:44 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  381.570420][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  381.725641][T19433] loop2: detected capacity change from 264192 to 0
[  381.748335][T19433] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  381.807088][T19433] loop2: detected capacity change from 264192 to 0
[  381.824956][T19433] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:44 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="9177b3e2c3bb573cf0aaa104012532743c17c38b529490a81977fd5e354e2383ae70e1a5978e842187e53f72eb4ea8c54c87c14b5d3bb3954d4d365a5b5f6ac1cad2df25885cc4affa6d0430e86bb4cd1d96eb722c02cc905cc7006722f43446b27250963a380e4ebf295a27daca19746bc30d8274715ae84e3069bf601da066d56d4c436528d58da89cd7ead2fe1360a6971fd4a0dabdd9fa2d3fd04fff833d9cc4d008e6f89c5a87da5d3efe0bcd74e4b3eea8a002f2849002008596b26d20709f00a24ebe4d530fa259dcf21387119ef311dade00620d4b3c1d3e2d3e02e64efb71d109839b063372771805669dc67afd45a5c6af373937272065", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:03:44 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:44 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4100000000000000)

03:03:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xa00}, 0x0)

03:03:44 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  382.256756][T19452] xt_check_table_hooks: 1 callbacks suppressed
[  382.256778][T19452] x_tables: duplicate underflow at hook 1
[  382.291477][T19453] loop5: detected capacity change from 4 to 0
03:03:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xc00}, 0x0)

[  382.326729][T19454] loop2: detected capacity change from 264192 to 0
[  382.329363][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  382.351116][T19453] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:45 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x6201000000000000)

[  382.461177][T19454] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:45 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  382.574820][T19464] x_tables: duplicate underflow at hook 1
[  382.624164][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xc71b000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  382.842649][T19474] loop5: detected capacity change from 4 to 0
[  382.865559][T19476] x_tables: duplicate underflow at hook 1
[  382.879004][T19477] loop2: detected capacity change from 264192 to 0
[  382.894149][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  382.928090][T19474] erofs: (device loop5): mounted with root inode @ nid 36.
[  383.013104][T19477] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:03:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xf00}, 0x0)

03:03:45 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x8000000000000000)

03:03:45 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  383.110918][T19477] loop2: detected capacity change from 264192 to 0
[  383.120783][T19477] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xebffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:45 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x9effffff00000000)

03:03:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x4788}, 0x0)

[  383.275438][T19498] x_tables: duplicate underflow at hook 1
[  383.280350][T19497] loop5: detected capacity change from 4 to 0
[  383.328898][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  383.343111][T19497] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x4888}, 0x0)

03:03:46 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  383.369330][T19504] loop2: detected capacity change from 264192 to 0
[  383.391645][T19504] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:46 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x25, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:46 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xefffffff00000000)

[  383.461492][T19504] loop2: detected capacity change from 264192 to 0
[  383.539802][T19504] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  383.613930][T19520] x_tables: duplicate underflow at hook 1
[  383.679402][T19524] loop5: detected capacity change from 4 to 0
[  383.775127][T19524] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0xcc, 0x0)

03:03:46 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xf0ffffff00000000)

03:03:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x5865}, 0x0)

03:03:46 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:46 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:46 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x27, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  384.276944][T19544] loop2: detected capacity change from 264192 to 0
[  384.294353][T19545] x_tables: duplicate underflow at hook 1
03:03:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x6000}, 0x0)

[  384.326518][T19541] loop5: detected capacity change from 4 to 0
[  384.360458][T19544] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:47 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xffffff7f00000000)

03:03:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
socketpair(0x2e, 0x80804, 0x10001, &(0x7f0000000100))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  384.431657][T19541] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:47 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x80000, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  384.556859][T19555] x_tables: duplicate underflow at hook 1
[  384.680746][T19562] loop2: detected capacity change from 264192 to 0
[  384.694016][T19562] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  384.783316][T19567] x_tables: duplicate underflow at hook 1
[  384.794884][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  384.817584][T19566] loop5: detected capacity change from 4 to 0
[  384.840733][T19566] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0xcc, 0x0)

03:03:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x6558}, 0x0)

03:03:47 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xffffffff00000000)

03:03:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
socket(0x10, 0x80000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:47 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x43, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:47 executing program 3:
r0 = syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000080)='./file0\x00', 0x200, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="645ebebad5b40e421e3215", 0xb, 0x6}, {&(0x7f0000000180)="892072e9c8e5a67e3bba9fd808e155b66dff86703781b203499d4ad186d742ebd84b5415098e2953bc2caa1b4a8f7341f719f1ee68df7e877e193278fe356c5caf8d1fd4c0fcdd1605683194629e6e0b33b9466e954f8b13d6216fa636617bf8", 0x60, 0x200}], 0x218804, &(0x7f0000000240)={[{'\xea'}, {'sa\x00'}, {}], [{@pcr={'pcr', 0x3d, 0x16}}]})
close(r0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:03:48 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  385.210660][T19584] x_tables: duplicate underflow at hook 1
[  385.233881][T19585] loop5: detected capacity change from 4 to 0
[  385.250750][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x7901}, 0x0)

[  385.311496][T19586] loop2: detected capacity change from 264192 to 0
03:03:48 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  385.358807][T19585] erofs: (device loop5): mounted with root inode @ nid 36.
[  385.362526][T19594] x_tables: duplicate underflow at hook 1
[  385.379423][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  385.456511][T19586] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  385.495894][T19597] loop3: detected capacity change from 2 to 0
03:03:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8100}, 0x0)

03:03:48 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x64, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  385.511294][T19597] gfs2meta: Unknown parameter 'ê'
[  385.551270][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  385.669021][T19597] loop3: detected capacity change from 2 to 0
[  385.692717][T19597] gfs2meta: Unknown parameter 'ê'
[  385.798105][T19615] loop5: detected capacity change from 4 to 0
[  385.828854][T19615] erofs: (device loop5): mounted with root inode @ nid 36.
03:03:48 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0xcc, 0x0)

03:03:48 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:48 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:03:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8300}, 0x0)

03:03:48 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x300, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  386.270398][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  386.304041][T19631] loop5: detected capacity change from 4 to 0
03:03:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8847}, 0x0)

[  386.345642][T19635] loop2: detected capacity change from 264192 to 0
[  386.361962][T19631] erofs: (device loop5): mounted with root inode @ nid 36.
[  386.427058][T19635] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:49 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
dup(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:49 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:49 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x48c, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:49 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000080000000000003b0400000801000054f960b9c969daae8922b53c3468c844bc717c36dcdfd693e2ee9ba298683aafda41e2f7f1be2e8eaf882ee59e5bddbd40ddf27d9c0300"/83, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x42}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xadc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r7 = open(&(0x7f0000000a80)='./file0\x00', 0x64a00, 0x8c)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000b00)={@dev, @multicast2}, &(0x7f0000000b40)=0xc)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x800)
r8 = syz_mount_image$squashfs(&(0x7f0000000280)='squashfs\x00', &(0x7f00000002c0)='./file0\x00', 0x3, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000880)="39c44f8a94638fa8e57b72fe2a3bba1756f434b9615cecfb930f8a9b208435ba3f736eb0be11aec8f9622abda26812351b0d4b12acfaf5bf222fcc121b0f850a71655cf812f2fc45d8a10a793a2ceb5a0eff5d0763ccbf6b51b0562eea419dc62d55d279f26b87c1ec26557c3bfac349ba89d2c32361503794d75c7b57cba68dafe1e9e7505143803ccaf2fe8094005301e366eb", 0x94, 0x5}, {&(0x7f0000000400)="b0b72aaf9bed418473d6beccfa9bfd6037414331554ba0ef2d196960ee241bad27b8b9b773a2c9fa05763544dee5fc5da4c6858a6f2bbddd4c70891313e2026ff0a6974bd0904efd3343e88d38f8cf1b336bd9404fb17a9e45c9efc228d8b2265220a5afd7cdf9ef4d06d09333bc54b42acb489bf9878f264df88c460d98fc6be4571f628e853ab98e199e09a7f52252e28d3fb028df6172e78e151f47064a22621a2ef129bcf7399710112b07e627e435a0ab17c76565b218078db21cbb21ef94285da56e0ae73c3c4d", 0xca, 0x3}, {&(0x7f0000000500)="579a00766a7260844d0b9d4c9d47d023c44ae3273536302aecb099473913aa6d1a682f50cd23119a438c1d8501d9bdd77b80f9c698eb85bf353adc9ff8d8d89e2facb90b740bc6808c568fbbaca49bc085a965e05b774ea545a75dd07447d99798d7a33843b691b34755183d9c0aeb25049ecbdf4b3a8c82d1c7cbb08050f80515556eb62b3b381482a0ebe03ef31da3f0dc8597636d9703e66f04a7b8bcb09109bf36a3a212b24e4d580b8c409bcca5c0f84af3", 0xb4, 0xc0000000}, {&(0x7f00000005c0)="e111003db9fe642e4cbea89e18531c12323f595893bd9202e55cbb531c5724b51a5b9f145d1f6ed721f12f598cf11e7ee54d3c939640508bb4ef467b963697982e1f1ad0e275fb633ea19e9939c4ed68bba295398c5440e9d8221e96fcd497afc705738cd77ffe358049dd24e270bb760526c67ca072a0b52a1b248c3fd2f5260b52f80467db07c6f5f3e88cf5a62e4f4e06c3dfcc73e7614785b8eb13177ce10221d6ba49f220692d3a710696def1a7d0", 0xb1, 0x7ff}, {&(0x7f0000000680), 0x0, 0xffffffff8faa6f3a}, {&(0x7f00000006c0)="cdc2b2251d95013af1f64a01b030c4f15bf8b0ae0fd24f9b87de9f2b5ee72131d037529bb16d475d28c266e3684ac132d86d9c1728849237f1899d3f932b4a6875b03a1ae1b100f0c90a20d1b89889898fb32c7f01912b504cec2e65aa3399e26e0ca12b25aa164530d6dc6d7b45c334ec67c76ff8ffedbfad72331019852f8fc7dfb202e8d3c2a3ce940413773a3370fa351ccdba3ca3e0ba0fbb9d2fd5eab534a25cc0b033b544dbe1d1291fa27d013bf66e1759ef50ea56e35a3bc6719467d805684322b13f5c8d16169f7a56a9d6e5ef023240b1e64dd734c5035d5de043de59c1cbd2c38960b5c3b226e6209d7028", 0xf1, 0x2}], 0x108000, &(0x7f0000000d00)={[{'wlan1\x00'}, {'wlan1\x00'}, {'nl80211\x00'}, {'\\:[!@{$@&]\n'}, {}, {'-'}, {'sa\x00'}, {'nl80211\x00'}], [{@permit_directio='permit_directio'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@euid_gt={'euid>'}}, {@seclabel='seclabel'}, {@seclabel='seclabel'}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}, {@uid_gt={'uid>', 0xee00}}, {@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, 'wlan1\x00'}}]})
r9 = socket(0x10, 0x2, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r6}, 0x8)
write(r9, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x1412, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4015}, 0x40080)
close_range(r6, r8, 0x2)

03:03:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8848}, 0x0)

[  386.783171][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  386.830895][T19657] loop2: detected capacity change from 264192 to 0
[  386.904165][T19657] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  386.913825][T19659] loop3: detected capacity change from 264192 to 0
[  386.963145][T19661] loop5: detected capacity change from 4 to 0
[  387.033301][T19661] erofs: (device loop5): mounted with root inode @ nid 36.
[  387.051866][T19657] loop2: detected capacity change from 264192 to 0
[  387.064751][T19669] loop3: detected capacity change from 264192 to 0
[  387.085012][T19657] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:49 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0xcc, 0x0)

03:03:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x34000}, 0x0)

03:03:49 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
dup(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:49 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x500, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:49 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000f1400fa441173610000538e6aa485ea0900000000000000"], 0x20}}, 0x0)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2000, 0xa4, 0x4}, 0x18)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0021900}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x140e, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x48041}, 0x4)

03:03:50 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xff00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x400300}, 0x0)

03:03:50 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
dup(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:50 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000679d0f140100000000000000000007004500736100000800010000000000ec31a938e537b0362ab0b7cd7b7e0663f9b72947304ec0bad0412f25713ac1c48af715ac516c7c49bd6a9d8dcafec7497fe04e6b5d3b679905acb587a411706c17acbb4a1dd064ffb4cc882eb0cd04149c2d1fa9d0b8e21a04e6c1fcd9a9516130e3624df61b6bf8da396e991f1df60a"], 0x20}}, 0x0)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x42c, 0x3f3, 0x10, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x39, [0x9, 0x8, 0x4, 0xd7, 0xf15, 0xc881, 0x9, 0xffff, 0x0, 0x8000, 0x400000, 0x4, 0x0, 0x5f1443fd, 0x2, 0x7f4a, 0x9d, 0x10000, 0x2, 0x88e, 0xffff2a2b, 0xfff, 0xf00, 0x0, 0xfffffff8, 0x80000001, 0x1, 0x0, 0x9, 0x7, 0x8, 0x6, 0x5, 0x7, 0x7, 0x9, 0x2, 0x7fff, 0x35d2071d, 0x4, 0x4, 0x5, 0x2, 0x1, 0x1c0000, 0x40, 0x0, 0x4e34, 0xfff, 0x3, 0x1, 0x2, 0x3, 0x4, 0x6, 0x2, 0x7fffffff, 0x8, 0xe0, 0x61c3725d, 0x16, 0x0, 0x20, 0x7], [0x400, 0x7fffffff, 0x0, 0x6, 0x4, 0x1, 0x8000, 0x9, 0x412a, 0x4, 0xfffffff9, 0x11, 0x50f, 0xff, 0x2, 0x10001, 0x4, 0xc9, 0x8, 0x234, 0xc63, 0xfffffff9, 0x9, 0x4, 0x8, 0x9a, 0x2, 0x40, 0x285, 0x7, 0xffffffff, 0x6, 0x8, 0x3, 0x2, 0x7, 0x3f, 0x4, 0x0, 0x1ff, 0x2, 0x6, 0x5, 0x5, 0x26a, 0x0, 0x3, 0x8, 0x10000, 0x10001, 0x7, 0xfffffffa, 0xff, 0xfff, 0x8, 0x6, 0xf857, 0x7fffffff, 0x1, 0x7fff, 0x5, 0xfffffff7, 0x8, 0x80], [0x7ff, 0x2, 0x5, 0x3, 0x7, 0x100, 0xffffffff, 0x0, 0x4, 0x8fc, 0x4c, 0x2, 0x4, 0x4, 0x7, 0x69d, 0x9b, 0x80000001, 0x8, 0x9, 0x9, 0x0, 0x2, 0xfdd3, 0x7, 0x10000, 0x8, 0x7f, 0x4, 0x1, 0x4cf, 0x4, 0x80000000, 0x5, 0x1, 0x3, 0x3f21, 0x5483, 0x10000, 0x9, 0x9, 0x3, 0x80, 0x40, 0x3, 0x3, 0x101, 0x800, 0x3, 0x24ac, 0x1, 0x7fffffff, 0x3, 0xffff0000, 0x3, 0x1, 0x4, 0x9, 0xffffffff, 0xcec, 0xb6, 0x4, 0x9e13, 0x20], [0x3800, 0xff, 0x7ff, 0xe9f, 0x7, 0x7fffffff, 0x3f, 0x6, 0x2, 0x4, 0x7, 0xb652, 0x8, 0x8, 0x8001, 0x4, 0x40, 0x3f, 0x400, 0x7b3, 0x6, 0x1, 0x101, 0x4, 0xffffff81, 0x344040f0, 0x81, 0x7, 0x4, 0xfffffffa, 0xb9, 0x7, 0x20, 0x4, 0x3, 0xfff, 0x5, 0x2, 0x80, 0x7fffffff, 0x0, 0x7, 0x1, 0x7, 0x1, 0x5, 0x7, 0x1ff, 0x3e2e, 0x5, 0x9, 0x8001, 0x200, 0x8000, 0x1cadb0a4, 0x1, 0x10000, 0xffffff49, 0x0, 0x3, 0x0, 0xe0, 0x0, 0x4], 0xa, [':\x00', '\x00', ')-+:\x00', '.\x00']}, ["", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000640)={0x8, 0x101, 0x1000, 0x5}, 0x10)

[  387.442998][T19692] loop5: detected capacity change from 4 to 0
[  387.470988][T19700] xt_check_table_hooks: 4 callbacks suppressed
[  387.471009][T19700] x_tables: duplicate underflow at hook 1
[  387.521737][T19698] loop2: detected capacity change from 264192 to 0
[  387.536382][T19692] erofs: (device loop5): mounted with root inode @ nid 36.
[  387.561558][T19700] __nla_validate_parse: 2 callbacks suppressed
03:03:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x1000000}, 0x0)

03:03:50 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x1403, 0x400, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000090}, 0x4c000)

03:03:50 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  387.561577][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  387.591856][T19698] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  387.662968][T19698] loop2: detected capacity change from 264192 to 0
[  387.671493][T19698] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  387.731162][T19715] x_tables: duplicate underflow at hook 1
[  387.762987][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
r6 = accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg(r5, &(0x7f00000006c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="5b74356a5bec8c2dee5d9b6e0114960bf9f515762de0fa0637d4a7a63ee13d79132d66d678d1aa47088be5ebbc4e", 0x2e}, {0x0}, {&(0x7f0000000380)="6a70f6fcf5c5225119162646a42cd284e2e74a5c0127ebfa80db2ac15f47d45dea22dc666aa8ded7cd12694cd0d1df9f72564d43af1e02357716cfac0f7a391f26a0a7721c7e1e645805d2dc49ccd46a4b6471c2c969469fc17736ee5c05de07ec7b40bb0828ab88b9c87fccf1d81dcfc6b879c7646531d5f76e27c6169044cbbeaa52a32db9f0861939bdb4bbdaece692348d07df1f0491a7930b79a651f69e5eb71cbbdba3334112bdc975246feb5ac795b8998f53ab686985482e037f477f158520cfeef7da217ebd5aa109c9bf148f55adec591b93ac5c47163ef57916d4e1573fd7c0e4d6737d7238c8fbd99c671a46", 0xf2}, {&(0x7f0000000480)="b7d64f644c6aae13e96b99d603597696475de91fae7242c7c303a10903eaf3aa44ad4e0ba16acf", 0x27}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000005c0)="c5eef4547250b312faff885f23992a274f67ec633f0fb219f3abf2be3710fa1b47eb6af8be918968374e58583bd8497b895926428bed9f196a0c4334189b12359b30bc7ebd41235d05ae63747cff8732", 0x50}], 0x6}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140), 0xcc, 0x0)

03:03:50 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7c00, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:50 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xff0f000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:50 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x12201, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0xf}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xda0, 0x22}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1c8e, 0x12}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000010}, 0x1)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f00200000070045007361000008000100"/32], 0x20}}, 0x0)

03:03:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x2000000}, 0x0)

03:03:50 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  388.357387][T19736] x_tables: duplicate underflow at hook 1
03:03:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x3000000}, 0x0)

[  388.410460][T19738] loop2: detected capacity change from 264192 to 0
[  388.420482][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:51 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x218000)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000140)={0x634, 0x7, 0xa, 0x5, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0x5d8, 0x4, 0x0, 0x1, [{0x154, 0x1, 0x0, 0x1, [@xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xa2}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}]}, {0x8c, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}, @range={{0xa, 0x1, 'range\x00'}, @void}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @void}]}, {0xd0, 0x1, 0x0, 0x1, [@fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}, @payload={{0xc, 0x1, 'payload\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x5bc1bff5d80b4e59}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}]}, {0x10, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}]}, {0x60, 0x1, 0x0, 0x1, [@dynset={{0xb, 0x1, 'dynset\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x4a1}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x12}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}]}, {0x118, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xf8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x24}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x87}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfe}, @NFTA_BYTEORDER_DREG={0x8}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}]}, {0x180, 0x1, 0x0, 0x1, [@limit={{0xa, 0x1, 'limit\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x158, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x13c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd9, 0x1, "5cab127dc578463a092033c41fdef2b58b9bb312d66387cd4604516dfd1e417240e62c34694ef2855a11e436064cb6ce290a9d30b376fa89a5e667d9bbd69e16427986defa9048b46015664c4c4a4c329b25654f69f083689e614a125a386fec26147b47f025e55fdc30a9642d0bb8341985ec84c6c1682ff69ab7ed385ead81e4215552705c671044680bcb7405f47399d851810a8cda6ddd6afd2f412bb8e43b1e273546b192ec8ee837158d7be80fc3e79ed8cadaa10c439115094f77ef20d94a9b6016406168c16c94941830c77ad5d13ce35a"}, @NFTA_DATA_VALUE={0x5c, 0x1, "873fbd0f96d28d100780cdf13fcb078c91707586b666bc37128f2d9924660a88a4bc04f84eb0e1358fe094f1b666d666cc681ffb66ac3d2df4239af66e91943a38c41d632809d596aa39909f3ae574624d7c6b8563fc1b58"}]}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}]}, {0x1c, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}]}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x634}, 0x1, 0x0, 0x0, 0x24000040}, 0x880)

[  388.455288][T19738] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:51 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffefffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:51 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x4000000}, 0x0)

03:03:51 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x140f, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  388.820613][T19756] loop2: detected capacity change from 264192 to 0
[  388.842032][T19759] x_tables: duplicate underflow at hook 1
[  388.908402][T19756] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  388.936117][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  389.117035][T19741] loop5: detected capacity change from 264192 to 0
[  389.162353][T19741] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:03:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0)

03:03:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x5000000}, 0x0)

03:03:52 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:52 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:52 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x101000, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000f14000327bd7000fcdbdf250a00450069706f69620000000d0045006f06005f766e6963000000000800010001000000"], 0x34}, 0x1, 0x0, 0x0, 0xc080}, 0x440c0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000001140100000000000000000007004500736100000800010200000000b19439eb8527c39a7f00c88b460cede03925e77b643bc868a81d2b125eb61cf2a07a0868093dfbe667a9cda33cef3576350fa727fae67c00b5e7cc"], 0x20}}, 0x0)

03:03:52 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8100, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  389.550313][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  389.577033][T19783] loop2: detected capacity change from 264192 to 0
03:03:52 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x6000000}, 0x0)

[  389.671281][T19783] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:52 executing program 3:
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x0, @dev}})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001214e81c2dbd7000ffb5070000000100020000000800150001000000080001000000000008d5000300000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400a1}, 0x0)

03:03:52 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  389.849359][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:03:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x7000000}, 0x0)

03:03:52 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  390.037792][T19800] loop2: detected capacity change from 264192 to 0
[  390.121567][T19800] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  390.137447][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  390.267858][T19800] loop2: detected capacity change from 264192 to 0
[  390.305276][T19800] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  390.377886][T19780] loop5: detected capacity change from 264192 to 0
[  390.452985][T19780] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:03:53 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0)

03:03:53 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x5, 0x680d, {0xffffffffffffffff}, {<r1=>0xffffffffffffffff}, 0x8000, 0x8})
ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0x3, @bcast, r1})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x4aac40, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1411, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x18}}, 0xcc22b8e678675cb4)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0xc0c0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0xc0031)

03:03:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8000000}, 0x0)

03:03:53 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:53 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffff0700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:53 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa000, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x100, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
socket$nl_rdma(0x10, 0x3, 0x14)

[  390.699667][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  390.732725][T19825] loop2: detected capacity change from 264192 to 0
03:03:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x9000000}, 0x0)

03:03:53 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  390.847122][T19825] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x503000, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400002}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1410, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x84001)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20001a0700000000000070000000000007004500737b2486f36f245d3a8000003eca7c54d3a9b37dd2a37bb3ff7b77e8e98274b2fbdc3f57eb3dc53304ba13ef689a0fab398ff9d024b5e129eb15eef9dd4ae824cc07818972c183bb7dc5251521923cae60570caf664b53fd097e611913e88c4dd7e6d95f3e7984dc127eedd728c3afada069d00b4f44b9187d18d2e20da7c518696d55741ef5df"], 0x20}}, 0x0)

[  390.970390][T19825] loop2: detected capacity change from 264192 to 0
[  390.990551][T19825] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xa000000}, 0x0)

03:03:53 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  391.103460][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  391.228004][T19853] loop2: detected capacity change from 264192 to 0
[  391.247558][T19853] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  391.309740][T19853] loop2: detected capacity change from 264192 to 0
[  391.332820][T19853] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0xcc, 0x0)

03:03:54 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x84010000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x4c}}, 0x40)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000004)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r2 = socket(0x11, 0x4800000000080003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00001fb000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8906, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xb}, {0x7, 0x5}, {0x1, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}}, 0x20000040)

03:03:54 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xc000000}, 0x0)

03:03:54 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  391.758661][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  391.779274][T19872] loop2: detected capacity change from 264192 to 0
03:03:54 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc400, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xf000000}, 0x0)

03:03:54 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:54 executing program 3:
r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001340)=""/145, 0x91}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/120, 0x78}, {&(0x7f0000002480)=""/204, 0xcc}, {&(0x7f0000002580)=""/227, 0xe3}, {&(0x7f0000002680)=""/5, 0x5}], 0x6)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000001300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4941f9a85fce9047, @fd_index=0xa, 0xfffffffffffffffe, &(0x7f0000001280)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/170, 0xaa}, {&(0x7f0000000080)=""/42, 0x2a}], 0x5, 0x10}, 0xffff3691)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  391.949092][T19872] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  392.078845][T19872] loop2: detected capacity change from 264192 to 0
[  392.114496][T19872] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x10000000}, 0x0)

03:03:54 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:55 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3f11df200000000f14010000000000000000b8af0045007361000008000100000020ee7dc537f36a75a6c2b27bb54fc828989bf61e753e77bfe1214551e1acd211a74559d1000000000000000000000000000788aa52b31e86b93615e74bde84a196bf402c23849e5f9e5dd7b66e5f5b3286"], 0x20}}, 0x8000)

03:03:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

03:03:55 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x60000000}, 0x0)

03:03:55 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x1411, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004810)
socketpair(0x4, 0x4, 0x80000001, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40c0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0xb4fb7a9ffc08a1cb, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4085}, 0x4040000)

03:03:55 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  392.777925][T19914] __nla_validate_parse: 2 callbacks suppressed
[  392.777948][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  392.827511][T19917] loop2: detected capacity change from 4 to 0
[  392.892453][T19897] loop5: detected capacity change from 264192 to 0
[  392.919611][T19917] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  392.983249][T19897] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
[  392.992983][T19917] loop2: detected capacity change from 4 to 0
03:03:55 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffff2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:55 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2002020}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb0, 0x1403, 0x200, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000090)

03:03:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x65580000}, 0x0)

03:03:55 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  393.053365][T19917] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:55 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:55 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x100}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

03:03:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x79010000}, 0x0)

[  393.294996][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  393.513962][T19951] loop2: detected capacity change from 4 to 0
[  393.542699][T19951] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:56 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

03:03:56 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:56 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x140f, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x2008010)

03:03:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x81000000}, 0x0)

03:03:56 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  393.815675][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  393.848823][T19965] loop2: detected capacity change from 4 to 0
[  393.920558][T19965] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  393.983557][T19965] loop2: detected capacity change from 4 to 0
[  393.999150][T19965] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:56 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffff8, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:56 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$NBD_SET_SOCK(r3, 0xab00, r1)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1410, 0x904, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044084}, 0x80)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000f140100000000000000000007004500736100000800010000000000a8d4c8710e4b7aba05cb7b11"], 0x20}}, 0x0)

03:03:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x83000000}, 0x0)

03:03:56 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:56 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  394.327799][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  394.337563][T19985] loop2: detected capacity change from 4 to 0
03:03:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x88470000}, 0x0)

03:03:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x88480000}, 0x0)

[  394.443991][T19985] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:57 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

03:03:57 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1409, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x4041)

03:03:57 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x88a8ffff}, 0x0)

03:03:57 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  394.772862][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  394.871915][T20006] loop2: detected capacity change from 4 to 0
[  394.976866][T20006] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  395.072533][T20006] loop2: detected capacity change from 4 to 0
[  395.082873][T20006] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:58 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffff9, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x9effffff}, 0x0)

03:03:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000))
ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, 0x140e, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000ff90000e9ff00000000000007004500736100000800010000000000f58847e80269815ad0fe421268d3d278d61f6f1f53d5a74afc9737e088"], 0x20}}, 0x4000055)

03:03:58 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:58 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  395.445001][T20028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  395.458701][T20025] loop2: detected capacity change from 4 to 0
03:03:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xefffffff}, 0x0)

[  395.567964][T20025] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:58 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x140f, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0}, 0x40846)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:03:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xf0ffffff}, 0x0)

03:03:58 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

[  395.717953][T20025] loop2: detected capacity change from 4 to 0
[  395.733701][T20025] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:58 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:03:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xffffa888}, 0x0)

[  395.854027][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  396.028009][T20053] loop2: detected capacity change from 4 to 0
[  396.066864][T20053] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  396.115553][T20053] loop2: detected capacity change from 4 to 0
[  396.124929][T20053] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:59 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffff1f, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:03:59 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xffffff7f}, 0x0)

03:03:59 executing program 3:
r0 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0xc800)
shmctl$IPC_RMID(r0, 0x0)
shmctl$IPC_RMID(r0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, r2, 0xee00, 0xee00, 0xee00, 0x102, 0x5}, 0x6, 0x1f, 0x7f00000000000000, 0x40, 0x0, 0xffffffffffffffff})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:03:59 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  396.567586][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  396.616731][T20077] loop2: detected capacity change from 4 to 0
03:03:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xffffff9e}, 0x0)

03:03:59 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:03:59 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

03:03:59 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x200000)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x1405, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x0, 0xffffffff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1f}}, 0x0)

[  396.753033][T20077] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  396.857794][T20077] loop2: detected capacity change from 4 to 0
[  396.883001][T20077] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:03:59 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:03:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xffffffef}, 0x0)

03:03:59 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  397.263789][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:00 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ebe027002a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:00 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:00 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r2=>0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x17)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xd4}}, 0x0)

03:04:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xfffffff0}, 0x0)

03:04:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x40030000000000}, 0x0)

[  397.646724][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  397.678763][T20120] loop2: detected capacity change from 4 to 0
03:04:00 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

03:04:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:00 executing program 3:
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000200)={'ip6erspan0\x00', 0xa9c})
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xab1e5cf6797f607e}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x1411, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r2 = socket(0x11, 0x4800000000080003, 0x0)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000340)={@loopback, 0x29})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00001fb000)={'vcan0\x00', <r4=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8906, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000006600000828bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0000f2ff0f001000f2ff060008000b00ff7f000008000b0b000500000008000b000600000008000b008000000008000b000600000008000b00030000000000000000000000000000006afb0fb2d87072f9904dea8f0db90de10275431e9cd63f25714070007a509c6b5d67e72d1463"], 0x64}}, 0x40000)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f140100000000000000ecbb6d7ff6a2a4b1006515295ffe6493ca640677ec94bfc7343b406e92b300ac0000000000ed80ff03e9b4b9041cca3895272166731a30f97de5d4ea2ee88fc8b96dc995cd931b"], 0x24}}, 0x0)

[  397.750341][T20123] loop5: detected capacity change from 4 to 0
[  397.761371][T20120] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  397.781132][T20123] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:04:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x100000000000000}, 0x0)

03:04:00 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)

[  397.939361][T20123] loop5: detected capacity change from 4 to 0
[  398.014541][T20120] loop2: detected capacity change from 4 to 0
[  398.032207][T20123] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:04:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  398.067618][T20120] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:00 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="941902012a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x200000000000000}, 0x0)

03:04:00 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:00 executing program 3:
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000000)={0x9, 0x0, 0x2019, 0x7, 0x0, {0x2e1, 0x7fff}})
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x70bd2c, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1411, 0x901, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)

03:04:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1411, 0x300, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x800)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x80080, 0x0)
syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x3, 0x3, 0x401, 0x0, 0x0, {0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140b, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f140100000000000000000007004500736100df37b51f19bbe6dce1"], 0x20}, 0x1, 0x0, 0x0, 0x200800c0}, 0x0)

03:04:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  398.373769][T20162] loop2: detected capacity change from 4 to 0
[  398.446007][T20164] loop5: detected capacity change from 4 to 0
[  398.482074][T20162] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  398.482983][T20164] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
[  398.560995][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  398.587275][T20164] loop5: detected capacity change from 4 to 0
[  398.617805][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  398.642965][T20162] loop2: detected capacity change from 4 to 0
[  398.672441][T20164] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:04:01 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0xcc, 0x0)

03:04:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x300000000000000}, 0x0)

03:04:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  398.722706][T20162] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1411, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x1)

03:04:01 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="455049502a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:01 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x38, 0x1403, 0x100, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0x38}}, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x400000000000000}, 0x0)

[  398.887346][T20191] loop5: detected capacity change from 4 to 0
03:04:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  398.991412][T20191] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
[  399.024700][T20202] loop2: detected capacity change from 4 to 0
03:04:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200084000f140100000000000000000007004500736100000800010000000000"], 0x20}}, 0x0)

[  399.046030][T20202] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:01 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0)

[  399.133013][T20191] loop5: detected capacity change from 4 to 0
[  399.154999][T20202] loop2: detected capacity change from 4 to 0
[  399.186860][T20191] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
[  399.203764][T20202] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:02 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value, &(0x7f0000000800)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x500000000000000}, 0x0)

03:04:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0)

03:04:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00), 0x4)
splice(r1, &(0x7f00000004c0)=0x6, r0, &(0x7f0000000500)=0xed0, 0x6, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000f14080000000000000000000800010001000000080001000000000077066e207d05e79e4dcb08290701571b9a1db1c75a3416ae91e53c964143f691e1f67b419c4cca165a629c7cd659542d24e18d93d42b06380d476ea5dc2e0bb6e32d46ac444d06db118294870644fe9cb277115351673c7963153f5ddb949f22191ec4f8beccf78f7f0bd9725fdc1e98cab5467a9a711f63a025d28e9d0d034bade8508d4afe1df97ba2342d06ffa8bca24afca4a59b1814242e6e8b63d2b22ae352ed064e13ea8199816bd8ca6957a0d5654d0ac7814f558482596d5bc6516eff465e72e4ade96a5544738b1253bf1fc594e8e2248c0c48da"], 0x20}}, 0x4014841)
r2 = socket(0x10, 0x2, 0x0)
r3 = accept(r0, 0x0, &(0x7f0000000540))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000580)={'batadv0\x00'})
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2400051}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1411, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x6b}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}}, 0x44)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x12c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xe8d}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x441b, @private0={0xfc, 0x0, [], 0x1}, 0x34}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8008810}, 0x800)

03:04:02 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:02 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="4b434f532a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  399.927521][T20244] loop2: detected capacity change from 4 to 0
03:04:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0)

03:04:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x600000000000000}, 0x0)

[  399.982249][T20244] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0)

[  400.032859][T20251] loop5: detected capacity change from 4 to 0
[  400.068649][T20244] loop2: detected capacity change from 4 to 0
03:04:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

[  400.092095][T20251] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
[  400.109321][T20244] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x700000000000000}, 0x0)

03:04:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000149dce3f7cc9fcb799d72df4206100000125bd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)

[  400.297862][T20251] loop5: detected capacity change from 4 to 0
[  400.365526][T20251] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:04:03 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:03 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x25, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:03 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

03:04:03 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000200)={0xffffffff, 0x8, 0xd1eb, 0x4, 0x1d98, 0x800})
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x1407, 0xc38, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8c0)

03:04:03 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="707267632a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x800000000000000}, 0x0)

03:04:03 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  400.953616][T20290] loop5: detected capacity change from 4 to 0
[  400.992112][T20291] loop2: detected capacity change from 4 to 0
03:04:03 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

03:04:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x900000000000000}, 0x0)

[  401.004696][T20290] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:04:03 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f098a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:03 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="210000000f1401007209ec11ec3a7fa8ec43a16a1e13040000000000000000000000000000000001000000b3d0b301"], 0x20}, 0x1, 0x0, 0x0, 0x240048c0}, 0x0)

[  401.127881][T20291] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  401.131603][T20290] loop5: detected capacity change from 4 to 0
[  401.146570][T20290] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock
03:04:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xa00000000000000}, 0x0)

[  401.272313][T20312] loop5: detected capacity change from 4 to 0
[  401.329347][T20312] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0)

03:04:04 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = syz_open_pts(0xffffffffffffffff, 0x40)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)

03:04:04 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x64, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xc00000000000000}, 0x0)

03:04:04 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f5e8a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xf00000000000000}, 0x0)

[  401.931396][T20337] loop5: detected capacity change from 4 to 0
03:04:04 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1b, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x10, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0)

[  401.976733][T20340] loop2: detected capacity change from 4 to 0
[  401.986448][T20337] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x1000000000000000}, 0x0)

03:04:04 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f43ec03a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  402.024635][T20340] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:04 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0)

[  402.216412][T20340] loop2: detected capacity change from 4 to 0
[  402.256526][T20340] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  402.436366][T20370] loop5: detected capacity change from 4 to 0
[  402.448085][T20370] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x9f866cf2, 0xec438f2a expected
[  402.572285][T20370] loop5: detected capacity change from 4 to 0
[  402.595392][T20370] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x9f866cf2, 0xec438f2a expected
03:04:05 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:05 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000006e46ad413220074861000008000100000000000000000000337226c55a3da2aea388406ddcf086"], 0x20}}, 0x0)

03:04:05 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x48}}, 0x0)

03:04:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x6000000000000000}, 0x0)

03:04:05 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x300, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:05 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a02a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:05 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x6, 0xfffffff8, 0xfffffffa, 0x7ff, 0x7], 0x5, 0x800, 0x0, <r1=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1411, 0x2, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000002}, 0x40)

[  402.896448][T20390] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.913561][T20392] loop2: detected capacity change from 4 to 0
03:04:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x6558000000000000}, 0x0)

[  402.954771][T20393] loop5: detected capacity change from 4 to 0
[  402.971340][T20392] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  403.051122][T20393] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:05 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:05 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x48}}, 0x0)

03:04:05 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1409, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000884)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x1412, 0x1, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x110)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1411, 0x800, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x140f, 0x1}, 0xe}}, 0x0)

03:04:05 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7c00, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:05 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a03a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x7901000000000000}, 0x0)

[  403.328437][T20414] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x140f, 0x1}, 0x24}}, 0x10)

03:04:06 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)

03:04:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8000000000000000}, 0x0)

[  403.432579][T20421] loop5: detected capacity change from 4 to 0
03:04:06 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4], 0x48}}, 0x0)

[  403.475130][T20421] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x9f866cf2, 0x8a438f2a expected
[  403.500822][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
03:04:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x1403, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20002000}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000007000000000000000000000007004500736100000800010000000000"], 0x20}}, 0x0)

03:04:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8100000000000000}, 0x0)

[  403.526882][T20421] loop5: detected capacity change from 4 to 0
[  403.545065][T20421] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x9f866cf2, 0x8a438f2a expected
03:04:06 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)

[  403.612805][T20435] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:06 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a04a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8300000000000000}, 0x0)

[  403.763923][T20444] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  403.864186][T20448] loop5: detected capacity change from 4 to 0
[  403.918673][T20448] erofs: (device loop5): mounted with root inode @ nid 36.
[  404.001915][T20420] loop2: detected capacity change from 4 to 0
[  404.049344][T20420] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock
03:04:06 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xc400, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x100, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x88, 0x1403, 0x800, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000111400042cbd7000fbdbdf2508004a000000000008004f000200000008004f000400000008004f000500000008004b00350000000d8b08941f258d17180aaacbf9c724114843b4233ce210f7d1c12da6cc77e2646fe4a3e0ebaccb61c4750fc020637ae8d5170e39f1ac7d9512106024fde3e3d98df915759d104472416d05e899a0483a467c20a0fc79c948438e493b4fcf078b876c3131e954dc60679a077f136b"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40080)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xc2017b445c20dfa0}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x140e, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffff9, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX]}, 0x53}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x20000084}, 0x810)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@private2={0xfc, 0x2, [], 0x1}}, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x1412, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10)

03:04:06 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)

03:04:06 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)

03:04:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8847000000000000}, 0x0)

03:04:06 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a05a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x8848000000000000}, 0x0)

[  404.326906][T20467] loop5: detected capacity change from 4 to 0
[  404.334457][T20466] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:07 executing program 3:
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000000fe0000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad430100000000009500000000000000050000000000000095000000000000001c0a7900007a35f0aabeb42c3350c512aee994a5642cb064ecd5615f3196e3359aceb768637c60bd5d2e4b274fdff6e79fc722f15659a7c85615c1b88bc894123cfe2314e887efecdcb7381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b1974af360eace66cec40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be000000820102b1900000000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa5725dddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc0271124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d44f92991a7817450bc7921dd372e621dd447b86e7ffd1bdc19846b995cac0995ca3ef6c1affb693ae366b0f11db6ee4830db4713e5cf3263b8c51d4eb57b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bdff030000ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e08de3a638c4fdb8562eb85173720c1df1147c9f5013c82fb6517c152c181e759a6b73943748a9cbfbd9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545145b7308c50a13d0dd35092250bbce4f618cad2375a34c7f15c3096f300004468cf1aba4a6f21ed0eb3681c696320d3251b7eab79ad8b126500419e25a94ce13a7a96deac79c90b8df122942a0fad0d814f230f954eec84ebda9fb3977f33c516aadc9bc51f23b12f761c4a0335cc1fe6608ea8626f651d7853af2ef066e4fbe7018f6424f5baafc8d0a6c6d8d0ebc2a2e97f0629999534273e023fd6c3000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000, 0xac)
exit(0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @can={0x1d, <r1=>0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0xfff8, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)='ipvlan1\x00', 0x3, 0x5, 0xbc6})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f00000003c0)=0x440, 0x4)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xe5c}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x735}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x2689, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0xad3db1964b1724b9, [], r1, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x8, 0x9b}, 0x10, 0xffffffffffffffff, r3}, 0x78)
setxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)='6)\xf1%\'@[)', 0x8, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  404.394486][T20467] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x22f356c0, 0x8a438f2a expected
03:04:07 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)

03:04:07 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0)

[  404.461698][T20467] loop5: detected capacity change from 4 to 0
[  404.469910][T20467] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x22f356c0, 0x8a438f2a expected
03:04:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x88a8ffff00000000}, 0x0)

03:04:07 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a06a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  404.694140][T20490] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  404.809759][T20495] loop5: detected capacity change from 4 to 0
[  404.861075][T20495] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:08 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffff2, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x9effffff00000000}, 0x0)

03:04:08 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d08000000802110000"], 0x48}}, 0x0)

03:04:08 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:08 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a07a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:08 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1409, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005)

[  405.423721][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  405.434771][T20519] loop5: detected capacity change from 4 to 0
03:04:08 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xefffffff00000000}, 0x0)

03:04:08 executing program 3:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x8, 0x0, 0x0, 0x2, 0x0, 0x80, 0x20010, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x2cdc1db, 0x100000000}, 0x200, 0x8, 0xa1, 0x3, 0x9, 0x6, 0xfff}, 0x0, 0x3, 0xffffffffffffffff, 0x8)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, 0x1411, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4040)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  405.534189][T20519] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x49dfbf2e, 0x8a438f2a expected
03:04:08 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d08000000802110000"], 0x48}}, 0x0)

03:04:08 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  405.673194][T20519] loop5: detected capacity change from 4 to 0
03:04:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xf0ffffff00000000}, 0x0)

[  405.725766][T20519] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x49dfbf2e, 0x8a438f2a expected
[  405.866771][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:09 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1410, 0x300, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}}, 0x1)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f140100000000000500000000002000736100000800010000000000"], 0x20}}, 0x0)

03:04:09 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffff8, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:09 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a08a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:09 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d08000000802110000"], 0x48}}, 0x0)

03:04:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xffffff7f00000000}, 0x0)

[  406.494857][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001"], 0x48}}, 0x0)

[  406.537339][T20557] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  406.572452][T20563] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  406.593827][T20562] loop5: detected capacity change from 4 to 0
03:04:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001"], 0x48}}, 0x0)

03:04:09 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:09 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\a\x00\x00=\x00'], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0)

03:04:09 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a09a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  406.645712][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  406.684368][T20562] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0xffffffff00000000}, 0x0)

03:04:09 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  406.953610][T20580] loop5: detected capacity change from 4 to 0
[  406.988948][T20580] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x5df55455, 0x8a438f2a expected
[  407.054576][T20580] loop5: detected capacity change from 4 to 0
[  407.088256][T20580] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x5df55455, 0x8a438f2a expected
03:04:10 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffff9, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:10 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)

03:04:10 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001"], 0x48}}, 0x0)

03:04:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x2}, 0x0)

03:04:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:10 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0aa400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  407.565936][T20604] loop5: detected capacity change from 4 to 0
03:04:10 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050"], 0x48}}, 0x0)

03:04:10 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, 0x1403, 0x800, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x150}}, 0x4000004)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1403, 0x100, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044040}, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xe400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3f}}}}, [@NL80211_ATTR_IE={0x8c, 0x2a, [@dsss={0x3, 0x1, 0x6c}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @prep={0x83, 0x25, @ext={{}, 0x40, 0x40, @device_b, 0xffffffff, @device_a, 0xffffffff, 0xec, @broadcast, 0xf0}}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0x49, {0x7, 0xc4, 0xfc, "87468f1bcd6b73109784faf6c26a0c485164c57f91f1c366a0ed5f2ca98463c9e8c6f6880fd512c26ea56532037fb18575a467ff6cce85b5b849823a7b48b64ee608245d706c"}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

03:04:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x3}, 0x0)

[  407.632297][T20604] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:10 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0ba400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x4}, 0x0)

[  408.019121][T20625] loop5: detected capacity change from 4 to 0
[  408.074704][T20625] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x36d9bdbb, 0x8a438f2a expected
[  408.165610][T20625] loop5: detected capacity change from 4 to 0
[  408.189650][T20625] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x36d9bdbb, 0x8a438f2a expected
03:04:11 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffff1f, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:11 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x140f, 0x1, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x20000004)

03:04:11 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050"], 0x48}}, 0x0)

03:04:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x5}, 0x0)

03:04:11 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0ca400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  408.687975][T20643] __nla_validate_parse: 3 callbacks suppressed
[  408.687994][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  408.719416][T20648] loop5: detected capacity change from 4 to 0
03:04:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x6}, 0x0)

[  408.812570][T20648] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:11 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x80)

03:04:11 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050"], 0x48}}, 0x0)

03:04:11 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0da400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x7}, 0x0)

[  409.060896][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  409.220520][T20667] loop5: detected capacity change from 4 to 0
[  409.290831][T20667] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x8bac8789, 0x8a438f2a expected
[  409.396282][T20667] loop5: detected capacity change from 4 to 0
[  409.418972][T20667] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x8bac8789, 0x8a438f2a expected
03:04:12 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7ffffffffffff, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x55e26111b894f447}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x140f, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000881}, 0x8001)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="50ca24679a180000000014004428bd7000ffdbdf2508003c"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00), 0x4)
vmsplice(r2, &(0x7f0000001740)=[{&(0x7f0000000300)="2dd7e44bcb104126ae2e89993b5115cf42dba1e9d418ef7ff520cc7b33761aab6ba50fa434b58e28be55ca80cc940b0a36c14424eda85422a1276a26f457956a1fe693f215eb9354ccb46b6d918ea3d0a65c4318aa5a3abd17efa92fcb4f78da703857dac101660177764ac10459a3f8be97bb36626d2530cbfa86f315b0cf90f2f4098b81bd8275fd8702bd39ab53443be81418fa86b5478e03dc2c4972c46096751e28ffa8f3a7771626fe0fdf22eafaeec587b3d5afcc967595e3ce81b84f0ba07afb78ae050c87a0cc924fee1c01", 0xd0}, {&(0x7f0000000400)="04c693fa0475c065e8390f5a7411012b2c21af10ed17327033c9b7d21652370d002275e375bac4c18a44083684cdd1e7b303c51233ee3c88bb013198ee4fef2b52e0c84a15cc3a18953d71626bba8c2d3bad1d8472466977240c1c66dda1a3442fb13b943c98973cee41158d7cdb6ec39f8ef3b968ad182b7c6e7a1590b1334ed629ab2100a5268af413790e0f24858be360a7", 0x93}, {&(0x7f00000004c0)="d66b8d6db8b9f3cc62b89a28d60bb0c321f1476b357a4248969850eb5114732ee8179bb88143b218aca677d19c7a09974c2c313db29f7c522f2b1563bd76f118dcce86934cade09896fa96430e8dcc151a3d493081f50015def378fd593fa32b37cd85e0b2979b971ab4577db4bdac73eb00ae0ff5d51e67011644ed270bce0074b39cba17b2ea93a4e074de09993d9aa402e90df4be8c8e54ceb18e2c2fb0e0892dcf9d701ab93fef4bf594a1eb7e022e9d287fd60ca37a437b5db881fb21b92e613fed7e236b281a248ffbb8c082389b96c39caee4ede77cfcce12831a883709f9e0dd7859060604c7a1919fae14047cb68448ad4a4367", 0xf8}, {&(0x7f00000005c0)="e76ad1d02e2ebfc545284851ebc56e5ffc4f27d6a9c5529e04", 0x19}, {&(0x7f0000000600)="98db06ed4fb7fec9068ea1bddc7640b1048cba85f83f74b59b980e0bf34dec6298ac9fbb", 0x24}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="22d0a1dad21ec4acba2883202f0bace1d5ea12496973977da33fbbd34d61dded594e1e5a30fa2c9f2b348fbbd2af652648d1b772bc4ef06916559620a1e0f9cf0ebdfb7813cef2510ffabc94d05d343e3760384962cb", 0x56}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="46ad5d505fd686c90826fa916c6bba646d59798ba3659e4d9d9d4882ca4759af84c45ed67a73a9a7b757884df7f217", 0x2f}], 0x9, 0xa)

03:04:12 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d08000000802110000000802110000015050505050"], 0x48}}, 0x0)

03:04:12 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8}, 0x0)

03:04:12 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0ea400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  409.865853][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  409.895007][T20691] loop5: detected capacity change from 4 to 0
[  409.914839][T20691] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:12 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d08000000802110000000802110000015050505050"], 0x48}}, 0x0)

03:04:12 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0fa400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x9}, 0x0)

03:04:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x76c, 0x0, 0x7fffffff, 0x149a, 0xffffffff, 0x6})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1409, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x4814)

03:04:12 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  410.249092][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xa}, 0x0)

[  410.293983][T20707] loop5: detected capacity change from 4 to 0
[  410.331563][T20707] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xe0806e67, 0x8a438f2a expected
[  410.505520][T20707] loop5: detected capacity change from 4 to 0
[  410.518296][T20707] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xe0806e67, 0x8a438f2a expected
03:04:13 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffff8880195dc3e0, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:13 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f1401000000008b7a2fdec3be004500736100000800010000000000"], 0x20}}, 0x0)
r1 = dup(r0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x1407, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x2c}}, 0x4)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f00000001c0)={'lo\x00', @ifru_mtu})

03:04:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xc}, 0x0)

03:04:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d08000000802110000000802110000015050505050"], 0x48}}, 0x0)

03:04:13 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:13 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a10a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  410.958832][T20732] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
03:04:13 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xf}, 0x0)

[  411.015664][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  411.027193][T20734] loop5: detected capacity change from 4 to 0
[  411.040210][T20732] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  411.086217][T20734] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:13 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x8ec, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc3, 0x77}}}}, [@NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x374, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xfa, 0xb, "620268f7fa263514f621d6ffb2d3007ad22dc9c6968705c2263b181433d56891a7eac6d4f0468c2818668dd88687c8092d6b14a89b21c22a72ce817dbad17525aac3c139ea912671d5759f29ceb22ce880fc596d7f7f2ad911bbd38ab19b501b460c7cab30e84169732817b2e49c4d72b3e615664bacf3c68ee22482448d7917213f46fef2b41a080263d5e96a097e3e30ee559825aad67a172c7625a4c89b8b9668c10345698f05ded9bacb4c9f85942ecb76e39a125a8fd4f41cf472a02c333c8a78020ef4b4e777939d77f69f7fd00a6b42699aa31635cf536ebf9de937000bd4b0ecafdcfeb0fc09121bd4b3c44457e9a4970543"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x260, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SRF={0x114, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1e4, 0xe, 0x0, 0x1, [{0xe7, 0x0, "66b47bc2b5505ea64deb949ae8f60b9e5852d4da1ef57c23bf27f166db60ab1693dd33bec602426f2d44787f46842f4f68842c3eb8e08a2f4c658d1cbee8cec200a705cbe0c599707296a1f3da322dc5bca06b9b2721040d2527f21e88d25297dc52c75eca26177cd7223b7355d9321f15d1efe69b2229661be3145cedf3927708edb9828d94909d352d5b98eaeef54615f26bd3cb14fd176074164ad281285c10c25b0ae69c0c13e6ed632e51139d7084bbf80ca9fe5525339cd1653eee009b9504b0888757093c1f643269f0832a83dffbb1a6317280dce9948081f3f471f048964a"}, {0xe9, 0x0, "278d9da157b4b0c65c6514fe47a14f2b9863ae1b01abfecc32da60f03bd20fdb8d1935116ece5dde4f73a49e3f4d068ccbb685db177ed10805e2e804488b147201327bc781db6b686ade55603be6ec4c617dc6b9f50835bfe736b818f529a89fed0f6a75f36a12e5890461893263b6be6f7d999900c2fcf27d4426f4e6b2c4c0ce08078cc0a8bb9941e591774f2942c53f22ee233af46675acc08acd1fb09952e0513a7c68d16c59b46792a3ed1ef8ecb5fff0d6e5fa1d86efd65c12cfc2068d4b863990c6a950254263d6ec23d3ff65098e6575fefa92b7c0aaff81e7a6605157204dbe1b"}, {0xb, 0x0, "e177236822c53e"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x10000}]}, @NL80211_ATTR_NAN_FUNC={0x108, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7163c7e99e68"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x48, 0xb, "935a963e2b9231b729ee3fabb56212702ed3e8d966d2dcc7b68a9995679dff830b1f496030bde2aa8286ea1ac0e0caaaafaf8bd3d50526b200c5c2b8d604ad294ff8a8f5"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9e, 0xb, "05c616d9900904aa0418828f0c615445521e44ea62d684e7c06fe2ed6bbe4e7775a4577991986f09b8a235a76943cef9d8fe42adaae0e6b76e6df86536936d00ba337369868f6a8356f3cb0812bfd9275b718433d4cf2bb53da4c26319412d7709c2a0133a4fd7884401bb4f311aa889b0909aa4100c7c346c7c3ab2ae9635734d896f0cb30557f39a5dd9acab5caf4ffbbd488c01ff3e96f592"}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x114, 0xe, 0x0, 0x1, [{0x1f, 0x0, "165fc7f63bb205b8d7bd0b17ae42e880c9dbfcf86fa62a8ad5af66"}, {0x14, 0x0, "073d983bcc4ae00e7990194431f58bfb"}, {0xda, 0x0, "9ff47633b10becdae47595b26173a77d66b08c1e1eea03f5cb9f23405991c726805e09c11a4f4c3a14d5d9cdad444563d5a3219dec3ea30664df1dd5ba30df2f00601466372e5666cffed5d7b66387f1be58d3282dccd5df3e66ddf9edcf72973ddc292b04b2f1f46c564acef622e46163771c1d71614366d61f45fee81cf0f38e05053d1d4d505836f8949e34bcca656a1fb38213088011c955008ff976683bafb5a6c668147db04b3e62edce6fe8e50c1f074a9c06f1768e04a0bb57e37042d4c9324c85ac0e8d0a928e4ac4cf865841ea3583a496"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}]}]}, 0x8ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}]}, 0x44}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc0, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80000}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:13 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a11a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:13 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x10}, 0x0)

[  411.300826][T20746] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  411.512616][T20756] loop5: detected capacity change from 4 to 0
[  411.564270][T20756] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xa3f9517f, 0x8a438f2a expected
[  411.650275][T20756] loop5: detected capacity change from 4 to 0
[  411.658166][T20756] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xa3f9517f, 0x8a438f2a expected
03:04:14 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffff8880195dc780, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:14 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:14 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/input/mice\x00', 0x1)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000003000)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002b40)={0x44c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x737}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d95}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8b}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3f, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffff, @loopback, 0x3}}}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "878378cccafd241438eaf38304d8bd2a7ce0baf18357d59b71b54c8d3a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8a0c}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "b0e1001488fa7c12506414000b21b74b884ec3d785df9983cd11758389ea7bb4a06e63063c047a6ad92afcdebf9dd93b37ced94bd895b2f2b7a35286e7b0d8fd682c93df5bfc73c7aa7dbcb7fc9c7ecc66cba22f1b5605fef5d42148629a9cdf9dea3b54c682d7bbd0a98032fc72bb2cf9b012e8cd9c1fa8b1d783f579eaec703a62f28afed3a3a94d510dcc91519dbe07cb63b5861ef9e34f62f274695799599d6ddaf1b0d85344e7070a6a5c8a3666d5f57601070a320d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x91, 0x3, "4c0974e27b6d824128c452c7ab445efc441536754a7975caefa8aaceb09c3e49bc618914a7b76949cecd3583835ad78b7e9ee1135c8c32404e89b3b96b086cbc8147fc2fb0809763acd45f8346ad6c4082cafb30e81067eea69b6cc4e61f42a98986387e93deece0c7b2e18e04ec0268f1bf51cff930aaa15f3fad7dcfbe582dca7d49ae852877107f476d6af8"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cc103ca6cb9d4b2b986ff8175bb090ff4891d7f635ab9fe758eaa14d"}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8d6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7098}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x80}, 0x44010)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002740)='/dev/vcs\x00', 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x48, 0x140e, 0x300, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x23}, 0x4000001)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8)
r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x101, 0x200000)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00')
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r6=>0x0, 0x29, 0x0, 0x1f, 0x8, 0x18, @dev={0xfe, 0x80, [], 0x23}, @rand_addr=' \x01\x00', 0x20, 0x130e0af49a8aeb28, 0x0, 0xffffffff}})
r7 = socket(0x11, 0x4800000000080003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00001fb000)={'vcan0\x00', <r8=>0x0})
sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8906, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000002700)={0x8, 'rose0\x00', {}, 0x7})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000026c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002680)={&(0x7f00000002c0)={0x23c0, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1130, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sa\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sa\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(*\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14e920}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sa\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sa\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sa\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '[$#!**()/,[\\}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'sa\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}]}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "dbbc7bab0d341e845a7c39429f2f9430d0c1c4fc26b4536c392430de8d3666d43f088dcb79989d484dfecec74edef5c63dddfc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "e96520e05c25b0c43de3afbc60a0909dbf8fb5090c03bf035ff8ade9f171118faa1f7ead7fb16d39678fa002e4678a977a98d5cd6c30d79b4d1da2dd9489af73da0bef9e1ec3b6e551dc977103c2b04a80e5083fc243b4e739a95996e2c9fbda01145a92011fb8"}, @ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "c3b059bc15c42392787f4ed4819813b502f3aa43787360d215"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}]}, @ETHTOOL_A_FEATURES_WANTED={0x1058, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "8452b810bded6b556cf29610376aff028774db5bf0d53a5240066d6305423d565b6c38da5be8f7da33674eb4b882d7add172746bce11c40927e05576ad301f7df12a57a7495e869a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "7ff9230d392c07563dd5e173810dca51faa3e347ecea843c15e0a2ed16d2b8733587497ad99c3b31fe7116f8bbbee107a95e3b059f9725ae3b26f994ca7ab18869b06a6a4571ab896d327045ee31d7b46bb9a79f13eddb660dad1ad375a522a59611a436aa0d964c7ed866639ed38530019da5b5d5e49e5031183e17c77dc021146743187581a88df05c90b9383f5ad254e3cacb654c147d943900635e234ac9989a1ccd07b274bd4471"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "16a85c42a5b68ad9ef5bb7eaa9a0a0352df58eb872e1df58e119dc1c68b9002a72c06ace9bf86f04fd31875d467bdc"}]}]}, 0x23c0}, 0x1, 0x0, 0x0, 0x240010d5}, 0x40)

03:04:14 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x60}, 0x0)

03:04:14 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a12a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:14 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  412.120245][T20777] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  412.147171][T20779] loop5: detected capacity change from 4 to 0
03:04:14 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1405, 0x0, 0x70bd2b, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000159}, 0x1)

03:04:14 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x83}, 0x0)

[  412.239378][T20779] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:15 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:15 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a18a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:15 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRESDEC=r0, @ANYBLOB="65d71a6b1703db5ac4cc22e17f4ef69f2d24e24cef235b5934522caae757de85186279261de1e2a8881856eb"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x44060)

[  412.512276][T20797] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  412.596274][T20801] loop5: detected capacity change from 4 to 0
[  412.677343][T20801] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:15 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x179}, 0x0)

03:04:15 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0)

03:04:15 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:15 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a21a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:15 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
r1 = socket(0x11, 0x4800000000080003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00001fb000)={'vcan0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8906, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)=@delchain={0x2ec, 0x65, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0x6}, {0xfffb, 0x1a}, {0x3, 0xc}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2a4, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={[], [], @empty}}, @TCA_RSVP_ACT={0x24c, 0x6, [@m_skbedit={0x98, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf19e, 0x1ff, 0x10000000, 0x0, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x3f, 0x0, 0x800, 0x7ae}}]}, {0x32, 0x6, "b066bc388051b6ac43decc534fca2bbf6c87deac927d2e5db7c606403ef78a9a027b8d52e4cc5e65db5546e2e796"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0xd8, 0xc, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_MARK={0x8, 0x5, 0xd25}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, [], 0x1}}, @TCA_CT_ACTION={0x6, 0x3, 0x20}]}, {0x68, 0x6, "65d577c16409a6c3569a91afce734163e8ef1cbff327e53bd1477086d86eb2efa0875e68c60b39b2174ed97823480e43e1de4aa41b7b36e76771cd77fd4affe2bdd5f4bc8dd2eaf09f3062bb3f67233bb13104fb6e17dde6df221cc83d2bd4d14ceae373"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xd8, 0x9, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x83, 0x6, "ae4017ae5b8ebf7aeb57fef8a784e7e15995df398a2912d1eb569597c6232a36b7e1637ba7b6f74aafe69c92dd45f79652d52d6aef50f331c51a1304175cefabba8565b7c48778b10ab4080b8d13de351025c1a820f2b872e4a41a0497793f5bdeb5714293b82c526e68d6d9de8babe6da790fd45ec32db0831f6bf7f4ad10"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x70, 0x9, 0x4}, {0xffffffff, 0x7, 0x9}, 0x6c, 0x38, 0x1f}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x1, 0x8000}, {0xa99, 0x9, 0x4}, 0x5e, 0x6, 0x81}}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x43e63bd0}, @TCA_CHAIN={0x8, 0xb, 0xaa}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4042844}, 0x4004010)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2045fa3987ed2e56c90000000f1401000000000000000000070045007361000008"], 0x20}}, 0x0)

03:04:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x300}, 0x0)

03:04:15 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  413.225970][T20819] loop5: detected capacity change from 4 to 0
[  413.271744][T20819] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x5a0d2dda, 0x8a438f2a expected
[  413.333337][T20819] loop5: detected capacity change from 4 to 0
[  413.343415][T20819] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x5a0d2dda, 0x8a438f2a expected
03:04:16 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:16 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a25a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:16 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
bind(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80)

[  413.599045][T20841] loop5: detected capacity change from 4 to 0
[  413.649023][T20841] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x8c54fe06, 0x8a438f2a expected
[  413.745011][T20841] loop5: detected capacity change from 4 to 0
[  413.772347][T20841] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x8c54fe06, 0x8a438f2a expected
03:04:17 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f098a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x500}, 0x0)

03:04:17 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:17 executing program 3:
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@dev, @multicast1}, &(0x7f0000000080)=0xc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:17 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a41a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x600}, 0x0)

[  414.422464][T20865] __nla_validate_parse: 2 callbacks suppressed
[  414.422482][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  414.461487][T20867] loop5: detected capacity change from 4 to 0
03:04:17 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:17 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x800, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  414.519031][T20867] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xac09a261, 0x8a438f2a expected
[  414.558269][T20872] loop2: detected capacity change from 4 to 0
03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x700}, 0x0)

[  414.607468][T20872] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  414.643312][T20867] loop5: detected capacity change from 4 to 0
[  414.693115][T20867] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xac09a261, 0x8a438f2a expected
[  414.731217][T20872] loop2: detected capacity change from 4 to 0
03:04:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  414.753035][T20872] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:17 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f258a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:17 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:17 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x287, 0x13}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4044810)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00), 0x4)
vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000200)="753599c9fbc68ae4f86e23985aeac668306e0e1b98e7ccc503284e4524e64f37e43d434539244fcd446637db47b77041ffd15bb2c319ba60bfa098e752f93bf1a9f4b0b6d1546cebce71f5b6ef3129d0d0eea0ac31add7c033c5e6105f3ecd6d532cc3c0d2126e2c53ab886995ca1ccb84cec3fd18bdb3979f5ef47c9bf93e3db575712b42f52dd4e3ee038ef7f3c2e32edeab1e562ad2279f0fc64a7ef9519f39331df81e1ae7a386efb93a52fba8af752b7597b43ed24c7c8f28b5d78eab08f1c5692fb94d6232980d25fb530bd6f8dec761f3f9aeb48cd849ba80d6d033e2721f53662cc5", 0xe6}, {&(0x7f0000000300)="3ca9b62c41a6cdb5ec687eb409792addbfb202f08a1116d3d19a4363cbb37df4742a608eb5e2dc50aa08ab3259b77f9cf32a07785addc41b42a2076da09c91dec6dd10c6b3c59b02b17ddc150cfc93dfab51ed5a8352149c0a10", 0x5a}], 0x2, 0x8)

03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x900}, 0x0)

03:04:17 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a48a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xa00}, 0x0)

03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xc00}, 0x0)

03:04:17 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  415.048117][T20906] loop5: detected capacity change from 4 to 0
[  415.070694][T20906] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:17 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:17 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a4ca400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  415.143064][T20914] loop2: detected capacity change from 4 to 0
[  415.151880][T20914] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xf00}, 0x0)

[  415.234127][T20914] loop2: detected capacity change from 4 to 0
[  415.248455][T20914] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  415.326220][T20931] loop5: detected capacity change from 4 to 0
03:04:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x4788}, 0x0)

03:04:18 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:18 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f5e8a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:18 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:18 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x5ab300, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="30e300000f140001a63faeff71232be9080003000200000008004500636d51000800030b020000000800030002000000"], 0x30}}, 0x4000004)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x4, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
fsetxattr(r0, &(0x7f0000000400)=@known='system.sockprotoname\x00', &(0x7f00000003c0)='syz0\x00', 0x5, 0x2)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r4 = openat(r1, &(0x7f0000000640)='./file0\x00', 0x80900, 0x101)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000006c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x400}, 0x1}, 0x6)
ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000680)=0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="000825bd7000fddbdf250700000014002000fe8800000000000000000000000001010800090003000000060001000500000005000d0000000000050005000000000005002100010000000c0016000000000000000000050007000300000014002000fe8000000000000000000000000000aa0500060004000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000011}, 0x800)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

[  415.418403][T20931] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:18 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a5ca400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x4888}, 0x0)

03:04:18 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  415.573814][T20941] ip6gretap0 speed is unknown, defaulting to 1000
[  415.585114][T20945] loop2: detected capacity change from 4 to 0
[  415.605409][T20941] ip6gretap0 speed is unknown, defaulting to 1000
[  415.616329][T20941] ip6gretap0 speed is unknown, defaulting to 1000
03:04:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x5865}, 0x0)

[  415.621336][T20945] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  415.629048][T20941] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  415.649501][T20941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  415.721611][T20941] ip6gretap0 speed is unknown, defaulting to 1000
[  415.733951][T20941] ip6gretap0 speed is unknown, defaulting to 1000
[  415.740808][T20956] loop5: detected capacity change from 4 to 0
03:04:18 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x6000}, 0x0)

[  415.782311][T20945] loop2: detected capacity change from 4 to 0
[  415.796787][T20956] erofs: (device loop5): mounted with root inode @ nid 36.
[  415.811031][T20941] ip6gretap0 speed is unknown, defaulting to 1000
[  415.820631][T20945] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:18 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x6558}, 0x0)

[  415.926256][T20941] ip6gretap0 speed is unknown, defaulting to 1000
03:04:18 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a60a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  415.985976][T20941] ip6gretap0 speed is unknown, defaulting to 1000
[  416.045933][T20941] ip6gretap0 speed is unknown, defaulting to 1000
03:04:18 executing program 3:
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={<r0=>0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001300)={r0, 0x1c}, &(0x7f0000001340)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x41)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)

03:04:18 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:18 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a080100000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:18 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x7901}, 0x0)

[  416.152040][T20985] loop5: detected capacity change from 4 to 0
[  416.184302][T20985] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:18 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a68a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8100}, 0x0)

03:04:19 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  416.342671][T20999] loop2: detected capacity change from 4 to 0
[  416.362349][T20999] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  416.414437][T20999] loop2: detected capacity change from 4 to 0
[  416.442989][T21006] loop5: detected capacity change from 4 to 0
03:04:19 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe2(&(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x84000)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x1401, 0x20, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000015}, 0x20040830)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x141000, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
fsetxattr$security_capability(r3, &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x5, 0x3}, {0x8000, 0x5}]}, 0x14, 0x2)
clock_gettime(0x0, &(0x7f0000000500)={<r4=>0x0, <r5=>0x0})
futex(&(0x7f00000004c0), 0x81, 0x2, &(0x7f0000000540)={r4, r5+10000000}, &(0x7f0000000580)=0x1, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10020001}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000a700"], 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)

[  416.476426][T20999] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  416.508740][T21006] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:19 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8300}, 0x0)

03:04:19 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a02a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:19 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a6ca400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8847}, 0x0)

03:04:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a00000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:19 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:19 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000f1401000000000000000000070045007361000010a4f1040da63156e91a108d510800010000000000"], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1410, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040840}, 0x0)

[  416.830445][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  416.877108][T21043] loop5: detected capacity change from 4 to 0
[  416.908394][T21045] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:19 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a74a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  416.930631][T21040] loop2: detected capacity change from 4 to 0
[  416.949518][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  416.958187][T21043] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8848}, 0x0)

03:04:19 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  417.002549][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  417.058321][T21040] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:19 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff, 0x80000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x178, 0x1403, 0x0, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40080}, 0x1)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a00000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  417.133397][T21040] loop2: detected capacity change from 4 to 0
[  417.191441][T21063] loop5: detected capacity change from 4 to 0
[  417.207651][T21040] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x34000}, 0x0)

[  417.237916][T21062] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
[  417.252283][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  417.262780][T21063] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a00000000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x400300}, 0x0)

03:04:20 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a03a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:20 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a7aa400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:20 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x100, 0x1403, 0x200, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x100}}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  417.452417][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  417.526735][T21085] loop5: detected capacity change from 4 to 0
[  417.537120][T21086] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a00000005"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x1000000}, 0x0)

03:04:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x2000000}, 0x0)

[  417.603823][T21089] loop2: detected capacity change from 4 to 0
[  417.637062][T21085] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a00000005"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  417.679830][T21089] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x578bf00b, 0x8a438f2a expected
03:04:20 executing program 3:
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0xc800)
shmctl$IPC_RMID(r0, 0x0)
shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0xa000)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008811}, 0x0)
sync_file_range(r1, 0x2, 0x4, 0x4)

03:04:20 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a8aa400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0)

[  417.869487][T21110] netlink: 'syz-executor.1': attribute type 72 has an invalid length.
[  417.883403][T21110] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  417.910465][T21089] loop2: detected capacity change from 4 to 0
[  417.949270][T21089] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x578bf00b, 0x8a438f2a expected
[  418.020229][T21120] loop5: detected capacity change from 4 to 0
03:04:20 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a04a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a00000005"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:20 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x1406, 0x4, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

03:04:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0)

[  418.115639][T21120] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:20 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  418.195576][T21130] netlink: 'syz-executor.1': attribute type 72 has an invalid length.
03:04:21 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a402000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  418.357205][T21140] loop2: detected capacity change from 4 to 0
03:04:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x5000000}, 0x0)

03:04:21 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c40)={0x570, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings, @NL80211_ATTR_SSID={0x22, 0x34, @random="b484950aba456853a41ee00f02495a50926c078b71e8867fadc8b56bbeea"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x218, 0x80, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x2, 0x0, {0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x308, 0x8, 0x7}}, @mic={0x8c, 0x18, {0xbe3, "2c17dcbc4eaa", @long="f83af375ccc927186cc7c675e1f2ded8"}}, @peer_mgmt={0x75, 0x16, {0x0, 0xe0e, @val=0x8001, @void, @val="777417bab310bcb4a526f582602be3d5"}}, @random_vendor={0xdd, 0x3e, "48fcd26e98308264ed2d508b3b5ed9e41ab33100fff9ba3ae248c120215dbc0747e0d93a18c701d2b4af456247fa8a1d148b301a59f8fe97b2c8626eee91"}, @random_vendor={0xdd, 0xdc, "48d83c8acbc49f6427ca73411f1616eaccb8de4a2c7fc92a54a46b67e2eb279e61a2d88d445f1e93ed7920f90eefb7ef586e73bdfce147129e2ba95ce467f4de506cfefbca501f4a412f08bb226b848dd350cfe3048454e2c6f4736ce2dc4aae9db8cc5c13e8bce863a85c22978ab6a2ca372e1b8eb6d90095d051b4cfdb89a714c35d208cd58bcc8e8733fc57716a90b179fce371f098b9b1c77bfee06f06a7c8799d102f6cc7731b9c1842c1c813a4353ad1e30d266f9b1adf42e72a6a02dc7eb713ae26e3d03fb3a92cdd15a014bbf6d19b5667162829210ab28b"}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x8}}, @measure_req={0x26, 0x9d, {0x5, 0x9, 0x9, "68978f370e8b33b25b222aed6f1a24607b25ca2418f8985ab7f484ae8223f36303429a674a70e21fbe45e5d118d2326b65061c1ff643de838c2f1d97762aa70e0a50bd8dd5d10ac125342e5b4b469fcfa849a498b08e62fc5ef9c6f0ef3d8f1904a7540916c3943563f9f1cc9f63c34d4ed47109d0d77a9af285abe03f6f4ec2121ef34220f10c6af5a7fedfff8aab6ed30e94dcc833b6c3b3bb"}}]}, @NL80211_ATTR_IE={0x57, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x46, @not_ext={{0x0, 0x1}, 0x4, 0x9, 0x0, @device_b, 0x7, "", 0x0, 0x4, 0x4, [{{0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x7fffffff}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x163, 0x80, [@ht={0x2d, 0x1a, {0x8000, 0x3, 0x4, 0x0, {0x9, 0x7, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x1, 0x3f, 0x2}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @perr={0x84, 0x122, {0x38, 0x12, [@ext={{}, @device_a, 0x20, @broadcast, 0x2a}, @not_ext={{}, @broadcast, 0x7f8000, "", 0x15}, @ext={{}, @device_b, 0x7, @device_b, 0x1b}, @ext={{}, @device_a, 0x0, @device_b, 0x7}, @not_ext={{}, @broadcast, 0xcc, "", 0xa}, @not_ext={{}, @device_a, 0xffffffff, "", 0x23}, @not_ext={{}, @device_a, 0x3ff, "", 0x2b}, @not_ext={{}, @broadcast, 0x3, "", 0x3b}, @ext={{}, @device_a, 0x9, @device_b, 0x33}, @ext={{}, @device_a, 0x5, @broadcast, 0x39}, @ext={{}, @device_a, 0x3, @device_a, 0x3}, @ext={{}, @broadcast, 0x401, @broadcast, 0x34}, @ext={{}, @device_b, 0x8000, @device_b, 0x9}, @not_ext={{}, @broadcast, 0x6, "", 0xe}, @not_ext={{}, @device_b, 0x800, "", 0x2}, @not_ext={{}, @broadcast, 0x4, "", 0x24}, @not_ext={{}, @device_a, 0x67, "", 0x1b}, @ext={{}, @broadcast, 0x6, @device_b, 0xc}]}}, @supported_rates={0x1, 0x4, [{0x18}, {0x60, 0x1}, {0x6, 0x1}, {0x24}]}, @channel_switch={0x25, 0x3, {0x1, 0xaf}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@mesh_chsw={0x76, 0x6, {0x0, 0x1, 0x0, 0x9}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x6f, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0xf9, 0x1d, "6693964ebf995cebebdd74a9c4c1da16f485ebd313c6af24ab6e56de6a"}, @measure_req={0x26, 0x23, {0xa6, 0x4f, 0x20, "1e792683e8947f2d24bad4c6b7cab8c5ae0ae8e3684771256fa3c05f5a955196"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x2}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x8, [{0x16}, {0x4, 0x1}, {0x6c, 0x1}, {0x2}, {0x1b, 0x1}, {0x16, 0x1}, {0x1b}, {0x9}]}, @peer_mgmt={0x75, 0x6, {0x0, 0x2, @void, @val=0x6, @void}}, @chsw_timing={0x68, 0x4, {0x40, 0x6}}]}]]}, 0x570}, 0x1, 0x0, 0x0, 0xc840}, 0x11)

[  418.411598][T21146] netlink: 'syz-executor.1': attribute type 72 has an invalid length.
[  418.429198][T21140] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  418.524702][T21140] loop2: detected capacity change from 4 to 0
[  418.535002][T21140] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  418.557370][T21154] loop5: detected capacity change from 4 to 0
03:04:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  418.598883][T21154] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:21 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a05a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x0)

03:04:21 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a403000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:21 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

03:04:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x7000000}, 0x0)

[  418.890202][T21177] loop2: detected capacity change from 4 to 0
03:04:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8000000}, 0x0)

[  418.953139][T21177] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0xeafeca39, 0x8a438f2a expected
[  418.967307][T21185] loop5: detected capacity change from 4 to 0
03:04:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  419.049745][T21185] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:21 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:21 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f140100000000000000000080000000636100000800010000000000"], 0x20}}, 0x0)

03:04:21 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x9000000}, 0x0)

[  419.174158][T21177] loop2: detected capacity change from 4 to 0
[  419.182300][T21177] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0xeafeca39, 0x8a438f2a expected
03:04:22 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a06a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:22 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:22 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x100, 0x1403, 0x2, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a00000005000100"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xa000000}, 0x0)

03:04:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:22 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x54, 0x140f, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000000000000070045007361000008000100000000001c44c81fdd1ccc42679a48bd462e7fcb1c3de5c3ce531f3c9cb1cd5f5f4dabf82892614942f1018f06fcae12689ebb22a1dee3d987a1f41a7e61e9b8217d7eb2ef45e41d1a1e6602ca2ddfc8d0aeedf6f7090dc4"], 0x20}}, 0x0)

[  419.557458][T21225] loop5: detected capacity change from 4 to 0
03:04:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xc000000}, 0x0)

[  419.618436][T21228] loop2: detected capacity change from 4 to 0
[  419.649190][T21225] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:22 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a405000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  419.697826][T21228] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  419.932105][T21228] loop2: detected capacity change from 4 to 0
[  419.977502][T21228] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  420.005528][T21250] loop5: detected capacity change from 4 to 0
[  420.016976][T21250] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:22 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a07a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xf000000}, 0x0)

03:04:22 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000))
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x1}, 0x10}}, 0x0)

03:04:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:22 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a406000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x10000000}, 0x0)

03:04:23 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1411, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44080)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2c8, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  420.263477][T21267] loop2: detected capacity change from 4 to 0
03:04:23 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  420.324778][T21267] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x81d223d7, 0x8a438f2a expected
03:04:23 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  420.396409][T21273] loop5: detected capacity change from 4 to 0
[  420.423395][T21273] erofs: (device loop5): mounted with root inode @ nid 36.
[  420.523859][T21267] loop2: detected capacity change from 4 to 0
03:04:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x60000000}, 0x0)

[  420.574492][T21267] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x81d223d7, 0x8a438f2a expected
03:04:23 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a407000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:23 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a08a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:23 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:23 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x140f, 0x200, 0x70bd2d, 0xb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4000041)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0xc100, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x402, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7ba5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x53c}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x690000}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0x20004000)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
fremovexattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00')
syncfs(r1)

03:04:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x65580000}, 0x0)

03:04:23 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500"], 0x1c}}, 0x4040081)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:23 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a408000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  420.913691][T21299] loop5: detected capacity change from 4 to 0
[  420.950411][T21299] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:23 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  421.057377][T21310] loop2: detected capacity change from 4 to 0
03:04:23 executing program 3:
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x79010000}, 0x0)

[  421.120880][T21310] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:24 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  421.283708][T21310] loop2: detected capacity change from 4 to 0
[  421.319618][T21324] loop5: detected capacity change from 4 to 0
03:04:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x81000000}, 0x0)

[  421.361444][T21310] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  421.421970][T21324] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:24 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a09a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:24 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x140f, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}}, 0x4000081)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x64040000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, 0x140f, 0x503, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x40005)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x7, '', './file0'}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4015)

03:04:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x83000000}, 0x0)

03:04:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:24 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a409000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:24 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x88470000}, 0x0)

03:04:24 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f140100000000000000000007004500736100"/32], 0x20}}, 0x0)

[  421.721643][T21351] loop2: detected capacity change from 4 to 0
03:04:24 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000121420002cbd7000fcdbdf25080001000200000008000300020000004096569c2a3b251c7e6075c2b8867fdd0d178ea5fb8b87ee6b9a9c4b1d2c260700e784b55759ea9480d62efa490c248190948a6e9b6e05180b0bd334f0953ac4b7ba99e47f78db949885bb9791d3287ab14b4909feaf5f1e0c1bbff9680a01611e4004ddc06a4cbe52bb1a0bd13aa00e6ae05d288961798cec8500101977ea6fbf922ff1cb0e0a1a702db80478cb7c01abc02f462f58f2b3ee505ce6dd66de586bb8850a4f592dd451a8f630aa0876279242eae3938a6f0b4131ae07c17ec4c368fd20aa497381f773c5d5635064789ee35d93892f"], 0x20}, 0x1, 0x0, 0x0, 0x4000051}, 0x24044831)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

[  421.789467][T21358] __nla_validate_parse: 10 callbacks suppressed
[  421.789486][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  421.819487][T21351] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x95f8c8ac, 0x8a438f2a expected
03:04:24 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:24 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:24 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x88480000}, 0x0)

[  421.888921][T21363] loop5: detected capacity change from 4 to 0
[  421.904419][T21363] erofs: (device loop5): mounted with root inode @ nid 36.
[  422.066429][T21351] loop2: detected capacity change from 4 to 0
[  422.123991][T21351] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x95f8c8ac, 0x8a438f2a expected
03:04:25 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0aa400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x88a8ffff}, 0x0)

03:04:25 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40a000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:25 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x9)

03:04:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x9effffff}, 0x0)

[  422.448754][T21389] loop5: detected capacity change from 4 to 0
[  422.510508][T21389] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  422.596887][T21405] loop2: detected capacity change from 4 to 0
03:04:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xefffffff}, 0x0)

[  422.638749][T21405] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:25 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40b000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:25 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffd}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
fsetxattr(r1, &(0x7f0000002d40)=@random={'system.', 'team0\x00'}, &(0x7f0000002d80)='\x00', 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', <r2=>0x0})
sendmmsg$sock(r1, &(0x7f0000002c40)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="a384a75f72f59e2036d9a3147e9fb8fac5167f53297a998a9ff0dcbeffdbd5d1c8c8586a0a3497b9ae45f794e98b06677c24acc3ae61be65c86e66e5db0b805bdb12ad9f90d0e4053a7d6c3ad9a1d4bc0e62dc1dfa8bceb9c36fa6e7801ed42b", 0x60}, {&(0x7f00000001c0)="a81ecbee0b7813c26a1f4c6306b7946996b46855b6ababd3457cbe6db92f65f2ad5e9bea4c582ae11612a9fad867b85a4b563fa2e8e0dddd5064ea7fdff5cf75c16e189bfb9ac97a8bd3a25d155ceffce048e84475be5fe2b50791c6eae84b8c2e61245e60c93b5072f080a3aae6a2ef1b999267ec015fcf8d3df51ec60ae758686406e14016ac0b7e70d33c031fca", 0x8f}, {&(0x7f0000000280)="8379d23042e416553e9e305cc084e01533febd650a1d38885fb7cf576ac0a9dba6e52fae1a4fdefd92680d1954cb44007dfb1babac23f65b51330385a87df2c2ed1889052c55ccce5e3dc02b64a969f4cbb7d4336caf8bbe0839f4fc5d71a41f0327224e236497cc59df2af31895135ab554166a97ae7cce06322ea33f1013f86f3508", 0x83}, {&(0x7f0000000340)="7b162713f84f152cb29336433935eebb471e2684535789b9eb1cf08697b7da2d409906d73eec63d7e052b08f6205e1017ecd49bad4968fd15d94bbcb7ae18eedc812fb71f9e443", 0x47}], 0x4, &(0x7f0000000400)=[@timestamping={{0x14}}], 0x18}}, {{&(0x7f0000000480)=@ll={0x11, 0x9, r2, 0x1, 0x40, 0x6, @local}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000500)="444de59d5f9eb0958c8cab79082948f49f30eb463da8c2aad25d655066bac4bbfc64db60ab382ffe6c19b4a3e720", 0x2e}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="0d8060ed324abcecd04907ae37162ae52c5a6640c48724a1dfccf703b5bdd5ce945fafc3110bd8d1bfacba9d884c846b8bd6879ffb357bdbd53c388fd34f446c2e0f37b6af1490bb0011b18e90921634469e08767fcf17a29eb4b3862003e125e1ebd82f8503fb562f56f7e71b7dabdbe2bca0e2d8b6d70ff337ef3f41d004568dfc", 0x82}], 0x3, &(0x7f0000001640)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0xd8}}, {{&(0x7f0000001740)=@xdp={0x2c, 0x2, 0x0, 0x1a}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000017c0)="5dfbd1d9ffc0b5a6d4f19153feb48347c17b85eb30e440f00b759ca765bf84e5a1323e303478e74673c179115f7481e1602491e4957ee7a6d0b32e87213ddd03b1816d7e91966b07e279ff9637a54dc85538f8e667bd607e2980e4f3ac1be2586ff55322e89da36160924e19015113f6308746803f1fa81ee2c45daaa1fcbd1b9a11b7133a6e57c4cb5a4b5c9b16919db27ec5015635851d3b2256961766ddacc8adf3ef28e83c885829f8c2c49f0dcada548f71687aac3d50b2f0bcf2f287aaa81f4098b121d1733f61a5f245b78ae00f0f3549f28a5d27253d4566be55dc5b8d86d175858cb2985f537787", 0xec}, {&(0x7f00000018c0)="ee430acb720559dc45a5d496a9e21b9183eebe1494dc6cc44f400ffeb0cd9312a7059785136aab6205c9bef615cd71c7e7e6d4f4f550d412ccf001c7", 0x3c}, {&(0x7f0000001900)="a3ad70398783efd799e119ccc0809caec9731c334602800c21c0341205d3b92ef708ed4ea5127f22fa1b3e5d66cf63fe696d3fbf28236cf91e7404a88ec6ec99626c767531af1b0be993d18d1a00e72b13d0119b7a2f2ef0a1b69e42b290f45de98e65a2bfee2a6453831e319b10e4bfb8716aaa817abe2c041a7ceae568a1f0389c58834a7c3bad53c85fe0c9f4f73f7ae30713e463c1ade6db4d8769a0d083ad87bc5aadd12bc855171247d825c15c5a2995c39555", 0xb6}, {&(0x7f00000019c0)="3e12fd6dca6ab9ac0bb1856dedf33068955400354f3e8dc63025324a0c4209af6a412a7e894d4b1f8ab3c1708db9a695ce0dae2b15a9e299546d574be77455718b185faf7b88cb995e61ff804c4f72927dc7fa4e3467dd2e126dc94d3fa80728d8d31bc9d1b3b9755390154281631155cb567519bdbac31a5404bf28a5d334c9cf0dcfb16483e6452be8c4aa5808acea2ae9a14ff486707f039fb5a5652703525d544a9f7974680d74f5a37f0fad1696", 0xb0}], 0x4, &(0x7f0000001ac0)=[@mark={{0x14, 0x1, 0x24, 0x9dd7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x20}}], 0xa8}}, {{&(0x7f0000001b80)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001c00)="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", 0x1000}], 0x1}}], 0x4, 0x8000)

[  422.759942][T21405] loop2: detected capacity change from 4 to 0
03:04:25 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0ba400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  422.806705][T21405] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:25 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0)

03:04:25 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4)

03:04:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  422.998312][T21431] loop2: detected capacity change from 4 to 0
03:04:25 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0ca400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:25 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  423.038466][T21432] loop5: detected capacity change from 4 to 0
[  423.055543][T21431] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0xfed42142, 0x8a438f2a expected
[  423.142336][T21432] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:25 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xffffa888}, 0x0)

03:04:26 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40c000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:26 executing program 3:
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xca}]}, 0x44}}, 0x24048000)
socket$packet(0x11, 0x2, 0x300)
unshare(0x40000200)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:26 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  423.319090][T21454] loop2: detected capacity change from 4 to 0
03:04:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0)

[  423.428447][T21454] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0)

[  423.504561][T21468] IPVS: ftp: loaded support on port[0] = 21
[  423.517927][T21471] loop5: detected capacity change from 4 to 0
03:04:26 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  423.551912][T21468] ip6gretap0 speed is unknown, defaulting to 1000
[  423.564692][T21454] loop2: detected capacity change from 4 to 0
[  423.582171][T21471] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  423.625675][T21454] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:26 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0da400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:26 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:26 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40d000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xffffffef}, 0x0)

03:04:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  423.830984][T21479] IPVS: ftp: loaded support on port[0] = 21
[  423.946725][T21479] ip6gretap0 speed is unknown, defaulting to 1000
[  423.981941][T21518] loop2: detected capacity change from 4 to 0
[  424.042543][T21522] loop5: detected capacity change from 4 to 0
[  424.053889][T21518] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43a11b70, 0x8a438f2a expected
[  424.077067][T21522] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:04:26 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0)

03:04:26 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40e000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0xda38, 0x9, "128e355225648e7087c06c3b61b9ef2c05bed20091f8497e9d94dab95f9490c8c8fe5d989a245560e366ff01a19bdf87494be39016ebee0656001e1b32c820bfa7cc73d4ad5b635e8dab294a0eca2455d3a8587f93c66bec39adf53f826b1d576380216b67fd56fbc5403780ca53b776afc99a6e18f355bfd1dac9a385349ec65e1ef4b4008976fc209185387994cdfb540bcbd1f227a9b1a2a94c885f235ddefbdb461f6b640a48d18c5b235885c9370b566b09cee4736479a82c42ad7599bda80d78bdf4c78fe419999d91d2cb072dd8f0bfa6a8f1c72f94aeb6a103212896d860835994e59a8e2e185be5bf8d59ac194142fafce2c1c0152cdac9ae7dfae7", 0x3, 0x7, 0x3f, 0x4, 0xcb, 0x80, 0x83}}}, 0x128)
setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00), 0x4)
dup2(r1, r3)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x4, 0x33, 0x7, 0x0, 0x40, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x1000}, 0x6000, 0x400, 0x97a8, 0x8, 0xfff, 0x1, 0x3f}, 0xffffffffffffffff, 0x0, r2, 0x1)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000a000f1401000000000f0000000007004500ff7f0000000000008d8722d6267153e320dc837adbe8da033428445f36e6536d00888078ecc74680d7a173b2838c2e3a5d37b34da1baca437e1e83f78208fd7e976c408e0aa9354aabbab87a3bf5ae8f84434018ff960ced466de3f9a56553fb1bc9cc572abeb8d292816f21a4af88b7b0307d8d71acb871a498ae304547890fae48454a4777716402197afd4e7d20b1e0dbea9954eaed8c4e7bc523dbc39c35f400000000db8acb7e89d28eb2ef285257570ee3d3d4826caf6fe580da6f9b467634ad75531c6e252a1e32e97e435163cc80b4d96e2cece454"], 0x20}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
pwritev2(r6, &(0x7f0000000880)=[{&(0x7f0000000400)="f01d1e04f1fd2905c4e3f2633af6fefa138cc2c938d93a59520b4270bdebac1ef3f5eb9164bea87b2ac435551afeb166dfeb752131d5f6ff0cb441268ece86c902322424401464", 0x47}, {&(0x7f0000000280)="9b7b2548a5ab48d7e2a5b9a505c2aff25de5f35c6c4d95480b83cde5432f58a204", 0x21}, {&(0x7f0000000480)="94b1a45e23b272447c72a0f2e4ad206611b7641d2f3973b05e59a2d006f96d414b303be66e8379d34d7a1244c5a8290163b0f569597f18ee79cd9f45fe11e119ff3ff42a6d4e19846e29f8da3733c0e1724a185cb8d7ee46bb1f61812865ab6257385680e3b67d6ae5017410520a76bdc58151495c3df8c4341199907466e6e3d992a09c", 0x84}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000540)="c90f64da9d1a4dd10fe2acb5cd7980076f9a74a39e91bf501d88479a42b6388339e0e6c3793fe222689bfe887dd8c6c0c82c724e130425508eefa3459eb7ec3c51546f8742c40a5b9028c1749f8fb40e8a2da56109e92b91c31bab00583a01d8182013ab9e831d93bb356222393f646240bb16e97e4c0c457d8f961fd3452119727d451b94c762961314308f124dc80a71743630b1ac2d54f7c628dc21dc98914964349767b68d15cee90189c334727be85988f0f05854ce070ee5ce1b9c42738d4a14cb934f6fc9cc7146aee1829e2f9552232aa99d58c98516666d2f0d36ab94f7194087713baf38d7c6f51851eee6c201", 0xf2}, {&(0x7f0000000640)="b1767e5de6a0d904e0b2ed3d540675973587e774aef92e80cb0e4e5a63172a126e0de21e9dc8cd14bad50003345547372e8c653decf4997e92fa38c0f54520ca51dde424cc30073466414de1b4168e26195e598f27211364a1e25c072c80fd5a3bd2c48dcc59b06e5920095034c1a6db192c478bd8507e2680cfb133308532cea701e2f89f460c9666ecf5e348dc85b6627b277feb456f3db7b6d9821c595d689bd547a03f28d25f1a4506de", 0xac}, {&(0x7f0000000700)="849432a44d116a887efd36d060b60cd9e2d49fde5a85fe9d8a3f1efeb65b71673591ba16c047e535bc59a00763cb1f65e15928905321f0a1950af66110602d0b235f29240a4a85fa52edf90007a964119b0e804b9684c30a619519a366e0fa8f290641f50ee51a56fed36aaa7190ea0cebbfa5633db6e48f781dc3e95675c1da974bd8ee69ca193643ff4e735d1f3f43933af824122546b66db59c265e679ebf7d43ce22649591b4b6a2eb6f13eb", 0xae}, {&(0x7f00000007c0)="0e18b4d18ec8883a1e94ac6c6c071e17a70ce2a73a812729ef6090a4c4d860379b6949d0d27292345e03099119f3ff71b0ca6a7ef628c4e55c27b5225596f089dcb309162231e4272af3082df2a49c2273f7656f61b4c8621329d03484ff3797b026f5bff812c2c27fd54ff07462ab5dff685a14bda838dcefa25ebacc45efb341d738a55667b97add731284a9e6b32d43ef3ba583b103ef", 0x98}], 0x8, 0x6, 0xb9b, 0x6)

[  424.171813][T21518] loop2: detected capacity change from 4 to 0
03:04:27 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a403000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  424.241172][T21518] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x43a11b70, 0x8a438f2a expected
03:04:27 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0ea400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:04:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0)

03:04:27 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x70bd2d, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

[  424.419241][T21561] loop5: detected capacity change from 4 to 0
[  424.458498][T21561] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0)

[  424.506644][T21569] loop1: detected capacity change from 4 to 0
[  424.543858][T21570] loop2: detected capacity change from 4 to 0
03:04:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a000000050001"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:04:27 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40f000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  424.600377][T21570] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  424.609305][T21569] erofs: (device loop1): mounted with root inode @ nid 36.
03:04:27 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x0, 0x10000000}, 0x10}}, 0x0)

03:04:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0)

[  424.673378][T21570] loop2: detected capacity change from 4 to 0
03:04:27 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

[  424.729851][T21570] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:27 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a0fa400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:27 executing program 0:
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0xc800)
shmctl$IPC_RMID(r0, 0x0)
shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0xa000)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008811}, 0x0)
sync_file_range(r1, 0x2, 0x4, 0x4)

03:04:27 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, 0x1403, 0x400, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb0, 0x1403, 0x300, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x8800)
r1 = accept(r0, &(0x7f0000000240)=@caif=@rfm, &(0x7f00000002c0)=0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/bsg\x00', 0x4001, 0x0)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xe}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0xea033bf61dab9041)

03:04:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0)

03:04:27 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a410000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  424.954482][T21596] loop5: detected capacity change from 4 to 0
[  424.969687][T21596] erofs: (device loop5): mounted with root inode @ nid 36.
[  425.027148][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:27 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x5ab300, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="30e300000f140001a63faeff71232be9080003000200000008004500636d51000800030b020000000800030002000000"], 0x30}}, 0x4000004)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x4, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
fsetxattr(r0, &(0x7f0000000400)=@known='system.sockprotoname\x00', &(0x7f00000003c0)='syz0\x00', 0x5, 0x2)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r4 = openat(r1, &(0x7f0000000640)='./file0\x00', 0x80900, 0x101)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000006c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x400}, 0x1}, 0x6)
ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000680)=0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="000825bd7000fddbdf250700000014002000fe8800000000000000000000000001010800090003000000060001000500000005000d0000000000050005000000000005002100010000000c0016000000000000000000050007000300000014002000fe8000000000000000000000000000aa0500060004000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000011}, 0x800)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

[  425.087899][T21613] loop2: detected capacity change from 4 to 0
[  425.115818][T21613] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x288df29e, 0x8a438f2a expected
03:04:27 executing program 1:
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000, 0xac)
exit(0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @can={0x1d, <r1=>0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0xfff8, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)='ipvlan1\x00', 0x3, 0x5, 0xbc6})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f00000003c0)=0x440, 0x4)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xe5c}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x735}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x2689, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0xad3db1964b1724b9, [], r1, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x8, 0x9b}, 0x10, 0xffffffffffffffff, r3}, 0x78)
setxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)='6)\xf1%\'@[)', 0x8, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

03:04:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0)

[  425.217798][T21613] loop2: detected capacity change from 4 to 0
[  425.235443][T21613] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x288df29e, 0x8a438f2a expected
[  425.343011][T21628] loop5: detected capacity change from 4 to 0
03:04:28 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a10a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  425.476085][T21628] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x9000000}, 0x0)

03:04:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x500000000000000}, 0x0)

03:04:28 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a411000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  425.637287][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
03:04:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x8000, 0x20}, 0x10)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x20, @empty, 0x1}}}, 0x84)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00), 0x4)
accept4$unix(r4, 0x0, &(0x7f0000000100), 0x80800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043005100000a0000000000000a0000000500010000000000"], 0x1c}}, 0x4040081)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0xcc, 0x0)

[  425.725764][T21650] loop2: detected capacity change from 4 to 0
[  425.753490][T21650] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:28 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  425.911725][T21660] loop5: detected capacity change from 4 to 0
[  425.944629][T21650] loop2: detected capacity change from 4 to 0
03:04:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0)

[  425.957018][T21660] erofs: (device loop5): mounted with root inode @ nid 36.
[  425.971739][T21650] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  426.077399][T21671] x_tables: duplicate underflow at hook 1
[  426.108863][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
03:04:28 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a11a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:28 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a412000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:28 executing program 1:
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000, 0xac)
exit(0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @can={0x1d, <r1=>0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0xfff8, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)='ipvlan1\x00', 0x3, 0x5, 0xbc6})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f00000003c0)=0x440, 0x4)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xe5c}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x735}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x2689, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0xad3db1964b1724b9, [], r1, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x8, 0x9b}, 0x10, 0xffffffffffffffff, r3}, 0x78)
setxattr(0x0, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000600)='6)\xf1%\'@[)', 0x8, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

03:04:28 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x700000000000000}, 0x0)

03:04:28 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x618, 0x4a8, 0x4a8, 0xffffffff, 0x2e8, 0x240, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}, {0x4f, 0x1, 0x1}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond_slave_0\x00', {0x7, 0x6, 0x4, 0x8, 0x2c, 0x27, 0x433, 0x7, 0x40, 0x78}, {0x4}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@empty, @ipv4=@rand_addr=0x64010101, @port=0x4e24, @gre_key=0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @rand_addr=0x64010100, @multicast1, @icmp_id=0x68, @port=0x4e21}}}}, {{@ip={@rand_addr=0x64010100, @broadcast, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x73, 0x1, 0x10}, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x11, "1e1a", 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0xff000000, 'ip_vti0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0xc, 0x1}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}, {0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x20, @rand_addr=0x64010100, @multicast1, @port=0x4e22, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x678)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00')
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x48}}, 0x0)

[  426.361992][T21682] x_tables: duplicate underflow at hook 1
[  426.377280][T21683] loop5: detected capacity change from 4 to 0
03:04:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x800000000000000}, 0x0)

[  426.415763][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  426.450282][T21684] loop2: detected capacity change from 4 to 0
[  426.461857][T21683] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:29 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a418000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:29 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x4080000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:29 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmmsg$alg(r3, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)="4b5ab41708bbf480d195abecb9c41c6d23d12fefd8d7ce3c0ff0ea28fdc02b5ae3175288138851cc73a1ab6259f8f1874f5e034044ee1085e8b7a5aaa652658ee4", 0x41}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000100)="af7aa863946f602af8c1b62cc51aad8440e2d8fb2ab9ca5d50c5ff69e66e6264b2c993dbaf06b46fe500", 0x2a}], 0x3, 0x0, 0x0, 0x4000058}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000011c0)="add430ad4b36becea8260eeb689a72ffa657c56437d0864d7ada34a16c7a5446402c867a9cf98928e395a9083ad99f7665b928aa8aeba3ff8fe29de7576779c0bda3c9023c9734b3d44b6bb6c5f50d00a1a80b41fdf305f9c00bd57868289532a3a98add2a85b6d339361cf67e044994504811fe64fe85e94f501f52484d201775b577bb40f539606ed4a51ffeff8d735349fa05b6a7da7f7d097c8b5da2d47dde189e0578d62200e9c852fe1e1924fe43ad749858734a8a1960f7d9c4f47d4fd87817983ea1045929886e615b225b051cc00e7cb78e74faf21aabdb8799b657a8511b1a9d95dff8266c37595c2430fe94e039294c09", 0xf6}, {&(0x7f00000012c0)="66bf8b65941427dae80470d7738e267b51c79eac4e2e178bc5938b376014be67723d581edff9990d0720c7a6dd4e799e47e1b10ed9e86d049489afb1628aab3a7c5d94968ad9fd55541f771f2b02b75b9246557e737fdedb13a4dc77cb3e89680cd3a50acaea49d010ea1a84d86dee178589d48710610b502da35530ce038adc58d19432b4c55a7202de2c177c9b2ec2224e7ce6dbddcd1930f915a9047ddf4720a8365b411d2868e931e5da4f51805468a2fd727dfcd5fdd4230ccb33809bb0aa5c3ae59141744952601d3b05637d42ced7bf6075ba99", 0xd7}, {&(0x7f00000013c0)="ae676265c35e7638cd4a7e82d1fa535d2a1bfc6ee63e9dadd6663e8d52aab3724c5decda422cd0e1b2a40dba2b953ca5272c369e5cab370e6d9ac9732c9259f0d73fb8e869502acc6f0141bd8e4283874ab7fc7ac2", 0x55}, {&(0x7f0000001440)="15544999c4f65dcc20308d4bb0de5010758dbee09ddce994504f57389d52e7a236fb38a186bee1b3e0366c75ecd33c5fb4396e6a2cb30cc0f012369ae7af77f73c407cc990a1967521eb0b26e7c84c26f64edc57a2", 0x55}, {&(0x7f00000014c0)="404ebaf6e72085600c6dd12a2b149bac6918bb7b2a11600aa6e45f9b9a70e23336acdeb7522ab3d76e2b6941bfd0732a2ed9e049128c29e00b2608af9f7f87b24e918206bad1cda1da3f2f2692bc5a50c41bc1efb3ce6220200c808c2f4e2d7d96a3a0c2d398039636ccd7f2d61bf55813d2f67cecf0ba290b783abc6b6b48b8ea227fedc30a7fceffccc80bfed909d5fe9a77c0b7bda211d36218194ca5aaf22e79441112f2be", 0xa7}, {&(0x7f0000001580)="5c46da4f50003ed82cf66ddcef83dcae0aa0411512786ab61085711d15aa6d99bdbd747d1613e159ab311004127307cb105f7c6fc3518b53c492f03e9ada0c026886f5f24697f75027f5025aecd0161b3916d798c25d1bfe3984c42ea9fd34d0374a5b36c18659a2d86531637d19f69747ce7f7f3413cb951a72d7bc57b6891a633e77ae15bfaa02eb67205efe58e13816b3", 0x92}, {&(0x7f0000001640)="8eaf0746ce619716fe681c871400cd22dce31c940de213a361d38f048a99949b876741b7efb1d61ddf07fbea4ea55f4843279a218009f44139f277ea005abf4cda33632477d15492b89c897410b9408e55841ea31a9d6d67bab4910d3c555039271104fef50385946271481cb1cf0efb585990de076f892a8bd7a6152e412eac7b1c3b4612340a8ac5e91b3b5c4af5885fd5569052b142ffc84e7a54e952b1233e3f17f708dc4813800dd13e3cf2d55f9b91433c2de31a0a0adc", 0xba}, {&(0x7f0000001700)="c87979914ff4cae938aaaf02245fb5fe0c3564e38ea84aea63143f1e8bf3b0d42745ca11d5b1db76b81905b4152f38cd8d61331449380a0646131c0ceff88590f1836e05d1e19cd21798563a985e02a654a845dc79ba2d2e97adbd0c4c45732a4cd675632a9d137c2d6874afcfa4ba309f354105a023bde10012e0c4c3679784bf88927fef065273abbdcbaf655bb9a9d1cdea7bb413ad3603fb359edea439148f40f3dce607255eec6b0f42f9e3b8a0f9b0a0fe42d2f3b1c465a6b56ef1d54c00fd8c91fcfa52b2a0721f6158ae98eb4a3687bf4d12b83302ef33963d24d8a7c793ad73825543545d3110ff94178652c25c8722d9b7d7", 0xf7}, {&(0x7f0000001800)}], 0x9, &(0x7f0000001900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4044081}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001940)="141fadce999e2ebc0879beacb848b025523d59ab6b81e2ec7bca8c0c7f258fb43d50b3be680ecafa44e1ed290e587e7a82381b6655f9d69e2c04686c56d274d93f170660dab33ff15c40abf2dd838fce600e5dce06030244dfab826a47177339b0d3480c9aba96949e58c86adf27a50f32d4473d81da6e72d2a915ade87b0ecb788c5c9983fae20ece19f99eba66b939e1b11cd6f97b14087190cce2d1fe6d52359438083ff9c2a588e244adb059407bab4840b42c1e7a5ca6e1ac11d842aff2ab9611ba237189898795a7cf1fb23491e756e831912670e1c2c5ebc591a254dca3fc839826d7acdb355ae1cb30ffd6ba99ddf5211ef2dd", 0xf7}, {&(0x7f0000001a40)="2d7ed7b268d7c9f29495f3b08d204251ed18a7ec8b4aec9c7e83252af1e0fe08410d270d3103d6767c99c36389bf348f4a9addbe62828a9ceb4401a53bae154eebc977cf4f47f3fbc96a", 0x4a}], 0x2, 0x0, 0x0, 0x2000000}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)="a3fa9409249ea2069c5f36e58e58b6", 0xf}, {&(0x7f0000001b40)}], 0x2, 0x0, 0x0, 0x40000}], 0x4, 0x42024)

[  426.488542][T21684] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x6bf4cd86, 0x8a438f2a expected
[  426.653812][T21684] loop2: detected capacity change from 4 to 0
[  426.703176][T21684] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x6bf4cd86, 0x8a438f2a expected
[  426.725556][T21702] loop1: detected capacity change from 132096 to 0
[  426.745493][T21706] loop5: detected capacity change from 4 to 0
03:04:29 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:29 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmmsg$alg(r3, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)="4b5ab41708bbf480d195abecb9c41c6d23d12fefd8d7ce3c0ff0ea28fdc02b5ae3175288138851cc73a1ab6259f8f1874f5e034044ee1085e8b7a5aaa652658ee4", 0x41}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000100)="af7aa863946f602af8c1b62cc51aad8440e2d8fb2ab9ca5d50c5ff69e66e6264b2c993dbaf06b46fe500", 0x2a}], 0x3, 0x0, 0x0, 0x4000058}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000011c0)="add430ad4b36becea8260eeb689a72ffa657c56437d0864d7ada34a16c7a5446402c867a9cf98928e395a9083ad99f7665b928aa8aeba3ff8fe29de7576779c0bda3c9023c9734b3d44b6bb6c5f50d00a1a80b41fdf305f9c00bd57868289532a3a98add2a85b6d339361cf67e044994504811fe64fe85e94f501f52484d201775b577bb40f539606ed4a51ffeff8d735349fa05b6a7da7f7d097c8b5da2d47dde189e0578d62200e9c852fe1e1924fe43ad749858734a8a1960f7d9c4f47d4fd87817983ea1045929886e615b225b051cc00e7cb78e74faf21aabdb8799b657a8511b1a9d95dff8266c37595c2430fe94e039294c09", 0xf6}, {&(0x7f00000012c0)="66bf8b65941427dae80470d7738e267b51c79eac4e2e178bc5938b376014be67723d581edff9990d0720c7a6dd4e799e47e1b10ed9e86d049489afb1628aab3a7c5d94968ad9fd55541f771f2b02b75b9246557e737fdedb13a4dc77cb3e89680cd3a50acaea49d010ea1a84d86dee178589d48710610b502da35530ce038adc58d19432b4c55a7202de2c177c9b2ec2224e7ce6dbddcd1930f915a9047ddf4720a8365b411d2868e931e5da4f51805468a2fd727dfcd5fdd4230ccb33809bb0aa5c3ae59141744952601d3b05637d42ced7bf6075ba99", 0xd7}, {&(0x7f00000013c0)="ae676265c35e7638cd4a7e82d1fa535d2a1bfc6ee63e9dadd6663e8d52aab3724c5decda422cd0e1b2a40dba2b953ca5272c369e5cab370e6d9ac9732c9259f0d73fb8e869502acc6f0141bd8e4283874ab7fc7ac2", 0x55}, {&(0x7f0000001440)="15544999c4f65dcc20308d4bb0de5010758dbee09ddce994504f57389d52e7a236fb38a186bee1b3e0366c75ecd33c5fb4396e6a2cb30cc0f012369ae7af77f73c407cc990a1967521eb0b26e7c84c26f64edc57a2", 0x55}, {&(0x7f00000014c0)="404ebaf6e72085600c6dd12a2b149bac6918bb7b2a11600aa6e45f9b9a70e23336acdeb7522ab3d76e2b6941bfd0732a2ed9e049128c29e00b2608af9f7f87b24e918206bad1cda1da3f2f2692bc5a50c41bc1efb3ce6220200c808c2f4e2d7d96a3a0c2d398039636ccd7f2d61bf55813d2f67cecf0ba290b783abc6b6b48b8ea227fedc30a7fceffccc80bfed909d5fe9a77c0b7bda211d36218194ca5aaf22e79441112f2be", 0xa7}, {&(0x7f0000001580)="5c46da4f50003ed82cf66ddcef83dcae0aa0411512786ab61085711d15aa6d99bdbd747d1613e159ab311004127307cb105f7c6fc3518b53c492f03e9ada0c026886f5f24697f75027f5025aecd0161b3916d798c25d1bfe3984c42ea9fd34d0374a5b36c18659a2d86531637d19f69747ce7f7f3413cb951a72d7bc57b6891a633e77ae15bfaa02eb67205efe58e13816b3", 0x92}, {&(0x7f0000001640)="8eaf0746ce619716fe681c871400cd22dce31c940de213a361d38f048a99949b876741b7efb1d61ddf07fbea4ea55f4843279a218009f44139f277ea005abf4cda33632477d15492b89c897410b9408e55841ea31a9d6d67bab4910d3c555039271104fef50385946271481cb1cf0efb585990de076f892a8bd7a6152e412eac7b1c3b4612340a8ac5e91b3b5c4af5885fd5569052b142ffc84e7a54e952b1233e3f17f708dc4813800dd13e3cf2d55f9b91433c2de31a0a0adc", 0xba}, {&(0x7f0000001700)="c87979914ff4cae938aaaf02245fb5fe0c3564e38ea84aea63143f1e8bf3b0d42745ca11d5b1db76b81905b4152f38cd8d61331449380a0646131c0ceff88590f1836e05d1e19cd21798563a985e02a654a845dc79ba2d2e97adbd0c4c45732a4cd675632a9d137c2d6874afcfa4ba309f354105a023bde10012e0c4c3679784bf88927fef065273abbdcbaf655bb9a9d1cdea7bb413ad3603fb359edea439148f40f3dce607255eec6b0f42f9e3b8a0f9b0a0fe42d2f3b1c465a6b56ef1d54c00fd8c91fcfa52b2a0721f6158ae98eb4a3687bf4d12b83302ef33963d24d8a7c793ad73825543545d3110ff94178652c25c8722d9b7d7", 0xf7}, {&(0x7f0000001800)}], 0x9, &(0x7f0000001900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4044081}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001940)="141fadce999e2ebc0879beacb848b025523d59ab6b81e2ec7bca8c0c7f258fb43d50b3be680ecafa44e1ed290e587e7a82381b6655f9d69e2c04686c56d274d93f170660dab33ff15c40abf2dd838fce600e5dce06030244dfab826a47177339b0d3480c9aba96949e58c86adf27a50f32d4473d81da6e72d2a915ade87b0ecb788c5c9983fae20ece19f99eba66b939e1b11cd6f97b14087190cce2d1fe6d52359438083ff9c2a588e244adb059407bab4840b42c1e7a5ca6e1ac11d842aff2ab9611ba237189898795a7cf1fb23491e756e831912670e1c2c5ebc591a254dca3fc839826d7acdb355ae1cb30ffd6ba99ddf5211ef2dd", 0xf7}, {&(0x7f0000001a40)="2d7ed7b268d7c9f29495f3b08d204251ed18a7ec8b4aec9c7e83252af1e0fe08410d270d3103d6767c99c36389bf348f4a9addbe62828a9ceb4401a53bae154eebc977cf4f47f3fbc96a", 0x4a}], 0x2, 0x0, 0x0, 0x2000000}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)="a3fa9409249ea2069c5f36e58e58b6", 0xf}, {&(0x7f0000001b40)}], 0x2, 0x0, 0x0, 0x40000}], 0x4, 0x42024)

03:04:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x900000000000000}, 0x0)

[  426.773258][T21706] erofs: (device loop5): mounted with root inode @ nid 36.
[  426.796563][T21702] erofs: (device loop1): mounted with root inode @ nid 36.
03:04:29 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a12a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x100000, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xa3, 0x1, 0x4, 0x8, 0x0, 0x9, 0x81020, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x204, 0x4, 0xdf1, 0x4, 0x2800000000000, 0x3, 0x9}, 0x0, 0x4, r3, 0x1)

03:04:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xa00000000000000}, 0x0)

03:04:29 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a421000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:29 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x100000, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xa3, 0x1, 0x4, 0x8, 0x0, 0x9, 0x81020, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x204, 0x4, 0xdf1, 0x4, 0x2800000000000, 0x3, 0x9}, 0x0, 0x4, r3, 0x1)

03:04:29 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xc00000000000000}, 0x0)

03:04:29 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmmsg$alg(r3, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000080)="4b5ab41708bbf480d195abecb9c41c6d23d12fefd8d7ce3c0ff0ea28fdc02b5ae3175288138851cc73a1ab6259f8f1874f5e034044ee1085e8b7a5aaa652658ee4", 0x41}, {&(0x7f0000000180)="9b9d235a6b42652a0feaf6b8edab82e4cf362fc8f9fb151f6620ec78bd89e7658577e3584a053d7de4dba1b0e4927669d2c6a01ec21abd0ec96366d60dd2ade297823cbfb5d547c0feb250f63c3ebd02521a6e73287d0e9f060043fecdb339df6a34526875b166fa6080fe0f1e8ba3b6243bc8ecb87f3366b90a7a7847c36ce982a41e702f640bfadbbcc0db9d5febe1681206f2c9687f551beb87fb0d7f5cec1f3f8c9641912aa941cf07050094e751b163aafa103bf49cd8c30784dc43756703dcda620e21e2fee7fa8d3bc6aba77b0dea444da69836ad9e14c151d760ce2289ee3ec1055fa4bb54567e1904cce2eecb032028670d0261869619e4dee88afc6ab2471b0a3310266dc024154061d9e231b0ee9a1fb14a1d8cf398bf11a9fcbe20ef4a414159a769d4b768c365166fb705b9bb544aa670b82e3de1ba90b4cd717b7ebcd2b894e32814b7a9ffa232719ecc25d99a945a593ee0495508e0f1bd1b999b0f611cd4aec87a6ca6aa8e7b2910646dde58d01da68361801f3179f7485ed0cde387da440939e5bf9c5471afba41ab31793d67d31a340549e33f6c3362462b74c617891bd72cfc3c46c0e09c4de212125452f816200f76c9ecbac95bec857d5f589bf696f8073db0a542b1abdf9aa8089fda8066bab319440e35f628b669dc73b8e1fe6437fb800ba230ae3bd266d04ae1c1b4bad450f86edccc792265b4562613046ffda1573efe7c3d5a5fafedb61af4324de17445d66e02706ff479e29d2631c02fcb9d04e1a960bb904099d595ee2b5a322b82a429ff124bdbb89e824056862ff6f508c9b11fc5311993f411608c04a4895e3e897b79468d8814580d3bf08045dcfa846828d70242b463d68d51c964085c32f414e966e4643476e0af8747c6285e0d9a8a5e023003c4f0601b2570eca5a29752d39c4c95a9261f9152c4e8f02f12ae9418e756401f7d2a35b4609ae7ee9597bade2c403a14741a7bb816657bc9045e11809074d80b456d1110c1454c111b29fdb212b829ec061e95613ec679cf3f8c61966fda20ab95e2091e7be266814a7eb952e70807b0af0b28f1a65de02253de6316200073dc606074171700202440649a791b45825980cfc7b3c9907d03542fdf5c4064a9c81b176f87cce274d75866783c18a3fa381c5f6323c4d3b030b9d6e7d6fba7181618bda66a86607fee3cf9578f5fca04a419a4905ec3a7a70ed79984ab499f8f86ef62f78abd2a8a9ff62717115cc09614ebb121f67c9c0aa562049bc8cc512a4a7aa32de569439c10cfcec6c8c83fbdc1b79162dc9ae143a53a85c0668a464c38dc98bd5d789d82858a6cec75623c5f21113b45cf5070fc04c34360344ad3ebc98f9d2ae025f4be4be6aae27201afa652038ecbe2dea4cd26552462e272ae0c9a9bc1604193b803e0a359c067df521a8cdef828359342faef9c21aab68f2ec9e84cfded3b04fab0d83973edd9e00cba3d384de5f1766f9b16ba386bd72ac088340460696fbb696bfd690fe3f9a04e99a0f1d1804cfa85c3733b8f61f947bbd3a874eec5336da59564ea8e27df45d77491387d72fd909965eeecde50958ddc075e03c9914779b8daf4ef4cdf5b194b0ffe7a694495b0eeeab96a942bf9babd7c27558586b7e5a8f73cd1e5a9c5c7de9d050319266d3cf0739206d79878e88e70d755aba3c2689e85cd03780e3be0d0d4d44d34a5f84df8e35f7f0ed5154c657e1385e7c99798b4795936b758499b2f37203f6f4db228eb1d1c598135407531b36a4263aaf152ca4a6fbea8f7ff2f075733b92c13242984e8168f3772a8bd207298b614ad89d07b318f875700d7f7c9423d02c8b504a17fc4b4374af47e4eb818ffab4a5ea636c280b63fb8eb7e8f53ad8e539ac2a8353438ab89cba552d4c0fa2f82fbeffc2f60060df1f5e249014f6c83b49ddf6b904dc8e8434ea547dfb9b4d5f2ac9489fdb1bea55286576cdb1035882ecb7c5ad7f6bb2f24cfa820bfc2142b16eaf0117725c64320e2d0449cb4f69886b8a94a8b95d9b113b8bba46de0f4b5c3aa83accebbdeaf8b5e66f842ec328a7be50a676a0fac5d67872358db6f57c33744be6323d797d986962032d6e27a6ac4a7dd4634a35adc5dd27f249bc67ab1c46d55b6f5c4fceceb204afe8033f36afca43f44d2957084f57f0f82457b4034cc768a8bc2ac0972827cadd5e41d4283d3fce3fdf9cc80f4d2e78c4baae292d2da2ca8daf95fcaab5f19bdf52df40a1b8d762c3c4b04e9d6dba29b5d2c9ced484fb3db56603915db044a3285a5ee4dd927aa30833e2950a32f9cab7177ca37b880a1d8e4664026015c3127865499f7ec23d89e0bf898c879debd5e822d63443ae9983a38c443f3253e07c9496f596305fc9637eb963b9802d382db18006f5d6b874cec17f020fac4403a98017be1712d3335a7144633a9cb8edcf4f4d44a4b36540c2d832044039ca946e33da4eb6ed22d7bd96f520d91026eb28fdaef5309cff04b5ec2ee2be02cc10697470338cb7dcaeada91a7685603c48498338df10a4816a066a7e3586273fc03bbef5319508d68726fd783a50b88815891f93b6330c76b9d947cb27325b6ac2b30277ae202d24128ded0c6167c232d955a3327e05f4d7f38687e079573a87ed3a1ca6584d0a77563d804da484fa41377f3f0a6188604eed43301fe6fb8d7fa3073a23aba07398035a679632af55d4c51af753e6d98a236817fd4cd794f0831ca3ceed6daf298d4ab40706dfcee7df0e35a9e0a6988e500ec92664c9d4989f7b5cbdd676cf2110867b77c64b9093d12e68177ba30b764dac8bea4c504d9fb51e649cf050ad37901d0670479dc74286c5267a200b81684bc1d8c51941851b1e43ff62b8fe6eb90889996ea58c8dcf3e57caa0427f7ee8f284e97a84d8518e2612b7cdb20bf7b852e2008d0b690b5c9fb205b975faadd87d127d592af1b7f911fa18a68dcb5cdf56f49e3c81f0d4f82892c50cbeef593c73f97ded494c30367447794db661b4b5cf1be7c3a14771969278d55e745a5b99c1d00ef9bb1e3bad221c04dd70de89c5a01d1d12dcd7f648bbe867b1e85cd8ce26628109fd92ed655770a46dd6a4988261962becad9b64f2aaacc27698bc323424cb001a0aa82d8f3c82269ff8c5743af8f316fd08f9c407826a32643a89e2572b3e14b1ebd8bbb666e396cd510b11cda3c78d3b73d8d7eb7b9b06876334945bc113c092b486d02b22f359bd6fb63be131af408238c2c1a2433c057f79bec5173dc74b0870a528c1c2d7d7e26e6992521c4cf62dddcf650a6be551f51266cf5d0925ba42815ba2c5f10de5dff82ce7c0a02ab9727a0411dee43af7c7abbe685be41ce0bd2f40039108920735304b9735eb11a28853debc6c7ebdcab21cc716461fd5866609277ea166ce37da8009633220e8cd77341bc6c3b2ab3ba893b3db007f7954e84a1f23510b6efaef60088a0ce0b45f9d6b5555203ebd23d6ebdc996085f81e1c5604d5ecefd4b978dee5b6b98a525b5dbe9fa27ec6abb130f18135c3183c3326e4048743aa89a4661fdb0d8a5a7595baf48b3e908b71eafaa42a954525cbc4da0318c95af82f69e3e5025e21a6852ad762836eaf2968ad3a53f8348bfffad5a55c1d5b612daff9ebf638dfd5ada94f11540148f9e02aef439569efdffea837427e2b5f2a28c0725245bf9e5f7a0f9601e0589e398b177805db8995239288ffc2c3ff1f3022d3adb0b60a7760e57d7b8649ad0f31e8d34259a4bf2489bac48c3750b55cd28f268b7cce148f6928205291df04841e536c87adc53de1d0449e41f878ec14d8bddb51b963f09331f50db5d6e91f075bf3c06bb9ceb944fdf65ea198e9ab9bd967b7fada489092688c6dbbbf53d79b6865b5332dd33a7f8889895c066bfa3cd48acb89320f7b46e5d0355f100eda4d333c124b8cc2f89933eceb8f834dd1e086012fefb19f4cbd06db51a86265781b73f7caa5f290273672eca6af357f90029b315ff8a60fd8333d8f06f7eeaf2014eddb50142465e8900b03b25b2aea0fc7afed86e8405eb73793977bd3ab1b4606dac52f57e586ea0b6f733aa25a88b073c13ce4d4d7cc076ac6d2d31b389585a1627c3853176f8b21a5282085fc3b626ed219c0b5b0b3370130d6a0e269f6c5cfc8c7e12b9de38d71889ee272e3fd81da852c493c8fdabcfe920b0e10bbfc9acaf913a592fd77dc4c774ee5cad526ecb01fedfaf59bf565ef201f98d7056796080a97226a17915ed6b23e12d3c4e6d288f2269d8fc337366c90615700802222bdff7fc6741ce5ea7bb66f251da92f223b489236f1ab954cf579e83c88fae8a2f22f432506cb9e38bd32fee96e0e673b54fb48b13374d856d0c0d537f46dc5121ec946e280ea27459b5b69b23debe32663cf777fc6340f6362ea80996d5fa628904321c8819c7af3fc5d5f6c45e6b3e4a0ff0a2f133ce7e51ba1e49e1204ddf76f9d29da2f38dff0935ac1b8886745f0f6cf02661449504f60cf4e6741da0d745c5f0d09144b1aa306ffd90de3608555fff8894a33714d71eceb9834f4533c9bbb65ac944f08096fd0811b0ad0d4bb1bcaedccb1565907ef3d31e4ca6c0472362ea8e320549a4b29ef99f49bc037cac478973112af382c20c80ed280b4a2c97ae0ec5ebe3b54f12906b13ea35f897c370b7bdad17fe80d791c70c4150c06b8367e2f18fde0b054da3afbc889d56296748c69d73e0f5f6c20a149a0ba98c1d60293bab08bef06af47df6a5a214e605801e6a994c01490656e2b6b80c8d23cc630599fd1b30c892c98975fd6002cab2196bea173017a10e937fac7bf07cebb5ecf5898c9a011b3642e57f85893c391a4e08290fd22703f01133e1261b99727876aded22f169a7a31e05a7471a9823be9c52439d5f54962f25236ae7bbca90eb68c30b527e12fca6b58e150263a8f8d13a05ce84a717c1b1f6426b3643633666a5c7e37162fc8c5e4299455627ac6a766e1083869a8d117c14c5ac64ad705c70d8a8d30785ca092c59da956f15564a23493f00d259b3e0601efbb11bf4f6f4c1437301f117dcee7b459f06b668efa22e378465c2a0e99e61643fa4a84af8f4cf8ae7f139c414590ae42d2df5c747f8f946ef4ca48304f264d1bd830c16ab160831601666008ecfa7ae1148a90ae62016f0178fbc6c35e91d622128f9c5efb055e23b5f1d679dd0859967af9a11d0635e6a3caa15a0d14ea0a44ff3d204cf198a3b3b9d9738e0c97749c6ea7d4afa58a5dfb2a5641e54a99eda4dadb1ddf0938548a1846025781c456febf960ab1936ce3578b3ad43b2e17af770ad5fe384f6d74834d86c279aa5c1ba2cee86bec9d8967611b80ad3a79290544f8d2cca444c42bc33015317de3fbbad84c33c42e378b1cfd83167abbddfe14a279418be5a8a14de0099ca174a33765e270d61c80241a67ef250cc077d6d6d6e18be535c2937c590211298c7ea8d50005ddeee654e74a016135b0364b7961c17651b560112748fa754b53788395304f43cd06e420f42da79e81dc47dfe0fa739761e8af9ca52a37ed3091e9b773b36c011deb1961b19179da9d9d3fe5c94938fad01bb449deec388a6e7b2d3913c421d9bf595e7ebd499a9a5d4ea9981e7205a007ff60a6ec6bbaa79afc094e7e773284f4b0eb3a8a2adf033b8b477c786b0c51b66eadd96ce23c3bf044daf5fe8236076f5369c1c9f44e07144aa932a8ab7f49b530a2031424e446334a9747a4ab196fb96a8c5ed02e99400d160a8ae0e64df186b7f07d3cfe0", 0x1000}, {&(0x7f0000000100)="af7aa863946f602af8c1b62cc51aad8440e2d8fb2ab9ca5d50c5ff69e66e6264b2c993dbaf06b46fe500", 0x2a}], 0x3, 0x0, 0x0, 0x4000058}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000011c0)="add430ad4b36becea8260eeb689a72ffa657c56437d0864d7ada34a16c7a5446402c867a9cf98928e395a9083ad99f7665b928aa8aeba3ff8fe29de7576779c0bda3c9023c9734b3d44b6bb6c5f50d00a1a80b41fdf305f9c00bd57868289532a3a98add2a85b6d339361cf67e044994504811fe64fe85e94f501f52484d201775b577bb40f539606ed4a51ffeff8d735349fa05b6a7da7f7d097c8b5da2d47dde189e0578d62200e9c852fe1e1924fe43ad749858734a8a1960f7d9c4f47d4fd87817983ea1045929886e615b225b051cc00e7cb78e74faf21aabdb8799b657a8511b1a9d95dff8266c37595c2430fe94e039294c09", 0xf6}, {&(0x7f00000012c0)="66bf8b65941427dae80470d7738e267b51c79eac4e2e178bc5938b376014be67723d581edff9990d0720c7a6dd4e799e47e1b10ed9e86d049489afb1628aab3a7c5d94968ad9fd55541f771f2b02b75b9246557e737fdedb13a4dc77cb3e89680cd3a50acaea49d010ea1a84d86dee178589d48710610b502da35530ce038adc58d19432b4c55a7202de2c177c9b2ec2224e7ce6dbddcd1930f915a9047ddf4720a8365b411d2868e931e5da4f51805468a2fd727dfcd5fdd4230ccb33809bb0aa5c3ae59141744952601d3b05637d42ced7bf6075ba99", 0xd7}, {&(0x7f00000013c0)="ae676265c35e7638cd4a7e82d1fa535d2a1bfc6ee63e9dadd6663e8d52aab3724c5decda422cd0e1b2a40dba2b953ca5272c369e5cab370e6d9ac9732c9259f0d73fb8e869502acc6f0141bd8e4283874ab7fc7ac2", 0x55}, {&(0x7f0000001440)="15544999c4f65dcc20308d4bb0de5010758dbee09ddce994504f57389d52e7a236fb38a186bee1b3e0366c75ecd33c5fb4396e6a2cb30cc0f012369ae7af77f73c407cc990a1967521eb0b26e7c84c26f64edc57a2", 0x55}, {&(0x7f00000014c0)="404ebaf6e72085600c6dd12a2b149bac6918bb7b2a11600aa6e45f9b9a70e23336acdeb7522ab3d76e2b6941bfd0732a2ed9e049128c29e00b2608af9f7f87b24e918206bad1cda1da3f2f2692bc5a50c41bc1efb3ce6220200c808c2f4e2d7d96a3a0c2d398039636ccd7f2d61bf55813d2f67cecf0ba290b783abc6b6b48b8ea227fedc30a7fceffccc80bfed909d5fe9a77c0b7bda211d36218194ca5aaf22e79441112f2be", 0xa7}, {&(0x7f0000001580)="5c46da4f50003ed82cf66ddcef83dcae0aa0411512786ab61085711d15aa6d99bdbd747d1613e159ab311004127307cb105f7c6fc3518b53c492f03e9ada0c026886f5f24697f75027f5025aecd0161b3916d798c25d1bfe3984c42ea9fd34d0374a5b36c18659a2d86531637d19f69747ce7f7f3413cb951a72d7bc57b6891a633e77ae15bfaa02eb67205efe58e13816b3", 0x92}, {&(0x7f0000001640)="8eaf0746ce619716fe681c871400cd22dce31c940de213a361d38f048a99949b876741b7efb1d61ddf07fbea4ea55f4843279a218009f44139f277ea005abf4cda33632477d15492b89c897410b9408e55841ea31a9d6d67bab4910d3c555039271104fef50385946271481cb1cf0efb585990de076f892a8bd7a6152e412eac7b1c3b4612340a8ac5e91b3b5c4af5885fd5569052b142ffc84e7a54e952b1233e3f17f708dc4813800dd13e3cf2d55f9b91433c2de31a0a0adc", 0xba}, {&(0x7f0000001700)="c87979914ff4cae938aaaf02245fb5fe0c3564e38ea84aea63143f1e8bf3b0d42745ca11d5b1db76b81905b4152f38cd8d61331449380a0646131c0ceff88590f1836e05d1e19cd21798563a985e02a654a845dc79ba2d2e97adbd0c4c45732a4cd675632a9d137c2d6874afcfa4ba309f354105a023bde10012e0c4c3679784bf88927fef065273abbdcbaf655bb9a9d1cdea7bb413ad3603fb359edea439148f40f3dce607255eec6b0f42f9e3b8a0f9b0a0fe42d2f3b1c465a6b56ef1d54c00fd8c91fcfa52b2a0721f6158ae98eb4a3687bf4d12b83302ef33963d24d8a7c793ad73825543545d3110ff94178652c25c8722d9b7d7", 0xf7}, {&(0x7f0000001800)}], 0x9, &(0x7f0000001900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4044081}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001940)="141fadce999e2ebc0879beacb848b025523d59ab6b81e2ec7bca8c0c7f258fb43d50b3be680ecafa44e1ed290e587e7a82381b6655f9d69e2c04686c56d274d93f170660dab33ff15c40abf2dd838fce600e5dce06030244dfab826a47177339b0d3480c9aba96949e58c86adf27a50f32d4473d81da6e72d2a915ade87b0ecb788c5c9983fae20ece19f99eba66b939e1b11cd6f97b14087190cce2d1fe6d52359438083ff9c2a588e244adb059407bab4840b42c1e7a5ca6e1ac11d842aff2ab9611ba237189898795a7cf1fb23491e756e831912670e1c2c5ebc591a254dca3fc839826d7acdb355ae1cb30ffd6ba99ddf5211ef2dd", 0xf7}, {&(0x7f0000001a40)="2d7ed7b268d7c9f29495f3b08d204251ed18a7ec8b4aec9c7e83252af1e0fe08410d270d3103d6767c99c36389bf348f4a9addbe62828a9ceb4401a53bae154eebc977cf4f47f3fbc96a", 0x4a}], 0x2, 0x0, 0x0, 0x2000000}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)="a3fa9409249ea2069c5f36e58e58b6", 0xf}, {&(0x7f0000001b40)}], 0x2, 0x0, 0x0, 0x40000}], 0x4, 0x42024)

[  427.135992][T21728] loop2: detected capacity change from 4 to 0
03:04:29 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x100000, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xa3, 0x1, 0x4, 0x8, 0x0, 0x9, 0x81020, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0x204, 0x4, 0xdf1, 0x4, 0x2800000000000, 0x3, 0x9}, 0x0, 0x4, r3, 0x1)

[  427.205331][T21728] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:30 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xf00000000000000}, 0x0)

[  427.281483][T21734] loop5: detected capacity change from 4 to 0
[  427.333227][T21728] loop2: detected capacity change from 4 to 0
03:04:30 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  427.373909][T21734] erofs: (device loop5): mounted with root inode @ nid 36.
[  427.437668][T21728] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:30 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a18a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:30 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a425000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x1000000000000000}, 0x0)

03:04:30 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x100000, 0x0)

03:04:30 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
socket(0x10, 0x3, 0x0)

03:04:30 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x6000000000000000}, 0x0)

[  427.723791][T21766] loop5: detected capacity change from 4 to 0
[  427.800952][T21769] loop2: detected capacity change from 4 to 0
[  427.830438][T21766] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:30 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x6558000000000000}, 0x0)

03:04:30 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  427.853019][T21769] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:30 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
socket(0x10, 0x3, 0x0)

03:04:30 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a21a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:30 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a441000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x7901000000000000}, 0x0)

03:04:30 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:30 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
socket(0x10, 0x3, 0x0)

[  428.175648][T21792] loop2: detected capacity change from 4 to 0
[  428.212755][T21792] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x9200b123, 0x8a438f2a expected
03:04:30 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  428.238187][T21797] loop5: detected capacity change from 4 to 0
[  428.258413][T21797] erofs: (device loop5): mounted with root inode @ nid 36.
[  428.325641][T21792] loop2: detected capacity change from 4 to 0
03:04:31 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a448000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  428.366887][T21792] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x9200b123, 0x8a438f2a expected
03:04:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8000000000000000}, 0x0)

03:04:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:31 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:31 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a25a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  428.594351][T21816] loop5: detected capacity change from 4 to 0
[  428.660625][T21816] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:31 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a44c000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8100000000000000}, 0x0)

03:04:31 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setneightbl={0x1c, 0x43, 0x51, 0x0, 0x0, {0x1c}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  428.906766][T21833] loop2: detected capacity change from 4 to 0
[  428.928170][T21833] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x445962ff, 0x8a438f2a expected
[  428.990789][T21843] loop5: detected capacity change from 4 to 0
03:04:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8300000000000000}, 0x0)

03:04:31 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:31 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  429.033563][T21833] loop2: detected capacity change from 4 to 0
[  429.083453][T21843] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:31 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8847000000000000}, 0x0)

03:04:31 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a41a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:31 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a45c000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:32 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:32 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x8848000000000000}, 0x0)

03:04:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  429.440842][T21867] loop2: detected capacity change from 4 to 0
[  429.480057][T21872] loop5: detected capacity change from 4 to 0
03:04:32 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  429.490062][T21867] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x64043e98, 0x8a438f2a expected
[  429.558559][T21872] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  429.633158][T21867] loop2: detected capacity change from 4 to 0
[  429.659078][T21867] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x64043e98, 0x8a438f2a expected
03:04:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:32 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:32 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a460000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:32 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a48a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:32 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0)

03:04:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  429.985076][T21901] loop5: detected capacity change from 4 to 0
03:04:32 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

[  430.064422][T21906] loop2: detected capacity change from 4 to 0
[  430.081693][T21901] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:32 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a468000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:32 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  430.120386][T21906] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  430.191458][T21906] loop2: detected capacity change from 4 to 0
[  430.202215][T21906] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xefffffff00000000}, 0x0)

03:04:33 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:33 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:33 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a4ca400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

[  430.363357][T21925] loop5: detected capacity change from 4 to 0
03:04:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  430.461102][T21925] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:33 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a46c000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:33 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

03:04:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

[  430.699202][T21941] loop2: detected capacity change from 4 to 0
[  430.723647][T21941] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:33 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:33 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)

[  430.840798][T21941] loop2: detected capacity change from 4 to 0
[  430.870548][T21952] loop5: detected capacity change from 4 to 0
[  430.913650][T21941] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  430.970512][T21952] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:33 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a5ca400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:33 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)

03:04:33 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a474000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:33 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)

[  431.318581][T21980] loop2: detected capacity change from 4 to 0
[  431.362961][T21980] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:34 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0)

03:04:34 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)

[  431.422301][T21980] loop2: detected capacity change from 4 to 0
[  431.440491][T21980] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  431.470029][T21990] loop5: detected capacity change from 4 to 0
03:04:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:34 executing program 3:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  431.555988][T21990] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0)

03:04:34 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a60a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:34 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a47a000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:34 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:34 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

03:04:34 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  431.868525][T22011] loop2: detected capacity change from 4 to 0
03:04:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  431.933518][T22011] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  431.971643][T22018] loop5: detected capacity change from 4 to 0
03:04:34 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0)

[  432.165999][T22018] erofs: (device loop5): mounted with root inode @ nid 36.
[  432.181526][T22011] loop2: detected capacity change from 4 to 0
[  432.205936][T22011] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:35 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:35 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a68a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:35 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a48a000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:35 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0)

03:04:35 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:35 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:35 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x0)

[  432.596758][T22055] loop5: detected capacity change from 4 to 0
03:04:35 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404020c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:35 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  432.652999][T22053] loop2: detected capacity change from 4 to 0
[  432.679408][T22055] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0)

[  432.734917][T22053] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:35 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  432.885566][T22053] loop2: detected capacity change from 4 to 0
[  432.905603][T22053] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:35 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a6ca400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:35 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x9}, 0x0)

03:04:35 executing program 1:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  433.003552][T22080] loop5: detected capacity change from 4 to 0
[  433.043563][T22080] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:35 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:35 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400030c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xa}, 0x0)

[  433.218747][T22093] loop2: detected capacity change from 4 to 0
[  433.229764][T22093] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:36 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  433.357627][T22093] loop2: detected capacity change from 4 to 0
03:04:36 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a74a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc}, 0x0)

03:04:36 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

[  433.477112][T22112] loop5: detected capacity change from 4 to 0
03:04:36 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  433.549734][T22112] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0)

03:04:36 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a485030c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  433.639147][T22122] loop2: detected capacity change from 4 to 0
[  433.718526][T22122] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

03:04:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  433.836826][T22122] loop2: detected capacity change from 4 to 0
[  433.849578][T22122] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:36 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x0, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:36 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  433.950765][T22140] loop5: detected capacity change from 4 to 0
03:04:36 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a7aa400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0)

03:04:36 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  434.032171][T22140] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:36 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4fc030c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:36 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x83}, 0x0)

[  434.227820][T22163] loop2: detected capacity change from 4 to 0
03:04:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca000000000400000000000000000500"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:37 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x0, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  434.316476][T22163] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x179}, 0x0)

[  434.419726][T22163] loop2: detected capacity change from 4 to 0
[  434.441845][T22163] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:37 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x0, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  434.526220][T22180] loop5: detected capacity change from 4 to 0
[  434.547847][T22180] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:37 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a000108000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:37 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:37 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x0, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:37 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a402040c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0)

03:04:37 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  434.761304][T22197] loop2: detected capacity change from 4 to 0
03:04:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  434.846931][T22197] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  434.925522][T22197] loop2: detected capacity change from 4 to 0
[  434.943817][T22197] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  435.015415][T22214] loop5: detected capacity change from 4 to 0
[  435.035344][T22214] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:37 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x0, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:37 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a402000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:37 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a406040c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x500}, 0x0)

03:04:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  435.355576][T22225] loop2: detected capacity change from 4 to 0
[  435.366266][T22225] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:38 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x0, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:38 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  435.421660][T22225] loop2: detected capacity change from 4 to 0
[  435.430739][T22225] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:38 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a403000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  435.498162][T22237] loop5: detected capacity change from 4 to 0
[  435.534890][T22237] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)

03:04:38 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

03:04:38 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a408040c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:38 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:38 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  435.720236][T22252] loop2: detected capacity change from 4 to 0
03:04:38 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)

[  435.806529][T22252] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  435.917810][T22265] loop5: detected capacity change from 4 to 0
03:04:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x700}, 0x0)

03:04:38 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, 0x0, 0x0)

03:04:38 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  435.967076][T22252] loop2: detected capacity change from 4 to 0
[  435.974602][T22265] erofs: (device loop5): mounted with root inode @ nid 36.
[  436.003988][T22252] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:38 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:38 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400050c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x0)

03:04:39 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, 0x0, 0x0)

03:04:39 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  436.275893][T22288] loop2: detected capacity change from 4 to 0
[  436.367953][T22288] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xa00}, 0x0)

[  436.411507][T22295] loop5: detected capacity change from 4 to 0
03:04:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:39 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, 0x0, 0x0)

[  436.540097][T22295] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:39 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400060c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  436.581766][T22288] loop2: detected capacity change from 4 to 0
03:04:39 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  436.627348][T22288] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:39 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a405000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:39 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:39 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000), 0x0)

03:04:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc00}, 0x0)

[  436.848870][T22321] loop5: detected capacity change from 4 to 0
[  436.934378][T22321] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:39 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:39 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404060c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  437.059763][T22334] loop2: detected capacity change from 4 to 0
03:04:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

03:04:39 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000), 0x0)

[  437.151120][T22334] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a406000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:40 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4788}, 0x0)

03:04:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  437.371630][T22350] loop5: detected capacity change from 4 to 0
03:04:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000), 0x0)

[  437.448238][T22350] erofs: (device loop5): mounted with root inode @ nid 36.
[  437.504298][T22358] loop2: detected capacity change from 4 to 0
[  437.516506][T22358] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  437.575032][T22358] loop2: detected capacity change from 4 to 0
[  437.620566][T22358] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:40 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400070c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102", 0x11)

03:04:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4888}, 0x0)

03:04:40 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a407000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:40 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:40 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102", 0x11)

[  438.101313][T22388] loop2: detected capacity change from 4 to 0
[  438.139954][T22390] loop5: detected capacity change from 4 to 0
03:04:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x5865}, 0x0)

[  438.197251][T22390] erofs: (device loop5): mounted with root inode @ nid 36.
[  438.223231][T22388] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102", 0x11)

03:04:41 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404080c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

03:04:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020", 0x1a)

[  438.392653][T22388] loop2: detected capacity change from 4 to 0
[  438.415035][T22388] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:41 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a408000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6558}, 0x0)

03:04:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020", 0x1a)

03:04:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  438.703789][T22417] loop5: detected capacity change from 4 to 0
[  438.740822][T22417] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x7901}, 0x0)

[  438.782753][T22424] loop2: detected capacity change from 4 to 0
03:04:41 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400090c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  438.860934][T22424] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020", 0x1a)

03:04:41 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a409000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  439.023869][T22424] loop2: detected capacity change from 4 to 0
[  439.044671][T22424] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:41 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de65832c30433aca"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500", 0x1e)

[  439.111579][T22446] loop5: detected capacity change from 4 to 0
03:04:41 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8100}, 0x0)

[  439.165026][T22446] erofs: (device loop5): mounted with root inode @ nid 36.
[  439.234252][T22455] loop2: detected capacity change from 4 to 0
[  439.254419][T22455] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:42 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000a0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  439.324010][T22455] loop2: detected capacity change from 4 to 0
[  439.339435][T22455] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:42 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40a000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:42 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500", 0x1e)

03:04:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8300}, 0x0)

03:04:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:42 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500", 0x1e)

03:04:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  439.574221][T22476] loop5: detected capacity change from 4 to 0
[  439.634132][T22479] loop2: detected capacity change from 4 to 0
03:04:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  439.679389][T22476] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8847}, 0x0)

[  439.744184][T22479] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  439.858080][T22479] loop2: detected capacity change from 4 to 0
03:04:42 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000b0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:42 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020000005001380", 0x20)

[  439.906867][T22479] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:42 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40b000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x0)

03:04:42 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3de"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

[  440.185030][T22510] loop5: detected capacity change from 4 to 0
[  440.204990][T22510] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:43 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020000005001380", 0x20)

03:04:43 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

[  440.267587][T22518] loop2: detected capacity change from 4 to 0
[  440.280587][T22518] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:43 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:43 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020000005001380", 0x20)

03:04:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[  440.398881][T22518] loop2: detected capacity change from 4 to 0
[  440.423837][T22518] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:43 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40c000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:43 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  440.626657][T22540] loop5: detected capacity change from 4 to 0
[  440.660751][T22540] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:43 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000d0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

03:04:43 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500138001", 0x21)

03:04:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  440.763949][T22553] loop2: detected capacity change from 4 to 0
03:04:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

03:04:43 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  440.826095][T22553] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  440.934242][T22553] loop2: detected capacity change from 4 to 0
03:04:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

03:04:43 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  440.981801][T22553] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:43 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500138001", 0x21)

[  441.070314][T22573] loop5: detected capacity change from 4 to 0
03:04:43 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40d000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:43 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500138001", 0x21)

03:04:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  441.148629][T22573] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:44 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000e0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

03:04:44 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  441.345855][T22589] loop2: detected capacity change from 4 to 0
03:04:44 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

[  441.403422][T22589] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  441.484477][T22589] loop2: detected capacity change from 4 to 0
[  441.492830][T22589] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:44 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000000000000000"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

03:04:44 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

[  441.560695][T22604] loop5: detected capacity change from 4 to 0
03:04:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  441.662766][T22604] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:44 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40e000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

03:04:44 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000f0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:44 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:44 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000000000000000"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  441.897882][T22625] loop2: detected capacity change from 4 to 0
03:04:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

03:04:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fbf3"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:44 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a420100c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  441.965478][T22632] loop5: detected capacity change from 4 to 0
[  441.973500][T22625] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  441.977206][T22632] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

03:04:44 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:44 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000000000000000"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:44 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

[  442.169490][T22625] loop2: detected capacity change from 4 to 0
[  442.228630][T22625] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40f000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xa000000}, 0x0)

03:04:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:45 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/21], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  442.327068][T22655] loop5: detected capacity change from 4 to 0
[  442.364753][T22655] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:45 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:45 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400110c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  442.471729][T22664] loop2: detected capacity change from 4 to 0
03:04:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/21], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  442.536604][T22664] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000000}, 0x0)

03:04:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/21], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  442.605074][T22664] loop2: detected capacity change from 4 to 0
[  442.613777][T22664] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:45 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:45 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a410000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  442.724557][T22689] loop5: detected capacity change from 4 to 0
[  442.740828][T22689] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

03:04:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/25], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:45 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:45 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400120c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/25], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  443.051783][T22704] loop2: detected capacity change from 4 to 0
03:04:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)

03:04:45 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/25], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  443.104758][T22704] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:45 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:45 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

[  443.180243][T22714] loop5: detected capacity change from 4 to 0
[  443.219633][T22714] erofs: (device loop5): mounted with root inode @ nid 36.
[  443.302348][T22704] loop2: detected capacity change from 4 to 0
[  443.336602][T22704] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:46 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a411000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x65580000}, 0x0)

03:04:46 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400180c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/27], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x79010000}, 0x0)

03:04:46 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/27], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

[  443.570667][T22750] loop2: detected capacity change from 4 to 0
[  443.607032][T22750] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81000000}, 0x0)

[  443.660843][T22750] loop2: detected capacity change from 4 to 0
[  443.685604][T22756] loop5: detected capacity change from 4 to 0
[  443.711628][T22750] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x83000000}, 0x0)

[  443.764174][T22756] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:46 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a412000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:46 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/27], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4001f0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:46 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x0, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x88470000}, 0x0)

[  444.057524][T22785] loop2: detected capacity change from 4 to 0
[  444.090984][T22789] loop5: detected capacity change from 4 to 0
03:04:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x0, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  444.121170][T22785] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x88480000}, 0x0)

03:04:46 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x0, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  444.169219][T22789] erofs: (device loop5): mounted with root inode @ nid 36.
[  444.242479][T22785] loop2: detected capacity change from 4 to 0
[  444.302524][T22785] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a418000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:47 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

03:04:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0)

03:04:47 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400200c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0xcc, 0x0)

03:04:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

03:04:47 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

03:04:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  444.527669][T22823] loop5: detected capacity change from 4 to 0
03:04:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  444.568698][T22829] loop2: detected capacity change from 4 to 0
[  444.602688][T22823] erofs: (device loop5): mounted with root inode @ nid 36.
[  444.612419][T22829] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0)

03:04:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x0, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a421000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:47 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a410200c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:47 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

03:04:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

03:04:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  444.917212][T22852] loop2: detected capacity change from 4 to 0
[  444.940197][T22852] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0)

[  445.017739][T22858] loop5: detected capacity change from 4 to 0
[  445.045731][T22852] loop2: detected capacity change from 4 to 0
03:04:47 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[  445.077501][T22858] erofs: (device loop5): mounted with root inode @ nid 36.
[  445.091005][T22852] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:47 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

03:04:47 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400210c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:47 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a425000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:47 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:04:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

03:04:48 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

03:04:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

03:04:48 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

[  445.430086][T22888] loop5: detected capacity change from 4 to 0
[  445.442293][T22888] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:48 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

[  445.512435][T22896] loop2: detected capacity change from 4 to 0
[  445.540584][T22896] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0)

03:04:48 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400250c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x20}}, 0x0)

[  445.621740][T22896] loop2: detected capacity change from 4 to 0
[  445.632043][T22896] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:48 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a441000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:48 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000f3b1fb"], 0x1c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)

03:04:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

03:04:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

03:04:48 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  445.787188][T22917] loop5: detected capacity change from 4 to 0
03:04:48 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  445.874279][T22917] erofs: (device loop5): mounted with root inode @ nid 36.
[  445.902787][T22927] loop2: detected capacity change from 4 to 0
[  445.913175][T22927] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:48 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:48 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4003f0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  445.940739][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  445.966211][T22927] loop2: detected capacity change from 4 to 0
[  445.974694][T22927] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:48 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

03:04:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x2)

03:04:48 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a448000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:48 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  446.110858][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:48 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x3)

[  446.233610][T22951] loop2: detected capacity change from 4 to 0
03:04:49 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

[  446.288851][T22953] loop5: detected capacity change from 4 to 0
[  446.314545][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  446.335573][T22951] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  446.344075][T22953] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:49 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400400c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x4)

03:04:49 executing program 1:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:49 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a44c000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:49 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:49 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x18}}, 0x0)

03:04:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x5)

[  446.631819][T22974] loop2: detected capacity change from 4 to 0
[  446.663727][T22977] loop5: detected capacity change from 4 to 0
[  446.675926][T22974] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:49 executing program 1:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  446.746874][T22974] loop2: detected capacity change from 4 to 0
[  446.754073][T22977] erofs: (device loop5): mounted with root inode @ nid 36.
[  446.769244][T22974] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:49 executing program 1:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:49 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:49 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400410c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:49 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x6)

03:04:49 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:49 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a45c000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  446.987479][T22997] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:04:49 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  447.107276][T23008] loop2: detected capacity change from 4 to 0
[  447.144248][T23009] loop5: detected capacity change from 4 to 0
03:04:49 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x7)

03:04:49 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  447.160373][T23008] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  447.176418][T23009] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8)

03:04:50 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400480c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  447.232119][T23017] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  447.284608][T23008] loop2: detected capacity change from 4 to 0
03:04:50 executing program 1:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102", 0x11)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:50 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  447.353456][T23008] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:50 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a460000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  447.489303][T23035] loop5: detected capacity change from 4 to 0
03:04:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102", 0x11)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x9)

03:04:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102", 0x11)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  447.551549][T23035] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020", 0x1a)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  447.668409][T23045] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:04:50 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:50 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:50 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4004c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  447.784878][T23052] loop2: detected capacity change from 4 to 0
03:04:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xa)

[  447.827426][T23052] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  447.908007][T23052] loop2: detected capacity change from 4 to 0
[  447.928166][T23052] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020", 0x1a)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:50 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:50 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  447.964406][T23069] loop5: detected capacity change from 4 to 0
[  447.990343][T23069] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:50 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a468000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xc)

03:04:50 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4005c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:50 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020", 0x1a)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:50 executing program 3:
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  448.284662][T23086] loop2: detected capacity change from 4 to 0
03:04:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xf)

03:04:51 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  448.326163][T23088] loop5: detected capacity change from 4 to 0
[  448.351597][T23086] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  448.404910][T23088] erofs: (device loop5): mounted with root inode @ nid 36.
[  448.421317][T23086] loop2: detected capacity change from 4 to 0
03:04:51 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

03:04:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500", 0x1e)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x10)

[  448.486845][T23086] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:51 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:51 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a46c000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500", 0x1e)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:51 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:51 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400600c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x60)

03:04:51 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

03:04:51 executing program 3:
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x83)

[  448.766553][T23121] loop5: detected capacity change from 4 to 0
03:04:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500", 0x1e)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:51 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

[  448.823888][T23121] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:51 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400680c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:51 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[  448.901636][T23133] loop2: detected capacity change from 4 to 0
[  448.917230][T23133] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  449.027785][T23133] loop2: detected capacity change from 4 to 0
[  449.048443][T23133] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:51 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020000005001380", 0x20)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:51 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a474000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x179)

03:04:51 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:51 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[  449.138241][T23151] loop5: detected capacity change from 4 to 0
[  449.154402][T23151] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x300)

03:04:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x500)

03:04:52 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)

03:04:52 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4006c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020000005001380", 0x20)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:52 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

03:04:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x600)

03:04:52 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

[  449.329257][T23168] loop2: detected capacity change from 4 to 0
[  449.346960][T23168] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  449.446672][T23168] loop2: detected capacity change from 4 to 0
[  449.455478][T23168] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:52 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a47a000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x700)

03:04:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be00000900070102000000000000000020000005001380", 0x20)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:52 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

03:04:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500138001", 0x21)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  449.596048][T23189] loop5: detected capacity change from 4 to 0
03:04:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x900)

03:04:52 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  449.767853][T23189] erofs: (device loop5): mounted with root inode @ nid 36.
[  449.812746][T23203] loop2: detected capacity change from 4 to 0
03:04:52 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400740c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:52 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

03:04:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500138001", 0x21)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:52 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xa00)

[  449.882163][T23203] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  450.006042][T23203] loop2: detected capacity change from 4 to 0
[  450.013531][T23203] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:52 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a408010c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:52 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be0000090007010200000000000000002000000500138001", 0x21)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:52 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

03:04:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xc00)

03:04:52 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  450.092358][T23224] loop5: detected capacity change from 4 to 0
[  450.127895][T23224] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:53 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

03:04:53 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4007a0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

03:04:53 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xf00)

03:04:53 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

[  450.389174][T23240] loop2: detected capacity change from 4 to 0
[  450.418425][T23240] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  450.428067][T23246] loop5: detected capacity change from 4 to 0
03:04:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x4788)

[  450.518794][T23246] erofs: (device loop5): mounted with root inode @ nid 36.
[  450.543144][T23240] loop2: detected capacity change from 4 to 0
[  450.586238][T23240] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:53 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404020c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

03:04:53 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

03:04:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x4888)

03:04:53 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:53 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a403850c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:53 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

03:04:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x5865)

[  450.823808][T23276] loop2: detected capacity change from 4 to 0
03:04:53 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

03:04:53 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  450.884813][T23276] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  450.933162][T23285] loop5: detected capacity change from 4 to 0
[  450.986176][T23285] erofs: (device loop5): mounted with root inode @ nid 36.
[  451.020699][T23276] loop2: detected capacity change from 4 to 0
03:04:53 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400030c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x6000)

03:04:53 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

03:04:53 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4008a0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:53 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  451.045288][T23276] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:53 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x6558)

03:04:54 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x2100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:54 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

[  451.237553][T23312] loop5: detected capacity change from 4 to 0
[  451.264163][T23313] loop2: detected capacity change from 4 to 0
03:04:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:54 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a403fc0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  451.321397][T23312] erofs: (device loop5): mounted with root inode @ nid 36.
[  451.361528][T23313] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:54 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

[  451.476935][T23329] loop1: detected capacity change from 16 to 0
[  451.497703][T23329] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 0
[  451.523082][T23313] loop2: detected capacity change from 4 to 0
[  451.573099][T23313] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  451.600382][T23336] loop5: detected capacity change from 4 to 0
03:04:54 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a402040c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x7901)

03:04:54 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}}, 0x0)

03:04:54 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x1800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  451.663798][T23336] erofs: (device loop5): mounted with root inode @ nid 36.
03:04:54 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

03:04:54 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400ff0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:54 executing program 1:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400000c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:54 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

[  451.819423][T23350] loop1: detected capacity change from 12 to 0
[  451.838075][T23350] erofs: (device loop1): mounted with root inode @ nid 36.
03:04:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, 0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8100)

[  451.953630][T23360] loop2: detected capacity change from 4 to 0
[  451.986572][T23363] loop5: detected capacity change from 4 to 0
[  452.014862][T23360] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  452.034435][T23375] loop1: detected capacity change from 4 to 0
[  452.049504][T23375] erofs: (device loop1): mounted with root inode @ nid 36.
03:04:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8300)

[  452.070858][T23363] erofs: (device loop5): mounted with root inode @ nid 36.
[  452.109082][T23360] loop2: detected capacity change from 4 to 0
[  452.166992][T23360] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:55 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a406040c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:55 executing program 1 (fault-call:1 fault-nth:0):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:55 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

03:04:55 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40fff0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, 0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8847)

[  452.348021][T23393] FAULT_INJECTION: forcing a failure.
[  452.348021][T23393] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:04:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, 0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:55 executing program 3 (fault-call:1 fault-nth:0):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  452.425504][T23393] CPU: 0 PID: 23393 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0
[  452.434422][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  452.444507][T23393] Call Trace:
[  452.447812][T23393]  dump_stack+0x137/0x1be
[  452.452225][T23393]  should_fail+0x384/0x4b0
[  452.456671][T23393]  _copy_from_user+0x2d/0x170
[  452.461387][T23393]  __copy_msghdr_from_user+0x45/0x710
[  452.466823][T23393]  ? __fdget+0x183/0x210
[  452.471152][T23393]  __sys_sendmsg+0x1ac/0x370
[  452.475785][T23393]  ? ksys_write+0x1b1/0x220
[  452.480350][T23393]  ? syscall_enter_from_user_mode+0x24/0x190
[  452.486399][T23393]  ? lockdep_hardirqs_on+0x8d/0x130
[  452.491626][T23393]  ? syscall_enter_from_user_mode+0x24/0x190
[  452.497632][T23393]  do_syscall_64+0x2d/0x70
[  452.498057][T23402] loop5: detected capacity change from 4 to 0
[  452.502069][T23393]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  452.502103][T23393] RIP: 0033:0x45e219
03:04:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8848)

[  452.502125][T23393] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  452.524062][T23402] erofs: (device loop5): mounted with root inode @ nid 36.
[  452.537832][T23393] RSP: 002b:00007f75db751c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.537867][T23393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  452.537879][T23393] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  452.537889][T23393] RBP: 00007f75db751ca0 R08: 0000000000000000 R09: 0000000000000000
[  452.537902][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.537913][T23393] R13: 00007ffeaf49551f R14: 00007f75db7529c0 R15: 000000000119bf8c
03:04:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  452.633670][T23406] loop2: detected capacity change from 4 to 0
03:04:55 executing program 1 (fault-call:1 fault-nth:1):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:55 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40000090024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  452.682149][T23412] FAULT_INJECTION: forcing a failure.
[  452.682149][T23412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.695915][T23406] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  452.780666][T23412] CPU: 1 PID: 23412 Comm: syz-executor.3 Not tainted 5.11.0-rc5-syzkaller #0
[  452.789487][T23412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  452.799589][T23412] Call Trace:
[  452.802897][T23412]  dump_stack+0x137/0x1be
[  452.807264][T23412]  should_fail+0x384/0x4b0
[  452.811710][T23412]  _copy_from_user+0x2d/0x170
[  452.816424][T23412]  __copy_msghdr_from_user+0x45/0x710
[  452.823563][T23412]  ? __fdget+0x183/0x210
[  452.828319][T23412]  __sys_sendmsg+0x1ac/0x370
[  452.833176][T23412]  ? ksys_write+0x1b1/0x220
[  452.838053][T23412]  ? syscall_enter_from_user_mode+0x24/0x190
[  452.844911][T23412]  ? lockdep_hardirqs_on+0x8d/0x130
[  452.850142][T23412]  ? syscall_enter_from_user_mode+0x24/0x190
[  452.856495][T23412]  do_syscall_64+0x2d/0x70
[  452.861280][T23412]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  452.867965][T23412] RIP: 0033:0x45e219
[  452.872514][T23412] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  452.892152][T23412] RSP: 002b:00007f9b10e25c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.901158][T23412] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  452.910087][T23412] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  452.919061][T23412] RBP: 00007f9b10e25ca0 R08: 0000000000000000 R09: 0000000000000000
[  452.928087][T23412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.937062][T23412] R13: 00007ffe944f6f2f R14: 00007f9b10e269c0 R15: 000000000119bf8c
[  452.983038][T23420] FAULT_INJECTION: forcing a failure.
[  452.983038][T23420] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.008849][T23420] CPU: 1 PID: 23420 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0
[  453.017692][T23420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  453.027791][T23420] Call Trace:
03:04:55 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400050c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x34000)

[  453.031822][T23420]  dump_stack+0x137/0x1be
[  453.036271][T23420]  should_fail+0x384/0x4b0
[  453.041151][T23420]  _copy_from_user+0x2d/0x170
[  453.046480][T23420]  iovec_from_user+0x13f/0x390
[  453.051856][T23420]  __import_iovec+0x76/0x440
[  453.056489][T23420]  ? __copy_msghdr_from_user+0x3ca/0x710
[  453.062164][T23420]  import_iovec+0xe6/0x120
[  453.067630][T23420]  __sys_sendmsg+0x276/0x370
[  453.072281][T23420]  ? ksys_write+0x1b1/0x220
[  453.076835][T23420]  ? syscall_enter_from_user_mode+0x24/0x190
[  453.083741][T23420]  ? lockdep_hardirqs_on+0x8d/0x130
[  453.088991][T23420]  ? syscall_enter_from_user_mode+0x24/0x190
[  453.096103][T23420]  do_syscall_64+0x2d/0x70
[  453.100797][T23420]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  453.107665][T23420] RIP: 0033:0x45e219
[  453.112087][T23420] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:04:55 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  453.132418][T23420] RSP: 002b:00007f75db751c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.141385][T23420] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  453.150148][T23420] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  453.158787][T23420] RBP: 00007f75db751ca0 R08: 0000000000000000 R09: 0000000000000000
[  453.167525][T23420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.176276][T23420] R13: 00007ffeaf49551f R14: 00007f75db7529c0 R15: 000000000119bf8c
03:04:56 executing program 3 (fault-call:1 fault-nth:1):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x400300)

03:04:56 executing program 1 (fault-call:1 fault-nth:2):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  453.313295][T23428] loop2: detected capacity change from 4 to 0
[  453.380636][T23432] loop5: detected capacity change from 4 to 0
[  453.419997][T23428] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  453.432765][T23438] FAULT_INJECTION: forcing a failure.
[  453.432765][T23438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.478612][T23432] erofs: (device loop5): erofs_read_superblock: blksize 512 isn't supported on this platform
[  453.532346][T23438] CPU: 1 PID: 23438 Comm: syz-executor.3 Not tainted 5.11.0-rc5-syzkaller #0
[  453.541162][T23438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  453.551239][T23438] Call Trace:
[  453.554543][T23438]  dump_stack+0x137/0x1be
[  453.557832][T23443] FAULT_INJECTION: forcing a failure.
[  453.557832][T23443] name failslab, interval 1, probability 0, space 0, times 0
[  453.558909][T23438]  should_fail+0x384/0x4b0
[  453.575994][T23438]  _copy_from_user+0x2d/0x170
[  453.580735][T23438]  iovec_from_user+0x13f/0x390
[  453.585547][T23438]  __import_iovec+0x76/0x440
[  453.590152][T23438]  ? __copy_msghdr_from_user+0x3ca/0x710
[  453.595815][T23438]  import_iovec+0xe6/0x120
[  453.600284][T23438]  __sys_sendmsg+0x276/0x370
[  453.604915][T23438]  ? ksys_write+0x1b1/0x220
[  453.609446][T23438]  ? syscall_enter_from_user_mode+0x24/0x190
[  453.615449][T23438]  ? lockdep_hardirqs_on+0x8d/0x130
[  453.620663][T23438]  ? syscall_enter_from_user_mode+0x24/0x190
[  453.626666][T23438]  do_syscall_64+0x2d/0x70
[  453.631117][T23438]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  453.637025][T23438] RIP: 0033:0x45e219
[  453.640933][T23438] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  453.660558][T23438] RSP: 002b:00007f9b10e25c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.668993][T23438] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  453.676999][T23438] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  453.685014][T23438] RBP: 00007f9b10e25ca0 R08: 0000000000000000 R09: 0000000000000000
[  453.693001][T23438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.701090][T23438] R13: 00007ffe944f6f2f R14: 00007f9b10e269c0 R15: 000000000119bf8c
[  453.709098][T23443] CPU: 0 PID: 23443 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0
[  453.717882][T23443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  453.727953][T23443] Call Trace:
[  453.731247][T23443]  dump_stack+0x137/0x1be
[  453.735638][T23443]  should_fail+0x384/0x4b0
[  453.740075][T23443]  ? __alloc_skb+0x7b/0x500
[  453.744605][T23443]  should_failslab+0x5/0x20
[  453.749123][T23443]  kmem_cache_alloc_node+0x65/0x330
[  453.755309][T23443]  __alloc_skb+0x7b/0x500
[  453.762789][T23443]  ? netlink_autobind+0x28c/0x2c0
[  453.767954][T23443]  netlink_sendmsg+0x714/0xd50
[  453.772841][T23443]  ? netlink_getsockopt+0xa50/0xa50
[  453.778060][T23443]  ____sys_sendmsg+0x519/0x800
[  453.782845][T23443]  ? import_iovec+0xe6/0x120
[  453.787456][T23443]  __sys_sendmsg+0x2bf/0x370
[  453.792082][T23443]  ? ksys_write+0x1b1/0x220
[  453.796608][T23443]  ? syscall_enter_from_user_mode+0x24/0x190
[  453.802617][T23443]  ? lockdep_hardirqs_on+0x8d/0x130
[  453.807822][T23443]  ? syscall_enter_from_user_mode+0x24/0x190
[  453.814003][T23443]  do_syscall_64+0x2d/0x70
[  453.818433][T23443]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  453.824352][T23443] RIP: 0033:0x45e219
03:04:56 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x0, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:56 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400060c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  453.828268][T23443] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  453.847895][T23443] RSP: 002b:00007f75db751c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.856332][T23443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  453.864319][T23443] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  453.872391][T23443] RBP: 00007f75db751ca0 R08: 0000000000000000 R09: 0000000000000000
[  453.880374][T23443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  453.888366][T23443] R13: 00007ffeaf49551f R14: 00007f75db7529c0 R15: 000000000119bf8c
03:04:56 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:56 executing program 1 (fault-call:1 fault-nth:3):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x1000000)

[  453.964968][T23432] loop5: detected capacity change from 4 to 0
[  454.015910][T23432] erofs: (device loop5): erofs_read_superblock: blksize 512 isn't supported on this platform
[  454.049252][T23451] loop2: detected capacity change from 4 to 0
[  454.101931][T23451] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:56 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400020c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:56 executing program 3 (fault-call:1 fault-nth:2):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  454.173725][T23463] FAULT_INJECTION: forcing a failure.
[  454.173725][T23463] name failslab, interval 1, probability 0, space 0, times 0
[  454.218320][T23463] CPU: 0 PID: 23463 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0
[  454.227157][T23463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  454.237236][T23463] Call Trace:
[  454.240532][T23463]  dump_stack+0x137/0x1be
[  454.244897][T23463]  should_fail+0x384/0x4b0
[  454.249362][T23463]  ? netlink_sendmsg+0x714/0xd50
[  454.254334][T23463]  should_failslab+0x5/0x20
[  454.258881][T23463]  __kmalloc_node_track_caller+0x89/0x3d0
[  454.264648][T23463]  ? trace_kmem_cache_alloc_node+0x43/0xf0
[  454.270474][T23463]  ? kmem_cache_alloc_node+0x216/0x330
[  454.275952][T23463]  ? __alloc_skb+0x7b/0x500
[  454.280487][T23463]  ? netlink_sendmsg+0x714/0xd50
[  454.285452][T23463]  __alloc_skb+0xbd/0x500
[  454.289818][T23463]  netlink_sendmsg+0x714/0xd50
[  454.294629][T23463]  ? netlink_getsockopt+0xa50/0xa50
[  454.299854][T23463]  ____sys_sendmsg+0x519/0x800
[  454.304736][T23463]  ? import_iovec+0xe6/0x120
[  454.309359][T23463]  __sys_sendmsg+0x2bf/0x370
[  454.313999][T23463]  ? ksys_write+0x1b1/0x220
[  454.318551][T23463]  ? syscall_enter_from_user_mode+0x24/0x190
[  454.324580][T23463]  ? lockdep_hardirqs_on+0x8d/0x130
[  454.329817][T23463]  ? syscall_enter_from_user_mode+0x24/0x190
[  454.335821][T23463]  do_syscall_64+0x2d/0x70
[  454.340260][T23463]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  454.346168][T23463] RIP: 0033:0x45e219
03:04:57 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x2000000)

03:04:57 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a404060c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  454.350077][T23463] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  454.369697][T23463] RSP: 002b:00007f75db751c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.378159][T23463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  454.386147][T23463] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  454.394149][T23463] RBP: 00007f75db751ca0 R08: 0000000000000000 R09: 0000000000000000
[  454.402622][T23463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  454.411282][T23463] R13: 00007ffeaf49551f R14: 00007f75db7529c0 R15: 000000000119bf8c
[  454.460293][T23469] FAULT_INJECTION: forcing a failure.
[  454.460293][T23469] name failslab, interval 1, probability 0, space 0, times 0
[  454.483214][T23469] CPU: 0 PID: 23469 Comm: syz-executor.3 Not tainted 5.11.0-rc5-syzkaller #0
[  454.492039][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  454.503172][T23469] Call Trace:
[  454.507305][T23469]  dump_stack+0x137/0x1be
[  454.511812][T23469]  should_fail+0x384/0x4b0
[  454.516306][T23469]  ? __alloc_skb+0x7b/0x500
[  454.521004][T23469]  should_failslab+0x5/0x20
[  454.525531][T23469]  kmem_cache_alloc_node+0x65/0x330
[  454.531778][T23469]  __alloc_skb+0x7b/0x500
[  454.536318][T23469]  ? netlink_autobind+0x28c/0x2c0
[  454.541608][T23469]  netlink_sendmsg+0x714/0xd50
[  454.546412][T23469]  ? netlink_getsockopt+0xa50/0xa50
[  454.551637][T23469]  ____sys_sendmsg+0x519/0x800
03:04:57 executing program 1 (fault-call:1 fault-nth:4):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  454.556436][T23469]  ? import_iovec+0xe6/0x120
[  454.561145][T23469]  __sys_sendmsg+0x2bf/0x370
[  454.565863][T23469]  ? ksys_write+0x1b1/0x220
[  454.570450][T23469]  ? syscall_enter_from_user_mode+0x24/0x190
[  454.576455][T23469]  ? lockdep_hardirqs_on+0x8d/0x130
[  454.582408][T23469]  ? syscall_enter_from_user_mode+0x24/0x190
[  454.588431][T23469]  do_syscall_64+0x2d/0x70
[  454.592870][T23469]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  454.598787][T23469] RIP: 0033:0x45e219
[  454.602700][T23469] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  454.622326][T23469] RSP: 002b:00007f9b10e25c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.631110][T23469] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  454.639229][T23469] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  454.648161][T23469] RBP: 00007f9b10e25ca0 R08: 0000000000000000 R09: 0000000000000000
[  454.656925][T23469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  454.665570][T23469] R13: 00007ffe944f6f2f R14: 00007f9b10e269c0 R15: 000000000119bf8c
03:04:57 executing program 3 (fault-call:1 fault-nth:3):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x3000000)

[  454.760902][T23478] FAULT_INJECTION: forcing a failure.
[  454.760902][T23478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.822394][T23482] loop5: detected capacity change from 4 to 0
[  454.843886][T23478] CPU: 0 PID: 23478 Comm: syz-executor.1 Not tainted 5.11.0-rc5-syzkaller #0
[  454.852754][T23478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  454.862916][T23478] Call Trace:
[  454.863140][T23482] erofs: (device loop5): mounted with root inode @ nid 36.
[  454.866213][T23478]  dump_stack+0x137/0x1be
[  454.866254][T23478]  should_fail+0x384/0x4b0
[  454.866281][T23478]  _copy_from_iter_full+0x1da/0xa40
[  454.866303][T23478]  ? __phys_addr_symbol+0x2b/0x70
[  454.866437][T23478]  ? __check_object_size+0x2f3/0x3f0
[  454.897878][T23478]  netlink_sendmsg+0x7f5/0xd50
[  454.902680][T23478]  ? netlink_getsockopt+0xa50/0xa50
[  454.907928][T23478]  ____sys_sendmsg+0x519/0x800
[  454.912726][T23478]  ? import_iovec+0xe6/0x120
[  454.917345][T23478]  __sys_sendmsg+0x2bf/0x370
[  454.921984][T23478]  ? ksys_write+0x1b1/0x220
[  454.926539][T23478]  ? syscall_enter_from_user_mode+0x24/0x190
[  454.932559][T23478]  ? lockdep_hardirqs_on+0x8d/0x130
[  454.937783][T23478]  ? syscall_enter_from_user_mode+0x24/0x190
[  454.943807][T23478]  do_syscall_64+0x2d/0x70
[  454.948262][T23478]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  454.954303][T23478] RIP: 0033:0x45e219
03:04:57 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400030c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:57 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  454.958302][T23478] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  454.977956][T23478] RSP: 002b:00007f75db751c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.986397][T23478] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  454.994897][T23478] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  455.002907][T23478] RBP: 00007f75db751ca0 R08: 0000000000000000 R09: 0000000000000000
[  455.011770][T23478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  455.019760][T23478] R13: 00007ffeaf49551f R14: 00007f75db7529c0 R15: 000000000119bf8c
[  455.054452][T23487] FAULT_INJECTION: forcing a failure.
[  455.054452][T23487] name failslab, interval 1, probability 0, space 0, times 0
[  455.076328][T23483] loop2: detected capacity change from 4 to 0
[  455.110219][T23487] CPU: 1 PID: 23487 Comm: syz-executor.3 Not tainted 5.11.0-rc5-syzkaller #0
[  455.119095][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  455.129316][T23487] Call Trace:
[  455.132666][T23487]  dump_stack+0x137/0x1be
[  455.137295][T23487]  should_fail+0x384/0x4b0
[  455.141744][T23487]  ? netlink_sendmsg+0x714/0xd50
[  455.146982][T23487]  should_failslab+0x5/0x20
[  455.151522][T23487]  __kmalloc_node_track_caller+0x89/0x3d0
[  455.157289][T23487]  ? trace_kmem_cache_alloc_node+0x43/0xf0
[  455.163143][T23487]  ? kmem_cache_alloc_node+0x216/0x330
[  455.168663][T23487]  ? __alloc_skb+0x7b/0x500
[  455.173385][T23487]  ? netlink_sendmsg+0x714/0xd50
[  455.179363][T23487]  __alloc_skb+0xbd/0x500
[  455.183843][T23487]  netlink_sendmsg+0x714/0xd50
[  455.188704][T23487]  ? netlink_getsockopt+0xa50/0xa50
[  455.194006][T23487]  ____sys_sendmsg+0x519/0x800
[  455.198820][T23487]  ? import_iovec+0xe6/0x120
[  455.203555][T23487]  __sys_sendmsg+0x2bf/0x370
[  455.208204][T23487]  ? ksys_write+0x1b1/0x220
[  455.212754][T23487]  ? syscall_enter_from_user_mode+0x24/0x190
[  455.218775][T23487]  ? lockdep_hardirqs_on+0x8d/0x130
[  455.224073][T23487]  ? syscall_enter_from_user_mode+0x24/0x190
[  455.230094][T23487]  do_syscall_64+0x2d/0x70
[  455.234561][T23487]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  455.241621][T23487] RIP: 0033:0x45e219
[  455.245565][T23487] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  455.265497][T23487] RSP: 002b:00007f9b10e25c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
03:04:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x4000000)

03:04:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  455.274844][T23487] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[  455.283210][T23487] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  455.291954][T23487] RBP: 00007f9b10e25ca0 R08: 0000000000000000 R09: 0000000000000000
[  455.300011][T23487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  455.310262][T23487] R13: 00007ffe944f6f2f R14: 00007f9b10e269c0 R15: 000000000119bf8c
[  455.324561][T23483] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  455.343401][T23496] loop5: detected capacity change from 4 to 0
03:04:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

[  455.409123][T23496] erofs: (device loop5): mounted with root inode @ nid 36.
[  455.417391][T23483] loop2: detected capacity change from 4 to 0
[  455.439329][T23483] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:58 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400040c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x5000000)

03:04:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xcc, 0x0)

03:04:58 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400070c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  455.698003][T23515] loop5: detected capacity change from 4 to 0
[  455.768756][T23515] erofs: (device loop5): mounted with root inode @ nid 36.
[  455.837896][T23521] loop2: detected capacity change from 4 to 0
[  455.863926][T23521] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:58 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x6000000)

03:04:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, 0x0, 0x0, 0x0)

03:04:58 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:58 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400050c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:58 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  455.974844][T23521] loop2: detected capacity change from 4 to 0
[  456.002528][T23532] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  456.006505][T23521] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:58 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  456.091078][T23535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  456.122906][T23538] loop5: detected capacity change from 4 to 0
03:04:58 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, 0x0, 0x0, 0x0)

03:04:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x7000000)

[  456.184125][T23543] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  456.213065][T23538] erofs: (device loop5): mounted with root inode @ nid 36.
[  456.234859][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:59 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a401080c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:59 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8000000)

03:04:59 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, 0x0, 0x0, 0x0)

03:04:59 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400060c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:59 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  456.437966][T23553] loop2: detected capacity change from 4 to 0
[  456.500290][T23560] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  456.522490][T23553] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:04:59 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:59 executing program 0 (fault-call:6 fault-nth:0):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  456.635687][T23553] loop2: detected capacity change from 4 to 0
[  456.657245][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:04:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x9000000)

[  456.690841][T23570] loop5: detected capacity change from 4 to 0
[  456.704901][T23553] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  456.736353][T23576] FAULT_INJECTION: forcing a failure.
[  456.736353][T23576] name failslab, interval 1, probability 0, space 0, times 0
[  456.750447][T23576] CPU: 1 PID: 23576 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  456.764425][T23576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  456.775185][T23576] Call Trace:
[  456.778503][T23576]  dump_stack+0x137/0x1be
[  456.783158][T23576]  should_fail+0x384/0x4b0
[  456.787723][T23576]  ? tomoyo_realpath_from_path+0xd8/0x610
[  456.793637][T23576]  should_failslab+0x5/0x20
[  456.798367][T23576]  __kmalloc+0x84/0x330
[  456.802794][T23576]  ? trace_kfree+0x43/0xd0
[  456.807505][T23576]  ? kfree+0x2f/0x2a0
[  456.811633][T23576]  tomoyo_realpath_from_path+0xd8/0x610
[  456.817615][T23576]  tomoyo_path_number_perm+0x182/0x6a0
[  456.823795][T23576]  ? __fget_files+0x34f/0x380
[  456.828518][T23576]  security_file_ioctl+0x55/0xb0
[  456.833878][T23576]  __se_sys_ioctl+0x48/0x170
[  456.838739][T23576]  do_syscall_64+0x2d/0x70
[  456.843366][T23576]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  456.849707][T23576] RIP: 0033:0x45e219
[  456.854945][T23576] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  456.875501][T23576] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  456.886548][T23576] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  456.895031][T23576] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  456.905611][T23576] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  456.914358][T23576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.923025][T23576] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
03:04:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xa000000)

03:04:59 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:04:59 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  456.946880][T23570] erofs: (device loop5): mounted with root inode @ nid 36.
[  456.948486][T23578] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  457.003978][T23576] ERROR: Out of memory at tomoyo_realpath_from_path.
03:04:59 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400090c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:04:59 executing program 0 (fault-call:6 fault-nth:1):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:04:59 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400070c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:04:59 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xc000000)

[  457.151013][T23587] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:04:59 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:04:59 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  457.285990][T23596] FAULT_INJECTION: forcing a failure.
[  457.285990][T23596] name failslab, interval 1, probability 0, space 0, times 0
[  457.301926][T23597] loop5: detected capacity change from 4 to 0
[  457.325302][T23596] CPU: 1 PID: 23596 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  457.334908][T23596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  457.346244][T23596] Call Trace:
[  457.349828][T23596]  dump_stack+0x137/0x1be
[  457.354554][T23596]  should_fail+0x384/0x4b0
[  457.359174][T23596]  ? tomoyo_encode2+0x25a/0x560
[  457.364609][T23596]  should_failslab+0x5/0x20
[  457.369228][T23596]  __kmalloc+0x84/0x330
[  457.373654][T23596]  ? tomoyo_realpath_from_path+0xd8/0x610
[  457.379406][T23596]  ? asm_sysvec_kvm_asyncpf_interrupt+0x20/0x20
[  457.386151][T23596]  tomoyo_encode2+0x25a/0x560
[  457.391801][T23596]  ? sock_free_inode+0x20/0x20
[  457.396945][T23596]  tomoyo_realpath_from_path+0x5c3/0x610
[  457.402801][T23596]  tomoyo_path_number_perm+0x182/0x6a0
[  457.408687][T23596]  ? __fget_files+0x34f/0x380
[  457.413846][T23596]  security_file_ioctl+0x55/0xb0
[  457.417629][T23604] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  457.418920][T23596]  __se_sys_ioctl+0x48/0x170
[  457.418969][T23596]  do_syscall_64+0x2d/0x70
[  457.418995][T23596]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  457.419019][T23596] RIP: 0033:0x45e219
[  457.447375][T23596] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  457.467868][T23596] RSP: 002b:00007fcd56d12c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  457.477421][T23596] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219
03:05:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xf000000)

[  457.486473][T23596] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000003
[  457.494716][T23596] RBP: 00007fcd56d12ca0 R08: 0000000000000000 R09: 0000000000000000
[  457.504307][T23596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.513039][T23596] R13: 00007ffd46a17ccf R14: 00007fcd56d139c0 R15: 000000000119c034
[  457.529452][T23597] erofs: (device loop5): mounted with root inode @ nid 36.
[  457.568270][T23606] loop2: detected capacity change from 4 to 0
03:05:00 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:00 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400080c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  457.697043][T23606] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  457.709981][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  457.760086][T23613] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:00 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x10000000)

03:05:00 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  457.838504][T23606] loop2: detected capacity change from 4 to 0
[  457.867376][T23596] ERROR: Out of memory at tomoyo_realpath_from_path.
[  457.882052][T23606] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  457.906458][T23620] loop5: detected capacity change from 4 to 0
03:05:00 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000a0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:00 executing program 0 (fault-call:6 fault-nth:2):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:00 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  458.017278][T23620] erofs: (device loop5): mounted with root inode @ nid 36.
[  458.018366][T23628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x60000000)

[  458.085033][T23629] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  458.103305][T23629] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:00 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400090c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:00 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  458.197102][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  458.226912][T23636] FAULT_INJECTION: forcing a failure.
[  458.226912][T23636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.272899][T23638] loop2: detected capacity change from 4 to 0
[  458.323706][T23646] loop5: detected capacity change from 4 to 0
[  458.325027][T23636] CPU: 1 PID: 23636 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  458.340198][T23636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  458.345953][T23646] erofs: (device loop5): mounted with root inode @ nid 36.
[  458.352201][T23636] Call Trace:
[  458.352221][T23636]  dump_stack+0x137/0x1be
[  458.352258][T23636]  should_fail+0x384/0x4b0
[  458.352276][T23636]  ? asan.module_dtor+0x20/0x20
[  458.380274][T23636]  _copy_from_user+0x2d/0x170
[  458.385234][T23636]  ? asan.module_dtor+0x20/0x20
[  458.390543][T23636]  br_ioctl_deviceless_stub+0xa4/0x750
[  458.396681][T23636]  ? memset+0x1f/0x40
[  458.400882][T23636]  ? asan.module_dtor+0x20/0x20
[  458.405876][T23636]  sock_ioctl+0x38c/0x5f0
[  458.411303][T23636]  ? bpf_lsm_file_ioctl+0x5/0x10
[  458.416921][T23636]  ? sock_poll+0x400/0x400
[  458.423642][T23636]  __se_sys_ioctl+0xfb/0x170
[  458.429792][T23636]  do_syscall_64+0x2d/0x70
[  458.436181][T23636]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  458.442835][T23636] RIP: 0033:0x45e219
[  458.447440][T23636] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:05:01 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000a0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  458.473609][T23636] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.483396][T23636] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  458.492620][T23636] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  458.503823][T23636] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  458.513048][T23636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
03:05:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x65580000)

03:05:01 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  458.522156][T23636] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
[  458.545404][T23638] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  458.561340][T23649] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  458.687177][T23638] loop2: detected capacity change from 4 to 0
[  458.726714][T23638] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x79010000)

03:05:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:01 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000b0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  458.797206][T23660] loop5: detected capacity change from 4 to 0
[  458.806397][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  458.817642][T23660] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:01 executing program 0 (fault-call:6 fault-nth:3):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:01 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:01 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000b0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x81000000)

[  459.068711][T23677] loop2: detected capacity change from 4 to 0
[  459.074727][T23682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:01 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  459.111235][T23677] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  459.132129][T23681] FAULT_INJECTION: forcing a failure.
[  459.132129][T23681] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:05:01 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  459.181318][T23677] loop2: detected capacity change from 4 to 0
[  459.199917][T23681] CPU: 1 PID: 23681 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  459.210211][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  459.211993][T23685] loop5: detected capacity change from 4 to 0
[  459.223076][T23681] Call Trace:
[  459.223101][T23681]  dump_stack+0x137/0x1be
[  459.223140][T23681]  should_fail+0x384/0x4b0
[  459.223167][T23681]  _copy_from_user+0x2d/0x170
[  459.223190][T23681]  br_ioctl_deviceless_stub+0x2af/0x750
[  459.223215][T23681]  ? memset+0x1f/0x40
[  459.223243][T23681]  ? asan.module_dtor+0x20/0x20
[  459.223263][T23681]  sock_ioctl+0x38c/0x5f0
[  459.223287][T23681]  ? bpf_lsm_file_ioctl+0x5/0x10
[  459.274177][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  459.276581][T23681]  ? sock_poll+0x400/0x400
[  459.276610][T23681]  __se_sys_ioctl+0xfb/0x170
[  459.276637][T23681]  do_syscall_64+0x2d/0x70
[  459.276658][T23681]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  459.276679][T23681] RIP: 0033:0x45e219
03:05:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x83000000)

[  459.276697][T23681] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  459.276713][T23681] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246
[  459.316444][T23685] erofs: (device loop5): mounted with root inode @ nid 36.
[  459.334572][T23681]  ORIG_RAX: 0000000000000010
[  459.334592][T23681] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  459.334605][T23681] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  459.334615][T23681] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
03:05:02 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000c0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  459.334626][T23681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  459.334638][T23681] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
[  459.406944][T23677] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:02 executing program 0 (fault-call:6 fault-nth:4):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:02 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x88470000)

03:05:02 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  459.619330][T23706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  459.629156][T23703] loop2: detected capacity change from 4 to 0
[  459.659593][T23708] FAULT_INJECTION: forcing a failure.
[  459.659593][T23708] name failslab, interval 1, probability 0, space 0, times 0
[  459.712302][T23703] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:02 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  459.774863][T23708] CPU: 0 PID: 23708 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  459.784576][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  459.795528][T23708] Call Trace:
[  459.799877][T23708]  dump_stack+0x137/0x1be
[  459.804717][T23708]  should_fail+0x384/0x4b0
[  459.809816][T23708]  ? kvmalloc_node+0x81/0xf0
[  459.815240][T23708]  should_failslab+0x5/0x20
[  459.820275][T23708]  __kmalloc_node+0x8b/0x3e0
[  459.826781][T23708]  kvmalloc_node+0x81/0xf0
[  459.831735][T23708]  alloc_netdev_mqs+0x86/0xc50
[  459.836670][T23708]  ? br_netpoll_disable+0x80/0x80
[  459.843939][T23708]  br_add_bridge+0x33/0xe0
[  459.848470][T23708]  br_ioctl_deviceless_stub+0x1e0/0x750
[  459.855786][T23708]  ? asan.module_dtor+0x20/0x20
[  459.861875][T23708]  sock_ioctl+0x38c/0x5f0
[  459.866704][T23708]  ? bpf_lsm_file_ioctl+0x5/0x10
[  459.872919][T23708]  ? sock_poll+0x400/0x400
[  459.878387][T23708]  __se_sys_ioctl+0xfb/0x170
[  459.883358][T23708]  do_syscall_64+0x2d/0x70
[  459.888356][T23708]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  459.895586][T23708] RIP: 0033:0x45e219
[  459.900434][T23708] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:05:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x88480000)

[  459.922841][T23708] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  459.932398][T23708] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  459.941855][T23708] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  459.951606][T23708] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  459.960815][T23708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  459.969652][T23708] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
03:05:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  460.003036][T23717] loop5: detected capacity change from 4 to 0
03:05:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  460.061653][T23703] loop2: detected capacity change from 4 to 0
[  460.084318][T23717] erofs: (device loop5): mounted with root inode @ nid 36.
[  460.098753][T23703] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:02 executing program 0 (fault-call:6 fault-nth:5):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:02 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000d0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x88a8ffff)

03:05:02 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000d0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:02 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:02 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  460.334519][T23738] FAULT_INJECTION: forcing a failure.
[  460.334519][T23738] name failslab, interval 1, probability 0, space 0, times 0
[  460.388834][T23746] loop2: detected capacity change from 4 to 0
[  460.399142][T23738] CPU: 1 PID: 23738 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  460.408496][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  460.420100][T23738] Call Trace:
[  460.424103][T23738]  dump_stack+0x137/0x1be
[  460.430486][T23738]  should_fail+0x384/0x4b0
[  460.435459][T23738]  ? dev_addr_init+0x107/0x400
[  460.440763][T23738]  should_failslab+0x5/0x20
[  460.446100][T23738]  kmem_cache_alloc_trace+0x65/0x300
[  460.451523][T23738]  ? trace_percpu_alloc_percpu+0x120/0x270
[  460.458356][T23738]  dev_addr_init+0x107/0x400
[  460.463277][T23738]  alloc_netdev_mqs+0x122/0xc50
[  460.469558][T23738]  ? br_netpoll_disable+0x80/0x80
[  460.475830][T23738]  br_add_bridge+0x33/0xe0
[  460.480789][T23738]  br_ioctl_deviceless_stub+0x1e0/0x750
[  460.487384][T23738]  ? asan.module_dtor+0x20/0x20
[  460.495948][T23738]  sock_ioctl+0x38c/0x5f0
[  460.500706][T23738]  ? bpf_lsm_file_ioctl+0x5/0x10
[  460.506373][T23738]  ? sock_poll+0x400/0x400
[  460.511274][T23738]  __se_sys_ioctl+0xfb/0x170
[  460.517946][T23738]  do_syscall_64+0x2d/0x70
[  460.523677][T23738]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  460.529628][T23738] RIP: 0033:0x45e219
03:05:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x9effffff)

03:05:03 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x12, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  460.534313][T23738] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  460.555041][T23738] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  460.564107][T23738] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  460.572974][T23738] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  460.581645][T23738] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
03:05:03 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  460.590511][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  460.599320][T23738] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
[  460.611218][T23745] loop5: detected capacity change from 4 to 0
03:05:03 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  460.645282][T23746] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  460.665719][T23745] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xefffffff)

03:05:03 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000e0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  460.759320][T23746] loop2: detected capacity change from 4 to 0
[  460.768372][T23746] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:03 executing program 0 (fault-call:6 fault-nth:6):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:03 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000e0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:03 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:03 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:03 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xf0ffffff)

[  460.975416][T23775] loop2: detected capacity change from 4 to 0
[  460.976820][T23776] FAULT_INJECTION: forcing a failure.
[  460.976820][T23776] name failslab, interval 1, probability 0, space 0, times 0
[  461.028967][T23775] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  461.052597][T23776] CPU: 0 PID: 23776 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  461.052712][T23784] validate_nla: 11 callbacks suppressed
[  461.052726][T23784] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  461.061875][T23776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  461.061893][T23776] Call Trace:
[  461.061905][T23776]  dump_stack+0x137/0x1be
[  461.061941][T23776]  should_fail+0x384/0x4b0
[  461.061964][T23776]  ? kvmalloc_node+0x81/0xf0
[  461.061978][T23776]  should_failslab+0x5/0x20
[  461.061994][T23776]  __kmalloc_node+0x8b/0x3e0
[  461.062017][T23776]  ? memset+0x1f/0x40
[  461.062039][T23776]  kvmalloc_node+0x81/0xf0
[  461.062057][T23776]  alloc_netdev_mqs+0x661/0xc50
03:05:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xffffa888)

[  461.062080][T23776]  ? br_netpoll_disable+0x80/0x80
[  461.062105][T23776]  br_add_bridge+0x33/0xe0
[  461.062123][T23776]  br_ioctl_deviceless_stub+0x1e0/0x750
[  461.062153][T23776]  ? asan.module_dtor+0x20/0x20
[  461.062184][T23776]  sock_ioctl+0x38c/0x5f0
[  461.062207][T23776]  ? bpf_lsm_file_ioctl+0x5/0x10
[  461.062230][T23776]  ? sock_poll+0x400/0x400
[  461.062246][T23776]  __se_sys_ioctl+0xfb/0x170
[  461.062267][T23776]  do_syscall_64+0x2d/0x70
[  461.103454][T23786] __nla_validate_parse: 5 callbacks suppressed
[  461.103472][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  461.103519][T23776]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  461.130225][T23779] loop5: detected capacity change from 4 to 0
[  461.132412][T23776] RIP: 0033:0x45e219
[  461.132437][T23776] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:05:03 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:03 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  461.132454][T23776] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  461.132477][T23776] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  461.132490][T23776] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  461.251857][T23776] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  461.261145][T23776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  461.269330][T23776] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
03:05:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xffffff7f)

[  461.326306][T23779] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:04 executing program 0 (fault-call:6 fault-nth:7):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  461.370403][T23775] loop2: detected capacity change from 4 to 0
[  461.387293][T23775] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  461.410690][T23797] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:04 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000f0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:04 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:04 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4000f0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  461.452798][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xffffff9e)

[  461.549749][T23803] FAULT_INJECTION: forcing a failure.
[  461.549749][T23803] name failslab, interval 1, probability 0, space 0, times 0
[  461.578096][T23803] CPU: 0 PID: 23803 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  461.589670][T23803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  461.600302][T23803] Call Trace:
[  461.603784][T23803]  dump_stack+0x137/0x1be
[  461.608349][T23803]  should_fail+0x384/0x4b0
[  461.612978][T23803]  ? kvmalloc_node+0x81/0xf0
[  461.620670][T23803]  should_failslab+0x5/0x20
[  461.625361][T23803]  __kmalloc_node+0x8b/0x3e0
[  461.630066][T23803]  ? lockdep_init_map_waits+0x3f/0x880
[  461.636896][T23803]  kvmalloc_node+0x81/0xf0
[  461.644791][T23803]  alloc_netdev_mqs+0x7da/0xc50
[  461.651978][T23803]  br_add_bridge+0x33/0xe0
[  461.657732][T23803]  br_ioctl_deviceless_stub+0x1e0/0x750
[  461.666132][T23803]  ? asan.module_dtor+0x20/0x20
[  461.671773][T23803]  sock_ioctl+0x38c/0x5f0
[  461.678574][T23803]  ? bpf_lsm_file_ioctl+0x5/0x10
[  461.686671][T23803]  ? sock_poll+0x400/0x400
[  461.691129][T23803]  __se_sys_ioctl+0xfb/0x170
[  461.698971][T23803]  do_syscall_64+0x2d/0x70
[  461.703579][T23803]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  461.709523][T23803] RIP: 0033:0x45e219
[  461.713795][T23803] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  461.733794][T23803] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
03:05:04 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x12, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  461.743386][T23803] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  461.751507][T23803] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  461.759600][T23803] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  461.767609][T23803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  461.775702][T23803] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
[  461.828938][T23806] loop5: detected capacity change from 4 to 0
03:05:04 executing program 0 (fault-call:6 fault-nth:8):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xffffffef)

[  461.910463][T23806] erofs: (device loop5): mounted with root inode @ nid 36.
[  461.928136][T23816] loop2: detected capacity change from 4 to 0
[  461.946251][T23816] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  461.981060][T23819] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  461.999325][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xfffffff0)

[  462.063280][T23816] loop2: detected capacity change from 4 to 0
[  462.088519][T23816] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:04 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400100c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  462.128631][T23828] FAULT_INJECTION: forcing a failure.
[  462.128631][T23828] name failslab, interval 1, probability 0, space 0, times 0
03:05:04 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  462.202673][T23828] CPU: 0 PID: 23828 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  462.212004][T23828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  462.222999][T23828] Call Trace:
[  462.226453][T23828]  dump_stack+0x137/0x1be
[  462.230853][T23828]  should_fail+0x384/0x4b0
[  462.235401][T23828]  ? kvmalloc_node+0x81/0xf0
[  462.240309][T23828]  should_failslab+0x5/0x20
[  462.245277][T23828]  __kmalloc_node+0x8b/0x3e0
03:05:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x40030000000000)

[  462.249931][T23828]  ? lockdep_init_map_waits+0x3f/0x880
[  462.255530][T23828]  kvmalloc_node+0x81/0xf0
[  462.260172][T23828]  alloc_netdev_mqs+0x7da/0xc50
[  462.265365][T23828]  br_add_bridge+0x33/0xe0
[  462.269917][T23828]  br_ioctl_deviceless_stub+0x1e0/0x750
[  462.276037][T23828]  ? asan.module_dtor+0x20/0x20
[  462.281700][T23828]  sock_ioctl+0x38c/0x5f0
[  462.286608][T23828]  ? bpf_lsm_file_ioctl+0x5/0x10
[  462.291755][T23828]  ? sock_poll+0x400/0x400
[  462.296248][T23828]  __se_sys_ioctl+0xfb/0x170
[  462.301229][T23828]  do_syscall_64+0x2d/0x70
[  462.306198][T23828]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  462.312828][T23828] RIP: 0033:0x45e219
[  462.316768][T23828] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  462.337665][T23828] RSP: 002b:00007fcd56d33c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
03:05:05 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  462.348911][T23828] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000045e219
[  462.357447][T23828] RDX: 00000000200000c0 RSI: 0000000000008941 RDI: 0000000000000005
[  462.366129][T23828] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  462.374467][T23828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  462.383332][T23828] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
03:05:05 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a420100c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:05 executing program 0 (fault-call:6 fault-nth:9):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  462.459218][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:05 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x100000000000000)

[  462.569668][T23842] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  462.613237][T23844] loop5: detected capacity change from 4 to 0
[  462.689237][T23847] loop2: detected capacity change from 4 to 0
[  462.700134][T23848] FAULT_INJECTION: forcing a failure.
[  462.700134][T23848] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:05:05 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  462.736770][T23844] erofs: (device loop5): mounted with root inode @ nid 36.
[  462.801009][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  462.810125][T23848] CPU: 1 PID: 23848 Comm: syz-executor.0 Not tainted 5.11.0-rc5-syzkaller #0
[  462.817385][T23847] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  462.821474][T23848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  462.821493][T23848] Call Trace:
[  462.821506][T23848]  dump_stack+0x137/0x1be
[  462.821547][T23848]  should_fail+0x384/0x4b0
[  462.821575][T23848]  _copy_from_user+0x2d/0x170
[  462.858183][T23848]  kstrtouint_from_user+0x6f/0x1a0
[  462.863518][T23848]  proc_fail_nth_write+0x3d/0x1d0
[  462.868955][T23848]  ? proc_fail_nth_read+0x1b0/0x1b0
[  462.874554][T23848]  vfs_write+0x220/0xab0
[  462.878977][T23848]  ? mutex_lock_nested+0x1a/0x20
[  462.884172][T23848]  ? __fdget_pos+0x24e/0x2f0
[  462.888970][T23848]  ksys_write+0x11b/0x220
[  462.894650][T23848]  do_syscall_64+0x2d/0x70
[  462.899351][T23848]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  462.906977][T23848] RIP: 0033:0x417ab1
[  462.911232][T23848] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  462.931877][T23848] RSP: 002b:00007fcd56d33c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  462.941139][T23848] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417ab1
03:05:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x200000000000000)

03:05:05 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400110c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  462.949302][T23848] RDX: 0000000000000001 RSI: 00007fcd56d33cb0 RDI: 0000000000000006
[  462.957752][T23848] RBP: 00007fcd56d33ca0 R08: 0000000000000000 R09: 0000000000000000
[  462.965753][T23848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  462.974515][T23848] R13: 00007ffd46a17ccf R14: 00007fcd56d349c0 R15: 000000000119bf8c
03:05:05 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x25, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  463.036852][T23861] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:05 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:05 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400110c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x300000000000000)

03:05:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6c, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  463.251973][T23872] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  463.252082][T23871] loop2: detected capacity change from 4 to 0
[  463.272202][T23871] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  463.284039][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x400000000000000)

[  463.350856][T23871] loop2: detected capacity change from 4 to 0
[  463.389665][T23871] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:06 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  463.400227][T23882] loop5: detected capacity change from 4 to 0
[  463.414076][T23882] erofs: (device loop5): mounted with root inode @ nid 36.
[  463.457743][T23886] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:06 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400120c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x74, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:06 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4c, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  463.548328][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:06 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400120c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x2, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x500000000000000)

[  463.704856][T23900] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  463.716081][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  463.743652][T23898] loop2: detected capacity change from 4 to 0
03:05:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x600000000000000)

03:05:06 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  463.779515][T23898] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x10, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7a, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  463.869295][T23898] loop2: detected capacity change from 4 to 0
[  463.901771][T23898] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  463.941370][T23911] loop5: detected capacity change from 4 to 0
[  463.950885][T23917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:06 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400180c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x700000000000000)

03:05:06 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x68, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  463.997417][T23924] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  464.028055][T23911] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:06 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400180c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:06 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x4c00, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:06 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  464.163584][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:06 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6c, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:06 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x800000000000000)

[  464.242592][T23932] loop2: detected capacity change from 4 to 0
[  464.340433][T23932] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:07 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x4c01, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:07 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x74, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  464.415788][T23944] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:07 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  464.477389][T23947] loop5: detected capacity change from 4 to 0
[  464.497339][T23932] loop2: detected capacity change from 4 to 0
03:05:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x900000000000000)

[  464.521238][T23947] erofs: (device loop5): mounted with root inode @ nid 36.
[  464.522780][T23932] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:07 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4c71b0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:07 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xa00000000000000)

03:05:07 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400210c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:07 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x4c04, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:07 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7a, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:07 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xc00000000000000)

03:05:07 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x4c06, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  464.822043][T23976] loop5: detected capacity change from 4 to 0
03:05:07 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6f4, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  464.877295][T23976] erofs: (device loop5): mounted with root inode @ nid 36.
[  464.927158][T23982] loop2: detected capacity change from 4 to 0
03:05:07 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400250c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  464.990464][T23982] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:07 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  465.169131][T23982] loop2: detected capacity change from 4 to 0
[  465.185642][T23982] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:07 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400200c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:07 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:07 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x541b, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xf00000000000000)

03:05:07 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  465.234780][T24004] loop5: detected capacity change from 4 to 0
03:05:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x1000000000000000)

[  465.285380][T24004] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:08 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x67d, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:08 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400410c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x6000000000000000)

[  465.450746][T24019] loop2: detected capacity change from 4 to 0
[  465.483988][T24019] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:08 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x5421, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  465.574117][T24019] loop2: detected capacity change from 4 to 0
[  465.584500][T24019] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:08 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:08 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a410200c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:08 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x6558000000000000)

03:05:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x5450, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  465.729759][T24040] loop5: detected capacity change from 4 to 0
03:05:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x7901000000000000)

[  465.874544][T24040] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:08 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400480c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:08 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xb00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x5451, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:08 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  465.977371][T24057] loop2: detected capacity change from 4 to 0
03:05:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8000000000000000)

[  466.055486][T24057] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  466.092709][T24065] validate_nla: 6 callbacks suppressed
03:05:08 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xc00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:08 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x5452, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  466.092728][T24065] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  466.144679][T24057] loop2: detected capacity change from 4 to 0
[  466.195369][T24057] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  466.205685][T24074] __nla_validate_parse: 8 callbacks suppressed
[  466.205701][T24074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  466.277002][T24079] loop5: detected capacity change from 4 to 0
[  466.309107][T24086] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:09 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400210c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8100000000000000)

03:05:09 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xd00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:09 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x5460, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:09 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  466.351009][T24079] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:09 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4004c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8300000000000000)

03:05:09 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  466.548041][T24095] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  466.567531][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:09 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x6364, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:09 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xb00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8847000000000000)

[  466.647324][T24097] loop2: detected capacity change from 4 to 0
[  466.732148][T24097] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  466.755827][T24108] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  466.778341][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  466.804248][T24111] loop5: detected capacity change from 4 to 0
03:05:09 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xc00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  466.862315][T24111] erofs: (device loop5): mounted with root inode @ nid 36.
[  466.873915][T24097] loop2: detected capacity change from 4 to 0
[  466.917093][T24097] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  466.954395][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:09 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400250c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:09 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1100, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:09 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8901, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:09 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x8848000000000000)

03:05:09 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xd00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:09 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4005c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  467.101548][T24130] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:09 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8902, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  467.162877][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  467.193906][T24138] loop2: detected capacity change from 4 to 0
03:05:09 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1200, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x88a8ffff00000000)

[  467.222968][T24138] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:10 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  467.315865][T24142] loop5: detected capacity change from 4 to 0
03:05:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x9effffff00000000)

03:05:10 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1100, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  467.419209][T24142] erofs: (device loop5): mounted with root inode @ nid 36.
[  467.446251][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:10 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4003f0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:10 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400600c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8903, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xefffffff00000000)

[  467.553661][T24158] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  467.617796][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:10 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1800, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  467.659742][T24167] loop2: detected capacity change from 4 to 0
03:05:10 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1200, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  467.709818][T24171] loop5: detected capacity change from 4 to 0
[  467.739823][T24167] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xf0ffffff00000000)

[  467.778274][T24171] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8904, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:10 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  467.836039][T24179] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  467.857267][T24167] loop2: detected capacity change from 4 to 0
03:05:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xffffff7f00000000)

[  467.897990][T24167] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:10 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400680c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:10 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2100, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  467.973681][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  467.987378][T24191] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:10 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400400c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:10 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1800, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:10 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8906, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:10 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0xffffffff00000000)

[  468.154653][T24200] loop5: detected capacity change from 4 to 0
[  468.164460][T24199] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  468.207837][T24200] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:11 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4006c0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:11 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  468.352151][T24209] loop2: detected capacity change from 4 to 0
[  468.427922][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  468.447478][T24209] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8907, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:11 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x10000, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)

[  468.512158][T24209] loop2: detected capacity change from 4 to 0
[  468.520418][T24224] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
03:05:11 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4800, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  468.565884][T24209] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8912, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  468.626716][T24227] loop5: detected capacity change from 4 to 0
03:05:11 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400410c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  468.676798][T24227] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:11 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4c00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="301500002100010000000000680000000a000000000000000000000014000300726f7365300000000000000029461041a508621c82870fad2aaf685e3aa400000000"], 0x30}}, 0x0)

03:05:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2100, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:11 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400740c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

[  468.783402][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
03:05:11 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8913, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:11 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  468.848660][T24246] loop2: detected capacity change from 4 to 0
[  468.863970][T24246] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000))

03:05:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  469.002848][T24246] loop2: detected capacity change from 4 to 0
[  469.021479][T24246] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  469.064580][T24265] loop5: detected capacity change from 4 to 0
03:05:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:11 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6800, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  469.112970][T24265] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:11 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002100010000000000000000000a000000000000000000000014000300726f7365300000000000000400000000"], 0x30}}, 0x0)

03:05:12 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400480c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:12 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4007a0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:12 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4800, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0xce24, 0x4e22}}]}, 0x24}}, 0x4000000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101001, 0x0)
fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "80f123f59a0585b13a25af2784381c26"}, 0x11, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00'})

03:05:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:12 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8914, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7400, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:12 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x4c00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  469.470551][T24293] loop2: detected capacity change from 4 to 0
03:05:12 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
r2 = socket(0x11, 0x4800000000080003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00001fb000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8906, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r4 = socket(0x11, 0x4800000000080003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00001fb000)={'vcan0\x00', <r5=>0x0})
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x8906, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@mpls_getroute={0x58, 0x1a, 0x4, 0x70bd29, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x81, 0xfd, 0x3, 0xc8, 0x0, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x0, 0x3f}}, @RTA_TTL_PROPAGATE={0x5}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_OIF={0x8, 0x4, r3}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DST={0x8, 0x1, {0x40, 0x0, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

03:05:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7a00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  469.571508][T24299] loop5: detected capacity change from 4 to 0
[  469.597592][T24293] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0xf406, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  469.721596][T24299] erofs: (device loop5): mounted with root inode @ nid 36.
[  469.752947][T24293] loop2: detected capacity change from 4 to 0
[  469.784704][T24293] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:12 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4004c0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:12 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4008a0c0024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:12 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'rose0\x00'}]}, 0x30}}, 0x4004040)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040))

03:05:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:12 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6800, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:12 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8933, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

[  470.023365][T24335] loop2: detected capacity change from 4 to 0
03:05:12 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  470.081045][T24335] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  470.131679][T24348] loop5: detected capacity change from 4 to 0
[  470.150488][T24335] loop2: detected capacity change from 4 to 0
[  470.159358][T24335] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:12 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x6c00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  470.180685][T24348] erofs: (device loop5): mounted with root inode @ nid 36.
03:05:12 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a4005c0c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

03:05:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x85, 0x21, 0x1, 0x0, 0x20000000, {0xa, 0x0, 0x14}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x30}}, 0x90)

03:05:13 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a40000200024000000000000000000e80300000000000000000000020000000000000000000000a1246aafe01c4fc8b7b8febc08c8100f0000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c041", 0x86, 0x400}], 0x0, &(0x7f0000010a00))

03:05:13 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:13 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

03:05:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newnexthop={0x54, 0x68, 0x5d2, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x34}, [@NHA_GROUP={0x24, 0x2, [{0x2, 0x3f}, {0x1}, {0x2, 0x4}, {0x0, 0x7f}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x80)

03:05:13 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7400, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

[  470.461547][T24369] loop2: detected capacity change from 4 to 0
[  470.511223][T24369] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:13 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x7a00, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xc}]}, 0x20}}, 0x0)

03:05:13 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  470.614030][T24369] loop2: detected capacity change from 4 to 0
03:05:13 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c5e880043fe5000"/28], 0x1c}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
ioctl$sock_SIOCSIFBR(r2, 0x894c, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='ip6erspan0\x00'})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0)

03:05:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0)

[  470.669063][T24385] loop5: detected capacity change from 4 to 0
[  470.707955][T24369] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
03:05:13 executing program 2:
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e02a8f438a00a400600c", 0xd, 0x400}], 0x0, &(0x7f0000010a00))

[  470.777925][T24385] ================================================================================
03:05:13 executing program 3:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x20}}, 0x0)

[  470.858294][T24385] UBSAN: shift-out-of-bounds in fs/erofs/super.c:161:3
[  470.890401][T24385] shift exponent 32 is too large for 32-bit type 'int'
[  470.936857][T24385] CPU: 1 PID: 24385 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0
[  470.945701][T24385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  470.955846][T24385] Call Trace:
[  470.959156][T24385]  dump_stack+0x137/0x1be
[  470.963527][T24385]  ? __ubsan_handle_shift_out_of_bounds+0x277/0x4d0
[  470.970178][T24385]  __ubsan_handle_shift_out_of_bounds+0x432/0x4d0
[  470.976653][T24385]  erofs_fc_fill_super+0xe59/0xe60
[  470.981921][T24385]  get_tree_bdev+0x406/0x630
03:05:13 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x2f, 0x40, 0x0, 0x2, @private2={0xfc, 0x2, [], 0x1}, @local, 0x1, 0x7, 0x3, 0x196}})
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv4_newroute={0x28, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x7, 0xfd, 0x3, 0xfd, 0x5, 0x3000}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffd, 0x2, 0x0, r2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x400815d)
write(r1, &(0x7f0000000000)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22)
sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040)
r3 = dup(r0)
r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp\x00')
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1406, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000041}, 0x40001)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0)

[  470.986572][T24385]  ? erofs_fc_reconfigure+0x130/0x130
[  470.991979][T24385]  vfs_get_tree+0x86/0x270
[  470.996450][T24385]  path_mount+0x17ad/0x2a00
[  471.000993][T24385]  __se_sys_mount+0x28c/0x320
[  471.005720][T24385]  ? lockdep_hardirqs_on+0x8d/0x130
[  471.010968][T24385]  do_syscall_64+0x2d/0x70
[  471.015447][T24385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  471.021387][T24385] RIP: 0033:0x460c6a
[  471.025319][T24385] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  471.045308][T24385] RSP: 002b:00007f5d76e8da78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
[  471.054504][T24385] RAX: ffffffffffffffda RBX: 00007f5d76e8db10 RCX: 0000000000460c6a
[  471.062645][T24385] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5d76e8dad0
[  471.070698][T24385] RBP: 00007f5d76e8dad0 R08: 00007f5d76e8db10 R09: 0000000020000000
[  471.078702][T24385] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000
[  471.086696][T24385] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020010a00
[  471.113978][T24408] loop2: detected capacity change from 4 to 0
[  471.123668][T24409] validate_nla: 12 callbacks suppressed
[  471.123686][T24409] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  471.172896][T24408] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 0
[  471.206874][T24385] ================================================================================
[  471.219119][T24385] Kernel panic - not syncing: panic_on_warn set ...
[  471.225784][T24385] CPU: 1 PID: 24385 Comm: syz-executor.5 Not tainted 5.11.0-rc5-syzkaller #0
[  471.234568][T24385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  471.244652][T24385] Call Trace:
[  471.247957][T24385]  dump_stack+0x137/0x1be
[  471.252333][T24385]  ? panic+0x1f3/0x800
[  471.256543][T24385]  panic+0x291/0x800
[  471.260457][T24385]  ? __ubsan_handle_shift_out_of_bounds+0x455/0x4d0
[  471.267436][T24385]  __ubsan_handle_shift_out_of_bounds+0x4cc/0x4d0
[  471.273894][T24385]  erofs_fc_fill_super+0xe59/0xe60
[  471.279149][T24385]  get_tree_bdev+0x406/0x630
[  471.283762][T24385]  ? erofs_fc_reconfigure+0x130/0x130
[  471.289159][T24385]  vfs_get_tree+0x86/0x270
[  471.293601][T24385]  path_mount+0x17ad/0x2a00
[  471.298146][T24385]  __se_sys_mount+0x28c/0x320
[  471.302849][T24385]  ? lockdep_hardirqs_on+0x8d/0x130
[  471.308171][T24385]  do_syscall_64+0x2d/0x70
[  471.312647][T24385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  471.318553][T24385] RIP: 0033:0x460c6a
[  471.322467][T24385] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00
[  471.342090][T24385] RSP: 002b:00007f5d76e8da78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
[  471.350542][T24385] RAX: ffffffffffffffda RBX: 00007f5d76e8db10 RCX: 0000000000460c6a
[  471.358542][T24385] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5d76e8dad0
[  471.366533][T24385] RBP: 00007f5d76e8dad0 R08: 00007f5d76e8db10 R09: 0000000020000000
[  471.374550][T24385] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000
[  471.382546][T24385] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020010a00
[  471.390897][T24385] Kernel Offset: disabled
[  471.395564][T24385] Rebooting in 86400 seconds..