Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:44675' (ECDSA) to the list of known hosts. 2025/07/16 00:37:49 fuzzer started 2025/07/16 00:37:49 dialing manager at localhost:44711 syzkaller login: [ 52.451466] cgroup: Unknown subsys name 'net' [ 52.532108] cgroup: Unknown subsys name 'cpuset' [ 52.556688] cgroup: Unknown subsys name 'rlimit' 2025/07/16 00:38:02 syscalls: 2214 2025/07/16 00:38:02 code coverage: enabled 2025/07/16 00:38:02 comparison tracing: enabled 2025/07/16 00:38:02 extra coverage: enabled 2025/07/16 00:38:02 setuid sandbox: enabled 2025/07/16 00:38:02 namespace sandbox: enabled 2025/07/16 00:38:02 Android sandbox: enabled 2025/07/16 00:38:02 fault injection: enabled 2025/07/16 00:38:02 leak checking: enabled 2025/07/16 00:38:02 net packet injection: enabled 2025/07/16 00:38:02 net device setup: enabled 2025/07/16 00:38:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/16 00:38:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/16 00:38:02 USB emulation: enabled 2025/07/16 00:38:02 hci packet injection: enabled 2025/07/16 00:38:02 wifi device emulation: enabled 2025/07/16 00:38:02 802.15.4 emulation: enabled 2025/07/16 00:38:02 fetching corpus: 50, signal 24426/26211 (executing program) 2025/07/16 00:38:02 fetching corpus: 100, signal 32851/36232 (executing program) 2025/07/16 00:38:02 fetching corpus: 150, signal 38361/43274 (executing program) 2025/07/16 00:38:02 fetching corpus: 200, signal 42733/49178 (executing program) 2025/07/16 00:38:02 fetching corpus: 250, signal 50157/57843 (executing program) 2025/07/16 00:38:02 fetching corpus: 300, signal 52400/61486 (executing program) 2025/07/16 00:38:02 fetching corpus: 350, signal 54207/64692 (executing program) 2025/07/16 00:38:03 fetching corpus: 400, signal 58056/69728 (executing program) 2025/07/16 00:38:03 fetching corpus: 450, signal 60061/73037 (executing program) 2025/07/16 00:38:03 fetching corpus: 500, signal 63109/77254 (executing program) 2025/07/16 00:38:03 fetching corpus: 550, signal 67032/82199 (executing program) 2025/07/16 00:38:03 fetching corpus: 600, signal 69392/85702 (executing program) 2025/07/16 00:38:03 fetching corpus: 650, signal 71213/88652 (executing program) 2025/07/16 00:38:03 fetching corpus: 700, signal 72899/91449 (executing program) 2025/07/16 00:38:03 fetching corpus: 750, signal 74659/94302 (executing program) 2025/07/16 00:38:03 fetching corpus: 800, signal 77051/97650 (executing program) 2025/07/16 00:38:03 fetching corpus: 850, signal 79812/101323 (executing program) 2025/07/16 00:38:04 fetching corpus: 900, signal 81542/104068 (executing program) 2025/07/16 00:38:04 fetching corpus: 950, signal 84052/107385 (executing program) 2025/07/16 00:38:04 fetching corpus: 1000, signal 86508/110634 (executing program) 2025/07/16 00:38:04 fetching corpus: 1050, signal 88265/113284 (executing program) 2025/07/16 00:38:04 fetching corpus: 1100, signal 89447/115432 (executing program) 2025/07/16 00:38:04 fetching corpus: 1150, signal 90835/117678 (executing program) 2025/07/16 00:38:04 fetching corpus: 1200, signal 92019/119776 (executing program) 2025/07/16 00:38:04 fetching corpus: 1250, signal 93491/122034 (executing program) 2025/07/16 00:38:04 fetching corpus: 1300, signal 94807/124169 (executing program) 2025/07/16 00:38:04 fetching corpus: 1350, signal 97223/127094 (executing program) 2025/07/16 00:38:04 fetching corpus: 1400, signal 98145/128894 (executing program) 2025/07/16 00:38:05 fetching corpus: 1450, signal 99463/130937 (executing program) 2025/07/16 00:38:05 fetching corpus: 1500, signal 100572/132832 (executing program) 2025/07/16 00:38:05 fetching corpus: 1550, signal 101887/134847 (executing program) 2025/07/16 00:38:05 fetching corpus: 1600, signal 102928/136632 (executing program) 2025/07/16 00:38:05 fetching corpus: 1650, signal 105216/139230 (executing program) 2025/07/16 00:38:05 fetching corpus: 1700, signal 106221/140924 (executing program) 2025/07/16 00:38:05 fetching corpus: 1750, signal 107778/143012 (executing program) 2025/07/16 00:38:05 fetching corpus: 1800, signal 108462/144491 (executing program) 2025/07/16 00:38:05 fetching corpus: 1850, signal 109707/146295 (executing program) 2025/07/16 00:38:05 fetching corpus: 1900, signal 110558/147832 (executing program) 2025/07/16 00:38:05 fetching corpus: 1950, signal 111619/149512 (executing program) 2025/07/16 00:38:05 fetching corpus: 2000, signal 112392/150946 (executing program) 2025/07/16 00:38:06 fetching corpus: 2050, signal 115722/154048 (executing program) 2025/07/16 00:38:06 fetching corpus: 2100, signal 116374/155405 (executing program) 2025/07/16 00:38:06 fetching corpus: 2150, signal 117373/156900 (executing program) 2025/07/16 00:38:06 fetching corpus: 2200, signal 118042/158198 (executing program) 2025/07/16 00:38:06 fetching corpus: 2250, signal 118833/159600 (executing program) 2025/07/16 00:38:06 fetching corpus: 2300, signal 119579/160898 (executing program) 2025/07/16 00:38:06 fetching corpus: 2350, signal 120846/162569 (executing program) 2025/07/16 00:38:06 fetching corpus: 2400, signal 121604/163866 (executing program) 2025/07/16 00:38:06 fetching corpus: 2450, signal 122197/165080 (executing program) 2025/07/16 00:38:06 fetching corpus: 2500, signal 123039/166440 (executing program) 2025/07/16 00:38:06 fetching corpus: 2550, signal 124074/167825 (executing program) 2025/07/16 00:38:07 fetching corpus: 2600, signal 124940/169132 (executing program) 2025/07/16 00:38:07 fetching corpus: 2650, signal 125608/170356 (executing program) 2025/07/16 00:38:07 fetching corpus: 2700, signal 126056/171416 (executing program) 2025/07/16 00:38:07 fetching corpus: 2750, signal 127076/172728 (executing program) 2025/07/16 00:38:07 fetching corpus: 2800, signal 127566/173746 (executing program) 2025/07/16 00:38:07 fetching corpus: 2850, signal 128055/174780 (executing program) 2025/07/16 00:38:07 fetching corpus: 2900, signal 128589/175792 (executing program) 2025/07/16 00:38:07 fetching corpus: 2950, signal 129221/176860 (executing program) 2025/07/16 00:38:07 fetching corpus: 3000, signal 129581/177848 (executing program) 2025/07/16 00:38:07 fetching corpus: 3050, signal 130216/178956 (executing program) 2025/07/16 00:38:07 fetching corpus: 3100, signal 130926/180084 (executing program) 2025/07/16 00:38:07 fetching corpus: 3150, signal 131270/181044 (executing program) 2025/07/16 00:38:07 fetching corpus: 3200, signal 131734/182065 (executing program) 2025/07/16 00:38:08 fetching corpus: 3250, signal 132348/183085 (executing program) 2025/07/16 00:38:08 fetching corpus: 3300, signal 132850/183995 (executing program) 2025/07/16 00:38:08 fetching corpus: 3350, signal 133433/184979 (executing program) 2025/07/16 00:38:08 fetching corpus: 3400, signal 134071/186009 (executing program) 2025/07/16 00:38:08 fetching corpus: 3450, signal 134812/187067 (executing program) 2025/07/16 00:38:08 fetching corpus: 3500, signal 135236/188018 (executing program) 2025/07/16 00:38:08 fetching corpus: 3550, signal 136021/189017 (executing program) 2025/07/16 00:38:08 fetching corpus: 3600, signal 136617/189946 (executing program) 2025/07/16 00:38:08 fetching corpus: 3650, signal 137174/190884 (executing program) 2025/07/16 00:38:08 fetching corpus: 3700, signal 137684/191776 (executing program) 2025/07/16 00:38:08 fetching corpus: 3750, signal 138401/192746 (executing program) 2025/07/16 00:38:09 fetching corpus: 3800, signal 138814/193541 (executing program) 2025/07/16 00:38:09 fetching corpus: 3850, signal 139486/194448 (executing program) 2025/07/16 00:38:09 fetching corpus: 3900, signal 139890/195263 (executing program) 2025/07/16 00:38:09 fetching corpus: 3950, signal 140458/196140 (executing program) 2025/07/16 00:38:09 fetching corpus: 4000, signal 140966/196992 (executing program) 2025/07/16 00:38:09 fetching corpus: 4050, signal 141550/197858 (executing program) 2025/07/16 00:38:09 fetching corpus: 4100, signal 142352/198760 (executing program) 2025/07/16 00:38:09 fetching corpus: 4150, signal 143278/199653 (executing program) 2025/07/16 00:38:09 fetching corpus: 4200, signal 143886/200479 (executing program) 2025/07/16 00:38:09 fetching corpus: 4250, signal 144342/201260 (executing program) 2025/07/16 00:38:09 fetching corpus: 4300, signal 144852/202009 (executing program) 2025/07/16 00:38:10 fetching corpus: 4350, signal 145400/202806 (executing program) 2025/07/16 00:38:10 fetching corpus: 4400, signal 145797/203552 (executing program) 2025/07/16 00:38:10 fetching corpus: 4450, signal 146308/204297 (executing program) 2025/07/16 00:38:10 fetching corpus: 4500, signal 146804/205036 (executing program) 2025/07/16 00:38:10 fetching corpus: 4550, signal 147171/205730 (executing program) 2025/07/16 00:38:10 fetching corpus: 4600, signal 147784/206482 (executing program) 2025/07/16 00:38:10 fetching corpus: 4650, signal 148191/207194 (executing program) 2025/07/16 00:38:10 fetching corpus: 4700, signal 148583/207865 (executing program) 2025/07/16 00:38:10 fetching corpus: 4750, signal 149159/208583 (executing program) 2025/07/16 00:38:10 fetching corpus: 4800, signal 149614/209265 (executing program) 2025/07/16 00:38:10 fetching corpus: 4850, signal 149991/209935 (executing program) 2025/07/16 00:38:10 fetching corpus: 4900, signal 150842/210629 (executing program) 2025/07/16 00:38:10 fetching corpus: 4950, signal 151319/211257 (executing program) 2025/07/16 00:38:11 fetching corpus: 5000, signal 151679/211932 (executing program) 2025/07/16 00:38:11 fetching corpus: 5050, signal 152007/212585 (executing program) 2025/07/16 00:38:11 fetching corpus: 5100, signal 152333/213211 (executing program) 2025/07/16 00:38:11 fetching corpus: 5150, signal 152631/213811 (executing program) 2025/07/16 00:38:11 fetching corpus: 5200, signal 153057/214415 (executing program) 2025/07/16 00:38:11 fetching corpus: 5250, signal 153368/215023 (executing program) 2025/07/16 00:38:11 fetching corpus: 5300, signal 153720/215664 (executing program) 2025/07/16 00:38:11 fetching corpus: 5350, signal 154185/216249 (executing program) 2025/07/16 00:38:11 fetching corpus: 5400, signal 155210/216816 (executing program) 2025/07/16 00:38:11 fetching corpus: 5450, signal 155948/217141 (executing program) 2025/07/16 00:38:11 fetching corpus: 5500, signal 156356/217141 (executing program) 2025/07/16 00:38:11 fetching corpus: 5550, signal 156772/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5600, signal 157158/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5650, signal 157600/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5700, signal 158163/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5750, signal 158603/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5800, signal 159113/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5850, signal 159605/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5900, signal 160048/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 5950, signal 160559/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 6000, signal 161015/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 6050, signal 161267/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 6100, signal 161769/217141 (executing program) 2025/07/16 00:38:12 fetching corpus: 6150, signal 162066/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6200, signal 162339/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6250, signal 162620/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6300, signal 162846/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6350, signal 163208/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6400, signal 163673/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6450, signal 164107/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6500, signal 164589/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6550, signal 164872/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6600, signal 165146/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6650, signal 165553/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6700, signal 165797/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6750, signal 165947/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6800, signal 166182/217141 (executing program) 2025/07/16 00:38:13 fetching corpus: 6850, signal 166508/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 6900, signal 166743/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 6950, signal 167163/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7000, signal 167659/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7050, signal 168110/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7100, signal 168487/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7150, signal 168813/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7200, signal 169211/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7250, signal 169504/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7300, signal 169711/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7350, signal 170010/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7400, signal 170370/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7450, signal 170637/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7500, signal 170982/217141 (executing program) 2025/07/16 00:38:14 fetching corpus: 7550, signal 171382/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7600, signal 171726/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7650, signal 172055/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7700, signal 172299/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7750, signal 172569/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7800, signal 172837/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7850, signal 173127/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7900, signal 173460/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 7950, signal 173866/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 8000, signal 174124/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 8050, signal 174365/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 8100, signal 174618/217141 (executing program) 2025/07/16 00:38:15 fetching corpus: 8150, signal 174896/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8200, signal 175110/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8250, signal 175305/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8300, signal 175503/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8350, signal 175854/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8400, signal 176106/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8450, signal 176423/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8500, signal 176657/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8550, signal 176836/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8600, signal 177023/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8650, signal 177190/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8700, signal 177453/217141 (executing program) 2025/07/16 00:38:16 fetching corpus: 8750, signal 177693/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 8800, signal 177950/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 8850, signal 178180/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 8900, signal 178410/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 8950, signal 178623/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9000, signal 178839/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9050, signal 179094/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9100, signal 179340/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9150, signal 179575/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9200, signal 179776/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9250, signal 180126/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9300, signal 180371/217141 (executing program) 2025/07/16 00:38:17 fetching corpus: 9350, signal 180630/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9400, signal 180816/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9450, signal 181347/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9500, signal 181493/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9550, signal 181631/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9600, signal 181803/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9650, signal 182017/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9700, signal 182312/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9750, signal 182523/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9800, signal 182772/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9850, signal 182917/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9900, signal 183123/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 9950, signal 183290/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 10000, signal 183497/217141 (executing program) 2025/07/16 00:38:18 fetching corpus: 10050, signal 183656/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10100, signal 183839/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10150, signal 184046/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10200, signal 184297/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10250, signal 184494/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10300, signal 184785/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10350, signal 184947/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10400, signal 185146/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10450, signal 185363/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10500, signal 185583/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10550, signal 185812/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10600, signal 185993/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10650, signal 186265/217141 (executing program) 2025/07/16 00:38:19 fetching corpus: 10700, signal 186475/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 10750, signal 186681/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 10800, signal 186916/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 10850, signal 187088/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 10900, signal 187253/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 10950, signal 187473/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11000, signal 188156/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11050, signal 188338/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11100, signal 188500/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11150, signal 188635/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11200, signal 188796/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11250, signal 188952/217141 (executing program) 2025/07/16 00:38:20 fetching corpus: 11300, signal 189144/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11350, signal 189328/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11400, signal 189500/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11450, signal 189762/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11500, signal 189955/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11550, signal 190215/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11600, signal 190393/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11650, signal 190612/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11700, signal 190795/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11750, signal 191011/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11800, signal 191153/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11850, signal 191524/217141 (executing program) 2025/07/16 00:38:21 fetching corpus: 11900, signal 191675/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 11950, signal 191869/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12000, signal 192017/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12050, signal 192166/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12100, signal 192311/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12150, signal 192478/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12200, signal 192605/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12250, signal 192852/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12300, signal 193045/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12350, signal 193224/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12400, signal 193438/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12450, signal 193609/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12500, signal 193784/217141 (executing program) 2025/07/16 00:38:22 fetching corpus: 12550, signal 193931/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12600, signal 194121/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12650, signal 194311/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12700, signal 194550/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12750, signal 194699/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12800, signal 194869/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12850, signal 195047/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12900, signal 195198/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12950, signal 195362/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12999, signal 195513/217141 (executing program) 2025/07/16 00:38:23 fetching corpus: 12999, signal 195513/217141 (executing program) 2025/07/16 00:38:25 starting 8 fuzzer processes 00:38:25 executing program 0: r0 = inotify_init1(0x800) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x1) splice(r0, &(0x7f0000000000)=0x1, r1, &(0x7f0000000080)=0xffffffffffffffc0, 0xfff, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) kcmp(r2, 0x0, 0x3, r3, r4) r5 = fspick(r1, &(0x7f0000000180)='./file0\x00', 0x1) kcmp(r2, r2, 0x6, r4, r5) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f00000001c0)="0247fd1a46be309771b121c77368004955b0568751d275de5507f8191624adc4ba6779fe44068418359ab9ce510c528b044904afc4f25175d6d75a431606dbef7c7d16ad5530244d0990b1ca3b991a78a83662812fef0628a1552d05e0f0634d5353d0b2e1f4749eed63838c12095bc9d70d538b7d93a1ca0cf11f1f1f2cd8a893203c78b2bb1e63334561a6284cd7930f8751d4b2a9c0929d955047c090c46a5c092a2c04e37aa6cee235d77668aeffb0f93cb58dace6173d325ebc68a60855775a") ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000002c0)={0x9, 0xe28, 0x4, 0x8001, 0x8, [{0xee34, 0x8, 0x7fff, '\x00', 0x400}, {0x5, 0x6, 0x4, '\x00', 0x400}, {0x7fffffff, 0x80000001, 0x7, '\x00', 0x408}, {0x7fff, 0x9, 0xfffffffffffffffa, '\x00', 0x4000}, {0x4, 0x3, 0xff, '\x00', 0x2806}, {0x3, 0x3800000000000, 0x1200000000, '\x00', 0x1280}, {0x1, 0x3, 0x6, '\x00', 0x1000}, {0x10000, 0x1, 0x8, '\x00', 0xc82}]}) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000014c0)) r7 = syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x3, 0x2, &(0x7f0000002600)=[{&(0x7f0000001580)="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", 0x1000, 0x4}, {&(0x7f0000002580)="a157e6bda5a5ebd7b5d31fcc10859a76f5016fef468d88999c6e2c50db85a75d49feb2ff0832a3702d32dfdb31c863b237820606da36dee4cebc81ec2e36697466", 0x41, 0x5}], 0x80000, &(0x7f0000002640)={[{@shortname_winnt}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '**'}}, {@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', 0xee01}}]}) faccessat2(r7, &(0x7f0000002700)='./file0\x00', 0x32, 0x200) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000002740)={{0x1, 0x1, 0x18, r0, {0xf3}}, './file0/file0\x00'}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f0000002780)="6845f976494bd04a195ed159f268d0bd369aeacbe6f27fc38aaa92aa9c8a2b948a1c6244b37917fc7d5754ce11168efd87cd5a68d63860a3436ec4c0c8ee5dc7b738e5362f2d094002200e77f32e19c1306872414b800194f593c83926ecfb89e1aeed96d7ca1e5cc1174da11ce6080de005eb2d445956d4d8127dd0d6f91f39f94ad857617bbdcc72a66541c560b1d68f1711640ac35a1b2bb2a29ac5bfedbb86c0a3314df3e1bb87bf7b2f613dd8e44d18974f5ceb9d1ee8a1307d66496647a3a070e36d55c87cd64a595ec757f6") sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004000) 00:38:25 executing program 1: ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1800) ioctl(r0, 0x401, &(0x7f0000000080)="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") ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001080)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000001100)={0x2, 0x20, 0xbc1, 0x7, 0x4, 0x1}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001140)=[r1, r1, r1], 0x3) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001180), 0x103001, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000011c0)) ioctl(r0, 0x723, &(0x7f0000001200)="5d0adf84af3c8d") io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001240)=[r0, r0, r2, r0, r0, r1, r0, 0xffffffffffffffff, r2], 0x9) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001280), 0xa0540, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000012c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) read(r1, &(0x7f00000016c0)=""/54, 0x36) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000001700)) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x4c8e01, 0x1, 0xc}, 0x18) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000001880)={&(0x7f00000017c0)=""/158, 0x9e}) dup2(0xffffffffffffffff, r0) bind$unix(r0, &(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e) 00:38:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = inotify_init1(0x80000) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xc02d) r2 = memfd_secret(0x0) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r3 = inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x900) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x62ab4b40}}, './file0\x00'}) r5 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, 0x0, 0x209, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5a6f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff0f88}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000380)={0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) fchmod(r6, 0x1e) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x59, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x15}, 0x0, 0x1f, @broadcast, 0x1, 0x0, 0x1f}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x8, 0x2, @broadcast, 0x46e6, 0x800, 0x9}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x8, @device_b, 0x7fffffff, @device_b, 0x81, 0x3ff, @device_a, 0xd8}}]}, @NL80211_ATTR_SSID={0x20, 0x34, @random="47a19470cb11de8b53034f4456b415a4188829e236f65eb01e29ba18"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb8}}, 0x1) r8 = openat(r6, &(0x7f0000000600)='./file0\x00', 0x8041, 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_IE={0x1e, 0x2a, [@gcr_ga={0xbd, 0x6}, @mic={0x8c, 0x10, {0xcc3, "c20fee50ac83", @short="4f5faae42a61e0a6"}}]}]}, 0x5c}}, 0x1) inotify_rm_watch(r0, r3) unlink(&(0x7f0000000780)='./file0\x00') 00:38:25 executing program 2: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x9}, 0x1}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x8, 0x80000000, 0x31, @mcast2, @rand_addr=' \x01\x00', 0x7, 0x80, 0x1f, 0x9}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@loopback, @loopback, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x1, 0x94b1, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x12}, 0x1, 0x10, 0x5, 0x7fff}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x178, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x43}, 0x20040800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000600)={'gretap0\x00', r4, 0x80, 0x7, 0x9, 0xc36b, {{0x13, 0x4, 0x1, 0x17, 0x4c, 0x67, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@noop, @noop, @timestamp={0x44, 0x1c, 0x85, 0x0, 0xc, [0x1000, 0xfffffffd, 0x8001, 0x67, 0x7d, 0x5]}, @cipso={0x86, 0x17, 0x2, [{0x7, 0x9, "42dfcf3004e151"}, {0x6, 0x5, "4dee4b"}, {0x6, 0x3, "15"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl2\x00', r5, 0x2f, 0xfb, 0x8, 0x6, 0x10, @loopback, @private1, 0x10, 0x80, 0x8, 0x7}}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x0, 0x7, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x8000, 0x8, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl2\x00', r2, 0x29, 0x7f, 0x0, 0xfffffff7, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7, 0x8, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl1\x00', r3, 0x2f, 0x20, 0x81, 0x8, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0xce, 0x7800, 0x8, 0xffff}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000d80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2bc, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0xc001}, 0x20000080) write$P9_RLOCK(r0, &(0x7f0000000dc0)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e80)={'gretap0\x00', &(0x7f0000000e00)={'syztnl0\x00', r10, 0x7800, 0x8, 0x1, 0x8, {{0xb, 0x4, 0x3, 0x25, 0x2c, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0x63, 0x0, 0xe, [0x9, 0x1, 0x0, 0x6, 0x7]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6gre0\x00', r9, 0x4, 0x9, 0x81, 0xff, 0x20, @mcast1, @mcast2, 0x80, 0x8000, 0x4, 0x1000}}) connect$packet(r0, &(0x7f0000000f80)={0x11, 0x1c, r11, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) signalfd(r0, &(0x7f0000000fc0)={[0xfffffffffffffffd]}, 0x8) 00:38:25 executing program 4: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc4}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000040)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x6c, 0x0, 0x2b, "7f601aed7f648ea74496a34167e9efe2", "445f536da2bb380f1f12a463e243de805def7f439d679d30f63b99d65c0c67d56d27bfdcae9e769f915aa35911b16d91c7201d174a0def3bab391a9f56d43ca77b4f30f8e52c5adf02c2311002ce32296ca5032aad098c"}, 0x6c, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = signalfd(r0, &(0x7f0000000200)={[0xf063]}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x7f, 0x1000}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$CDROMCLOSETRAY(r2, 0x5319) r3 = accept$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000340)='syz_tun\x00') ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000380)={{r3}, 0x0, 0x0, @unused=[0x8ca, 0x1f, 0x5, 0x28e], @subvolid=0xffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000001380)) r4 = syz_open_dev$hiddev(&(0x7f0000001500), 0x5, 0x111000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_submit(0x0, 0x5, &(0x7f0000001880)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x5, r3, &(0x7f00000013c0)="ca19efd462b1dd32a96ae2e9f59500cbbb380c4afe8a5f886659cde271b4c1a66d68cd514ad10bd2ba2a2ab19ceb78cc96623e49b0a2a09539e1601cf446b12507e6cba86e6b4c3e196063f184cbf5da1efaecd22ddd8159851e0f659bd50dde0e5ddd313c22abf2c58cf126ec58d2f2fc5dbad9f2778c6bff22f16062ee54737c59dc5706005a5fcdf77ec677428150fe6279a71d314991b7b9a6d27c03ffa21bb0bc35c50c316a4a02f472debb32de3870b4ed73c03cb284a9c6608b7e529e98", 0xc1, 0x53, 0x0, 0x3, r0}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x1000, r4, &(0x7f0000001540)="a2f12dd22d2b5e1eaba791af883fd38c7d96e3c88c62698bb48d912b60ba2f09a4ce31fbb711678e98833699506ceda7a98f40442f0f6fd8ca2738932ef8da9834cdbfaf7ec0441a8b2f8bb24acd9b08dfa78fec6925d05a94c32f3a4456c6adddec13394bad7068003743ed8f3cbae5aa0971fa470e9d35785930c7b433e64e52e9458e4833763e8aec59d53384cb73fba87381cf82adba5a66e652e59da26e4c49457bb8bb0ce4ea3518175bd35d313fb8576e23eb54f1399a4ba1514f6495db9e", 0xc2, 0x0, 0x0, 0x1, r0}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x9, r3, &(0x7f0000001680)="7b249cc126b147de018fd241d8b2a6ba39f67b2959a43324331d2e3c33d26606b501855a73cdabf5e1f91498585e1137228500c9a63981b3d155e0b996ff69ea0cc3a785b7bb15d43dac7e43cc5ab6338d48e36aff0f3df104", 0x59, 0xc42, 0x0, 0x0, r0}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000001740)="7df1d43c8fb7255ddda4924d8ec2aab0948f4fa0d5e0b9163eba4b084ebf4a66e49746f4eac6dd70db7e29fcd15ced14466b4630f7b34f", 0x37, 0x6, 0x0, 0x1, r0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x8, 0x7f, r2, &(0x7f00000017c0)="29601f490ecb2c12d70c507155f53d8c", 0x10, 0x5, 0x0, 0x3, r5}]) r6 = open(&(0x7f00000018c0)='./file0\x00', 0x80000, 0x80) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000001900)={'mangle\x00', 0x0, [0x10000, 0x7f, 0x8, 0x2, 0xa2]}, &(0x7f0000001980)=0x54) [ 86.415661] audit: type=1400 audit(1752626305.781:7): avc: denied { execmem } for pid=272 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:38:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x143a}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xf571}, {0x5}, {0x6, 0x11, 0x378c}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x1ba9}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffc01}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xfffffff8}}]}, 0x1e0}}, 0x20000080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d0}, 0x44040) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000580)) pread64(r1, &(0x7f00000005c0)=""/125, 0x7d, 0xb073) r4 = memfd_create(&(0x7f0000000640)='^*\'\'[#!$).!)(\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000680)={0x1000, 0x1}) r5 = getpgid(0xffffffffffffffff) sendmsg$unix(r1, &(0x7f00000008c0)={&(0x7f00000006c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)="e5217770de80d0ba769d081487dc2032b2bd8e15246d8248dff290586eed8018f1138eea77856e01a305a973a4db0086eeb767894a987431e92a112a6b0e8d4c60baa15942625011ff8ce893d9c77d94a421ce7a42108294b380d96894133336ef60c25f92034aa0af5ced38953609d38d021f8b2286a6e67f7e81c0b0244cff51ae672e58071f15898a59f92d76f8177f11011bf486ee95761e2c0d53f88159913f7fef021b817f85ef1c3ac669a5544e8fe6cc5212322f72104a827942483fa3", 0xc1}], 0x1, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}], 0x20, 0x20000010}, 0x40) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000900)={'\x00', 0x200, 0x2, 0x6}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0/file0\x00'}) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000009c0)={{r6}, "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"}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x8c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xc0, 0x1}, {0x40}, {0x81, 0x6}, {0x2, 0x1}], "01a2623c9836353b"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8, 0x7}, {0x8, 0x58}, {0x1, 0x3}, {0x81, 0x4}, {0x4}, {0x2, 0x6}, {0x6, 0x5}, {0x8, 0x1}, {0x7, 0x6}, {0x8, 0x6}, {0x1f, 0x5}, {0x3, 0x1}, {0x7, 0x2}, {0x68, 0x6}, {0x5, 0x5}, {0x1f, 0x4}, {0x9, 0x5}, {0x3}, {0x5, 0x2}, {0x7f, 0x3}], "4e7f5808de2c5c4e"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{}, {0x8, 0x7}, {0xf8}, {0xa, 0x5}, {0x6f, 0x2}, {0xf8, 0x5}, {0x6, 0x7}], "83b024e950be0bd0"}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40840}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r3, {0xb49}}, './file0/file0\x00'}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001b80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7a05}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x80000) 00:38:25 executing program 6: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1c4bd992ac74590, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x755}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xed0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x420, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11e1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe38}]}, 0x4c}}, 0x40000) r1 = accept$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$vcsn(&(0x7f0000000500), 0x1, 0x10080) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) chdir(&(0x7f0000000580)='./file0\x00') connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000640)={0x1, 0x1, 0x14}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000680)="1923044e3f68dac95746552dde66b28a118d19bce836d9f845c1628e670f16dbc54f485336bc9bc85b3ee5c08efd57cff748ec68e4d9b4f2e6c5816030a8631429a9f6ca7040199e7aa43e6bda417651accbd0eeb46272101329675a8a28c801c0d4ede3ea3e33b25efcc450773ccb8347b173e78532a44316267608346d3fb5f22b735b7402bebee8141e9b28516534e972cccfc358f8ee96772b49b0ae9495952338e358223b5e595cbc71cea7f28e9c60", 0xb2}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/virtio_pci_legacy_dev', 0x600601, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)={0x388, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x144, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4565f554}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56af670a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5463b185}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24936c19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b4ffc04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d866c13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d710908}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2924dc38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5508643a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb96bbc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x579a9b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41e39f30}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74bf1237}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cb9f123}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c3fed3e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf3f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa81b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6114}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6aff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7c8aaf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f6ee94}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46d298a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd472}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2859}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3126}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28738e86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdff3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d89ae5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc259}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58f1b7e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48dbbc67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3279ab08}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73d931e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e4674f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257bb42f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdbb5f0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a0b12b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ca0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4919}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b01c604}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x711c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x479b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x87a021f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ae4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e04cd87}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x138c7754}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76a0781b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2242}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe919}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x20040000}, 0x8011) chdir(&(0x7f0000000d00)='./file0\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x150, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x28014815}, 0x44000) 00:38:25 executing program 3: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x16, 0x1, 0x7, 0x4, 0xa3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x1, 0x2, 0x6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{r0, 0x4, 0x7ff, 0x7, 0x1, 0x0, 0xbb, 0x146b6076, 0x1, 0xfffffffa, 0xfffffffd, 0x1, 0x5, 0x5, 0x20}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, r1, "d760f65e262520100b785fc0df3ea18416a75e7074f3b3aa17a9e51dcfbd1ccba5c96c9e40b5087d9b6e5ed1390b92917c16e340c5d67e2f6fc1d1dbf50c1188a6510980a38c1c24cded704c7fda5939d953522c942f8264974f29567a5fbb63b0e7eb6a5f389a640c3a95b533b97022e2e780fd4e1306f58287ddda0fdcc6bb0f8b5fce1ae08294b1b0b4e758b3f9fd6b20092b8205830fd1e2554a682f0d3305eaa5f5ca6dfd02bb48d1ef7fa905be4a467c4754b51bb4462478f6be22bfe806656c27e91ea6c4dc5eff1d75260ef8aa7e7d7111f5eb340218535765bb5004b6c9f100285b8d3a360aae7e0fff61c645f1fb261d9278a7c278a98784453116", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001140)={r2, r1, "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", "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"}) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002140), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000002180)={{r0, 0x2, 0x1800000, 0x3, 0x1000, 0x7, 0x8000, 0xfffffffd, 0x200, 0x7, 0x4, 0x66907ba3, 0x8, 0x9, 0x1f}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002200)={0x9b, [{r3, r4}, {r0, r2}, {r0, r2}, {0x0, r4}, {r5, r2}, {r5}, {r0, r2}, {r0, r4}, {r1, r4}, {r5, r4}, {r5, r2}, {0x0, r2}, {r0, r4}, {r5, r4}, {r1, r4}, {r0, r2}, {r0, r4}, {r3, r4}, {r1, r2}, {r5, r4}, {r1, r4}, {r1, r2}, {r0, r4}, {r3, r2}, {r3, r4}, {r0, r4}, {r0, r4}, {r3, r4}, {r0, r4}, {r5, r4}, {r3, r4}, {}, {r0, r2}, {r0, r2}, {r3, r2}, {r5, r2}, {r5, r4}, {r0, r2}, {r0}, {r1, r2}, {r1, r4}, {r3}, {r1, r2}, {r3, r2}, {r0, r4}, {0x0, r4}, {r3, r2}, {r3, r4}, {r3, r2}, {r5, r2}, {r3, r2}, {r1, r4}, {0x0, r4}, {r1, r2}, {r5, r4}, {r1, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r2}, {r0, r4}, {r0, r4}, {r0, r4}, {r0, r4}, {r5, r4}, {}, {r3, r2}, {r0, r2}, {r5, r2}, {r3, r2}, {r1, r2}, {r3}, {r0, r2}, {r3, r4}, {r0, r4}, {r0}, {r1, r2}, {0x0, r2}, {r3, r4}, {r3, r2}, {r3, r2}, {r0, r4}, {r5, r4}, {r3, r2}, {r3, r2}, {r3, r4}, {r3, r4}, {r0, r2}, {r5, r4}, {r1, r4}, {r5, r2}, {r1, r2}, {r1, r4}, {r1, r2}, {0x0, r2}, {r3, r4}, {r0, r4}, {r0, r4}, {r3}, {r1, r2}, {r3, r2}, {r0, r2}, {r1, r4}, {r3, r2}, {r1}, {r3, r4}, {r5, r2}, {r5, r4}, {r0, r4}, {r3, r2}, {r5, r4}, {r3, r4}, {r1, r2}, {r3, r4}, {r1, r4}, {r3, r2}, {r0, r2}, {r1, r4}, {r1, r4}, {r0, r2}, {r1, r4}, {0x0, r2}, {0x0, r2}, {0x0, r4}, {r3, r4}, {r5, r2}, {r5, r4}, {r3, r4}, {r1, r4}, {r3, r4}, {r1, r4}, {r0, r4}, {r1}, {r1, r4}, {r0, r2}, {r1, r4}, {r5, r2}, {r0, r2}, {r5, r4}, {r5, r2}, {r1, r2}, {0x0, r2}, {r1, r2}, {r1, r2}, {0x0, r4}, {r0, r4}, {r1, r2}, {}, {r5, r2}, {r0, r2}, {r3, r2}, {r3, r2}, {r5, r2}, {r1, r2}, {r5}, {r1, r2}, {r0, r4}, {r5, r2}, {r0, r4}, {r3, r4}, {r0}, {r5, r4}, {r5, r2}, {r5, r2}, {r3, r2}, {r5, r4}, {r0, r4}, {r3, r4}, {r0, r2}, {r5, r4}, {r0, r4}, {r5, r2}, {r0, r4}, {r5, r4}, {r0, r4}, {r1, r2}, {r1, r2}, {r5, r4}, {r5, r2}, {0x0, r2}, {r3, r4}, {r0, r2}, {r0, r4}, {r3, r4}, {r0}, {r5, r4}, {0x0, r2}, {r3, r4}, {r5, r4}, {r3, r4}, {r1}, {r1}, {0x0, r2}, {r3, r4}, {r1, r4}, {r0, r4}, {r3, r2}, {r5}, {r0, r4}, {r1, r4}, {r3, r2}, {r3, r4}, {r1, r2}, {r5, r2}, {r3, r2}, {r0, r2}, {0x0, r4}, {r5, r4}, {r1, r4}, {r5, r4}, {r0, r4}, {r0, r4}, {r0, r2}, {r1, r4}, {r3, r4}, {r3, r2}, {r1, r2}, {r0, r2}, {r3, r2}, {r3, r4}, {r3, r2}, {r3, r4}, {r0, r2}, {r5, r2}, {r5, r2}, {r0, r2}, {r5, r2}, {r5, r4}, {r5, r2}, {r1, r4}, {0x0, r2}, {r5, r4}, {r1, r2}, {r5}, {r0, r4}, {r1, r4}, {r1, r4}, {r0, r4}, {r1, r2}, {r0, r2}, {r3, r4}, {r3, r4}, {r1, r4}, {r3, r2}, {r3, r2}, {r1, r4}, {r0, r4}, {r3}, {r3, r2}, {r5, r4}, {r5, r4}, {r0, r2}, {r3, r4}, {r5, r2}, {r0, r4}], 0x40, "9d5f798faa6c5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003400)={0x4, [{r0, r2}, {r0, r4}, {r1, r2}, {r5, r2}, {r3, r2}, {r3, r2}, {r5, r4}, {r0, r2}, {r5, r4}, {r3}, {r0}, {r0}, {r0, r2}, {r3, r4}, {r5, r4}, {r0, r2}, {r5}, {r5, r4}, {r1, r4}, {r3, r4}, {r0, r2}, {r3, r4}, {r5, r4}, {r1}, {r3, r4}, {r5, r4}, {r5, r4}, {r5, r4}, {r1, r2}, {r1, r2}, {r3, r2}, {r1, r4}, {r1, r2}, {r3, r4}, {r3, r4}, {r1, r2}, {r3, r4}, {r3, r4}, {r1}, {r3, r2}, {r1, r4}, {0x0, r4}, {r5}, {r0, r4}, {r1, r2}, {r3, r2}, {r3}, {r1, r2}, {r0, r2}, {r3, r4}, {r3, r2}, {r0, r2}, {0x0, r4}, {r3, r4}, {r3, r2}, {r1, r4}, {r1, r4}, {r5}, {r1, r2}, {r3, r4}, {r0, r2}, {r3, r2}, {r0, r4}, {r0, r2}, {r1, r4}, {0x0, r2}, {r3, r4}, {r3, r2}, {r0, r4}, {r0, r2}, {r1, r4}, {r0, r4}, {r3, r2}, {r0, r2}, {r3, r2}, {r5, r4}, {r3, r4}, {r3, r4}, {r5, r2}, {r5, r4}, {r1, r4}, {r1, r2}, {r3, r2}, {r0, r2}, {r3, r4}, {r1, r4}, {r3, r4}, {r0, r4}, {r5, 0x0}, {r1, r2}, {r3, r4}, {r3, r2}, {r3, r2}, {r1, r4}, {r1, r2}, {0x0, r2}, {r1}, {r5, r2}, {r5, r4}, {r3, r2}, {r1, r4}, {r1, r4}, {r0, r2}, {r0, r4}, {r5, r4}, {r1, r2}, {r0, r4}, {r3, r2}, {r3, r2}, {r0}, {r0, r2}, {r5, r2}, {r3}, {r1, r2}, {r0, r4}, {r5, r2}, {0x0, r2}, {r1, r2}, {r5, r4}, {r5, r4}, {r1, r2}, {r0, r4}, {r1, r2}, {r3, r2}, {r3}, {r0, r4}, {r1, r4}, {r5, r2}, {r5, r4}, {r5, r2}, {r1, r2}, {r1, r2}, {r3, r2}, {r1, r2}, {r5, r4}, {r5, r4}, {r3, r2}, {r1, r2}, {r0}, {r1, r2}, {}, {r5, r4}, {r0, r2}, {r0, r4}, {r3, r2}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r5, r2}, {r0, r2}, {r3, r4}, {r3, r2}, {r5, r4}, {0x0, r4}, {r0, r4}, {r1, r2}, {r3, r4}, {r0, r4}, {r5, r4}, {0x0, r2}, {0x0, r2}, {r3, r4}, {r5, r2}, {r1, r2}, {r1, r2}, {r0, r4}, {r0, r4}, {r5, r4}, {r3, r2}, {r5, r2}, {r3, r4}, {r1, r4}, {r0}, {0x0, r2}, {r1, r4}, {r5, r2}, {r1, r4}, {r1, r2}, {r3}, {0x0, r2}, {r3, r4}, {r5, r2}, {0x0, r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r0, r4}, {r1, r4}, {r1, r4}, {r0}, {r1, r4}, {0x0, r2}, {r0, r4}, {r0, r2}, {r1, r2}, {0x0, r4}, {r3, r2}, {r5, r4}, {0x0, r4}, {r0}, {0x0, r2}, {r1, r4}, {r0, r2}, {r3, r4}, {r0, r2}, {r5, r4}, {r3, r4}, {r1, r4}, {0x0, r2}, {r3, r4}, {r0, r4}, {}, {r5}, {r1, r2}, {r0, r4}, {r1, r4}, {r5, r2}, {r0, r4}, {r1}, {r5}, {r0, r4}, {r1, r2}, {r1, r4}, {r0, r4}, {r0, r4}, {r3, r4}, {r3, r2}, {r3, r4}, {0x0, r2}, {r3, r4}, {r5, r4}, {r1, r2}, {r1, r4}, {r3, r4}, {r5}, {r3, r4}, {r1, r4}, {r1}, {r0, r4}, {r1, r2}, {0x0, r4}, {r3, r4}, {r5, r2}, {r3, r2}, {r5, r2}, {r0, r2}, {r0, r2}, {r3, r4}, {r1}, {r0, r2}, {r0, r4}, {r3, r2}, {}, {r1, r2}], 0xc0, "a1bbff8193ef0c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000004400)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004600)={r2, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005600)={0x4, [{r3, r2}, {r3, r2}, {r0, r4}, {r3, r2}, {r3, r2}, {r0, r4}, {r1, r2}, {r0, r4}, {r5, r4}, {r3, r4}, {r1}, {r3, r2}, {r0, r2}, {r0, r4}, {r5, r2}, {r0, r2}, {r3, r4}, {r3, r2}, {r3, r4}, {r0, r2}, {r5, r4}, {r3, r2}, {r0, r4}, {r0, r2}, {r3, r2}, {r1}, {r0, r4}, {r1, r2}, {r1, r2}, {r0, r2}, {0x0, r2}, {r1, r4}, {r1, r2}, {r0, r2}, {0x0, r4}, {r1}, {r0, r4}, {r5, r4}, {r3, r2}, {r3, r2}, {r5}, {r1, r4}, {r1, r4}, {r5, r4}, {r1, r4}, {r1, r2}, {r3}, {r0, r4}, {r1, r2}, {r1, r2}, {r1, r2}, {r0, r2}, {0x0, r4}, {r0, r4}, {r5, r4}, {r1, r2}, {r1, r2}, {r1, r2}, {r1, r4}, {0x0, r2}, {r3, r2}, {0x0, r4}, {r3, r4}, {r3}, {r1, r4}, {r5}, {r5, r2}, {r1, r2}, {r1}, {r3, r4}, {r0, r4}, {r0, r2}, {r5, r4}, {r1, r2}, {r3, r4}, {r3, r2}, {r1, r4}, {r3, r4}, {r5, r2}, {r5, r4}, {r3, r4}, {r3}, {r1, r2}, {r1, r4}, {0x0, r4}, {r1, r2}, {r0, r4}, {r0, r2}, {r0, r2}, {r3, r2}, {r0, r4}, {r0, r4}, {r1, r4}, {r0, r4}, {r1}, {r5}, {r5, r2}, {}, {0x0, r4}, {r3, r2}, {r0, r4}, {r1, r4}, {0x0, r4}, {r5, r4}, {0x0, r4}, {r0}, {r5, r2}, {r5}, {r5, r2}, {0x0, r2}, {r1, r2}, {r3, r4}, {r0, r4}, {r1, r4}, {r0, r4}, {r0, r2}, {r1}, {r5, r4}, {r3, r4}, {r0, r4}, {r5, r2}, {r5, r4}, {r3, r4}, {r3, r2}, {r3, r2}, {r5, r2}, {r5, r4}, {r0, r4}, {r1, r4}, {r3, r4}, {r1, r4}, {r5, r2}, {r3, r4}, {r5, r2}, {r5, r4}, {0x0, r4}, {r5, r2}, {r0, r2}, {r1, r4}, {r3, r2}, {r0, r2}, {r1, r2}, {r0, r2}, {r3, r2}, {0x0, r4}, {r0, r4}, {r1}, {r1, r2}, {0x0, r2}, {r0, r2}, {r1, r2}, {r5, r2}, {r3, r2}, {r1, r4}, {r5, r2}, {r0, r2}, {0x0, r2}, {r1, r4}, {r0, r4}, {0x0, r4}, {r5, r2}, {r1, r2}, {r5, r2}, {r3, r4}, {r3, r2}, {r5, r2}, {r0, r2}, {r3, r2}, {r1, r2}, {r5, r2}, {r5, r2}, {r1, r2}, {r1, r2}, {r5}, {r5, r2}, {r1, r2}, {r1, r4}, {r3, r2}, {r5, r2}, {r1, r4}, {0x0, r2}, {r5, r2}, {r1}, {r5, r2}, {r3, r4}, {r0, r2}, {r1, r2}, {r1, r4}, {r5, r4}, {r0, r2}, {r5, r4}, {r0, r4}, {r3, r4}, {r1, r4}, {r1, r2}, {r0, r4}, {r1, r4}, {r0, r2}, {r5, r2}, {0x0, r4}, {r5, r4}, {r1, r4}, {r1, r4}, {}, {r5, r4}, {r5, r2}, {r5, r4}, {r0, r2}, {}, {r0, r2}, {r0, r2}, {r5, r4}, {r1}, {r0, r4}, {r5, r4}, {r3, r4}, {r5, r2}, {r3, r2}, {r0, r2}, {r1, r2}, {r0, r4}, {0x0, r4}, {r0, r4}, {r3, r4}, {r0, r4}, {r5, r4}, {r3, r2}, {r5, r4}, {r5, r4}, {r1, r2}, {0x0, r2}, {r3, r4}, {r5, r4}, {r3, r4}, {r0, r2}, {r5, r4}, {r3, r2}, {r5, r2}, {r0, r4}, {0x0, r4}, {r1, r4}, {r3, r2}, {r3, r2}, {r5, r4}, {r1, r2}, {r0, r2}, {r0, r2}, {r3}, {r1, r4}, {r1}, {r3, r4}, {0x0, r4}, {r5, r4}, {r0, r4}, {0x0, r4}], 0x1e, "80998b3e5abe61"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000006600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000006800)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006a00)={{r0, 0x10001, 0xa35, 0x5, 0x0, 0x1, 0x4, 0x1, 0x6, 0x1ff, 0x2, 0x3, 0x7, 0x7f, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007a00)={0x8, [{r3, r4}, {r1, r4}, {r5, r4}, {r1, r2}, {r5, r4}, {r1, r4}, {r5, r4}, {r1, r4}, {r1, r2}, {r3, r2}, {r1, r2}, {r1, r2}, {r5, r4}, {r1, r2}, {r1, r2}, {r1, r2}, {r0, r2}, {r1, r4}, {r0, r2}, {r3, r4}, {0x0, r4}, {r5, r4}, {r3, r2}, {r5, r4}, {r3}, {r0, r4}, {r0, r4}, {r3, r4}, {r1, r2}, {r1}, {r1, r2}, {0x0, r2}, {r3, r4}, {r0, r4}, {r1, r4}, {r3}, {r3, r4}, {r3, r2}, {r0, r4}, {r1, r4}, {r5, r4}, {r3, r4}, {r5, r4}, {r3, r2}, {r1, r2}, {r5, r2}, {r5, r4}, {0x0, r2}, {r1, r4}, {r0, r4}, {r0, r2}, {r5, r2}, {r0, r4}, {r5, r2}, {r5, r4}, {r0}, {r5, r2}, {r1, r2}, {r0}, {r0, r4}, {r5, r2}, {r3, r4}, {r3, r2}, {r0}, {r3, r2}, {}, {r0}, {r3}, {r3, r2}, {r5, r4}, {r5, r2}, {r3, r2}, {r0, r4}, {r5, r4}, {r1, r2}, {0x0, r4}, {r0, r2}, {r5, r4}, {r3, r2}, {r3, r2}, {r3, r4}, {r3, r2}, {0x0, r2}, {r0, r2}, {r5, r2}, {0x0, r4}, {r0, r2}, {r3, r2}, {}, {r0, r4}, {0x0, r4}, {r1, r4}, {r3, r2}, {r1, r4}, {r3, r4}, {r5, r4}, {r3, r2}, {r3, r2}, {r0, r2}, {0x0, r4}, {r5, r2}, {r1, r4}, {r3, r4}, {r5, r4}, {r0, r2}, {r1, r4}, {r5, r2}, {r1, r2}, {r3, r4}, {r3, r4}, {r5, r2}, {r0, r4}, {r5, r4}, {r3, r2}, {r3, r2}, {r1, r2}, {r0, r4}, {r0, r4}, {r0}, {r0}, {r0, r4}, {r1, r2}, {r5}, {r1, r2}, {r1, r4}, {r5, r4}, {r0}, {r5, r4}, {r3, r2}, {r1, r4}, {r0, r4}, {r1, r4}, {r1, r2}, {r0}, {r5, r2}, {r1, r4}, {0x0, r2}, {r1, r2}, {r3, r4}, {r5, r2}, {r3, r4}, {r3, r4}, {r0, r4}, {r5, r4}, {r1, r4}, {r3, r4}, {r5, r4}, {r0, r2}, {r0, r4}, {r5, r2}, {r1, r2}, {r1, r4}, {r1, r4}, {r0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r1}, {r1, r2}, {r0, r4}, {0x0, r4}, {r3, r4}, {r0, r2}, {r0, r2}, {r5, r2}, {r5, r2}, {r3}, {r0, r2}, {r5, r4}, {r5, r4}, {r0}, {r0, r2}, {r1, r4}, {r0, r4}, {r5, r4}, {r1, r2}, {r0, r4}, {r5, r2}, {r5, r4}, {r0, r4}, {r1, r4}, {r0, r2}, {r3, r4}, {r1, r2}, {r3, r2}, {r1, r4}, {r1, r2}, {r3, r4}, {r1, r4}, {0x0, r4}, {r3, r4}, {r1, r4}, {r5, r2}, {0x0, r2}, {r5, r2}, {0x0, r2}, {0x0, r4}, {r1, r2}, {r0, r2}, {r3, r4}, {r3, r4}, {r5, r4}, {r0, r4}, {r5, r4}, {r1, r4}, {r1, r2}, {r0, r4}, {r5, r2}, {r3, r4}, {r0, r4}, {r1, r2}, {r0, r2}, {r0, r4}, {r3, r4}, {r5, r2}, {r0, r4}, {r5, r4}, {r3}, {r1}, {0x0, r4}, {r1, r2}, {r3, r4}, {r3, r2}, {r1}, {r0, r2}, {r5, r2}, {r1, r2}, {r5, r2}, {r0, r2}, {0x0, r2}, {0x0, r4}, {r1, r4}, {r1, r2}, {r0, r4}, {r5, r4}, {}, {r1, r4}, {r0, r4}, {r1, r4}, {r0, r2}, {r1, r2}, {0x0, r4}, {r1, r4}, {r3, r2}, {r3, r4}, {r3, r2}, {r0, r4}, {r5, r4}, {r5, r4}, {r5, r4}, {r5, r4}, {r0, r4}, {r3, r2}, {r1, r2}, {r1, r2}], 0x7, "64a3265f284fcb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008a00)={0x4, [{r5, r4}, {r0, r2}, {r3, r4}, {r5, r2}, {r1, r4}, {r1, r2}, {r3, r4}, {}, {r5, r2}, {r0, r2}, {r3, r4}, {r0}, {r3, r4}, {r1, r4}, {r0, r4}, {r1}, {r3, r4}, {r0, r4}, {0x0, r2}, {r0, r4}, {r0, r4}, {r5, r2}, {r1, r4}, {r5}, {r5, r2}, {r3, r4}, {r1}, {r0, r4}, {r0, r4}, {r1, r4}, {r0, r4}, {r0, r4}, {r0, r4}, {r5, r4}, {r0, r4}, {r5, r2}, {r1, r2}, {r3, r4}, {r0, r4}, {r3, r4}, {r3, r2}, {r5}, {r0, r4}, {r1, r4}, {r5, r4}, {0x0, r4}, {r0, r2}, {r1, r4}, {r5, r2}, {r3, r4}, {r1, r2}, {r1, r2}, {0x0, r4}, {r5, r4}, {r3, r2}, {r0, r2}, {r0}, {0x0, r2}, {r1, r2}, {0x0, r4}, {r0, r4}, {r0}, {r0, r4}, {r0, r2}, {r0, r4}, {r3, r4}, {r1, r4}, {r5, r4}, {r0, r2}, {0x0, r2}, {r0, r2}, {r1, r2}, {r0, r4}, {r1, r4}, {r3, r2}, {r1, r2}, {r0, r4}, {r0, r2}, {r0, r4}, {r1, r2}, {r0, r4}, {r3, r4}, {r5, r4}, {r5, r4}, {r0, r2}, {r0, r4}, {r3, r4}, {r5, r2}, {r1, r4}, {r0, r2}, {r1, r2}, {r3, r2}, {r3, r2}, {}, {r0, r4}, {r0, r2}, {r1, r4}, {r3, r2}, {r3, r4}, {0x0, r2}, {r0, r4}, {r1, r2}, {r1, r2}, {r1, r2}, {r5, r4}, {r1, r2}, {0x0, r4}, {r3}, {0x0, r2}, {r1, r2}, {r1, r2}, {r3, r4}, {r3, r4}, {r5, r2}, {0x0, r2}, {r5, r4}, {r3, r2}, {r3, r4}, {r3, r2}, {r0}, {r0, r4}, {r0, r2}, {r5, r4}, {0x0, r2}, {r0, r2}, {r3, r4}, {r3, r2}, {r3, r2}, {r1, r4}, {r5, r4}, {r5, r4}, {r0, r4}, {r1}, {r1, r2}, {r5, r4}, {r3, r2}, {r5, r4}, {r1, r2}, {r1, r4}, {r3}, {0x0, r4}, {r5, r4}, {r5, r2}, {r5}, {r3, r4}, {r5, r2}, {r1, r4}, {r3, r2}, {r1, r4}, {r1, r4}, {r3, r2}, {0x0, r2}, {r1, r4}, {r0, r2}, {r1, r2}, {r1, r4}, {r5, r2}, {r3, r4}, {r3, r2}, {r1, r2}, {r0, r2}, {r5, r2}, {r3}, {r0, r2}, {r0, r4}, {r3, r4}, {r0, r4}, {r0, r2}, {r1}, {0x0, r2}, {r0, r4}, {r5}, {r3, r4}, {r1, r4}, {r5, r2}, {r0, r4}, {r1, r4}, {r3, r2}, {r5, r4}, {r3, r2}, {r1, r4}, {r5, r4}, {0x0, r4}, {r3, r2}, {r0, r4}, {r1, r2}, {r5, r4}, {r3, r2}, {r0, r4}, {r3, r4}, {0x0, r4}, {r1, r2}, {r1, r4}, {r5, r2}, {r5}, {r0, r4}, {r3, r2}, {r3, r2}, {r5, r4}, {r5, r2}, {r1, r4}, {r1, r4}, {r0}, {r1, r2}, {r5, r4}, {r5, r4}, {r3, r2}, {r5, r4}, {r0, r2}, {r3, r4}, {r1, r2}, {r3, r2}, {r1, r4}, {r3, r2}, {r1, r2}, {r3, r4}, {r3, r4}, {0x0, r2}, {0x0, r4}, {r1, r4}, {r5, r2}, {r1, r4}, {r3, r2}, {0x0, r2}, {r1, r4}, {r3}, {r1, r4}, {r3, r2}, {r0, r2}, {r1, r2}, {0x0, r4}, {r0, r2}, {r3, r4}, {r0, r4}, {r1}, {r5, r2}, {r3, r4}, {r3, r4}, {r0, r2}, {r1, r4}, {r3, r4}, {r5, r2}, {r1, r2}, {r0, r4}, {r0, r2}, {r0, r2}, {r1, r2}, {r5, r4}, {r3, r2}, {r3, r4}, {r0, r4}, {r1, r2}, {r0, r4}, {r1, r4}, {r1, r2}], 0x16, "88c765662f21a4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000009a00)={r4, r0, "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", "d7577b84e668f0acfaf1ef12fe3588754e56bc1706dd2c45941a34d371b8a1a33243d570eb7add8d91c02a298be469e0e91450016f8b45eb9b9ba6d29d10e01fc3b73e77ea1933026565b9f117a85b55fc9ac22e79a0e98c2acaf45a258595c1913a2b593ed6755dddb1398e27d3b3450f883094303bc436e25699333bdf188325c0dac6e272f8ed466db4512051cfea3704ded22ba5c5fdd1e3395f39de4abeda319377fdc712a2095bd3494f6c180602ad3ea927d3ed7db920a3cf2a21102919b6cbad96d0ed88b54700700d200a2f1ebd4ffbb14d29c5a9eb4904faf42d6b7ac8a30c895fbce6e2caf441022ed6cb11f54ddfdf0a12c48431b28be2ca9b5f0c2a22b01eb2a7024e45d7bf8792f205876698892cda0eee6570dc445dce65f3fd285f0d4adc649ca3e0776b3ea49b46185edb93ede0594e07aa5487fb5218c7d4799d1867d5bb668f577b04670b50a97afae5a65cfbd7f3e2662d8a7945375116f7a3e8b0b0a7a1e08f6a6f2b12218d173bf2d1c253c03793e574547adf5faa46bf0186693525d27480ef393c451a5353226cd4c794876dd2cedc2e8a70b31f829f9e53455d7b248f717fd30c3d1eee452246b09c4101a40677a6de1934534fa6f4a43729f284be82e98bfd62470bab13e53f0434a0b7869d413d4596eac063cc76749d1800101e93a96daa9ffe149550f7d36d63717514f7ad8dc5702444b6abf41ebef8f57711d3202f28f2652ab6f686857afb67b2a83ce499a8be2db5f6b7ceba017847bb50f25828eb9b0d791f6e98f3b185183b6ad45671efaf9811e8230b1ff5a9388a313874521a96464dd5c5fc0a46e4b12bb8754fb42905d1e62700f57ecc0e4ca7d2e5d1782bc002bb85a8d20fa9c6dcf63cbb1562db28ccb654d1ecabde4ca0e051f8bd0fff39e4c049be96c17011ae20c06e1a528d491c64dd0b929a56edfb96edd38bbff4d7e5c5afb945ce17f32feaa5ef83cca558a1ffaf28707b8587129ede564005ceb2cd7a62d8d789d473ee2967141c1cc7dd7bcb306cedac21772c8dfdf451935e9666d5f867aa48a042ddfde201cc09a689e9bcefc7e46ed03575137e70caf7dc31882a4663ea9d4592e573303277ef5a4a038f436cc2331c4ae9ef68f03c55a7c9c85dd4b407c96b4ea20c643c3c5d22e0c979f4e711a57d1042ff1e35c898741d856423de70ebfe00bbfd0f63eb0035e432a55affe7ac28f88bb379fe4c0f3cbcf8d76e8e997eaba61d3b0d42c216d6f925f5b8ae07e059862a78991c3380a180c313ceb3ac8099bea5eee8fc4c440a5252ab94c25baf2845cd14b018ea1eba989ac6ded8f138f652c5ef79540016393a0e37dba75c2d7ec89ad0ca355af3f7b7792f16ea1b423ed8474931c4cb9480ad1177c022d95df20a98c09de70456580cf8cf1e53d8c273b6ff9a5fcbd17f1dce4a85579805fe8dfebe028c53809f15e4a7d701110e940b11361a19f516a9111184d8d13b0821c63816a3f61abe7552a255afa228abc768bd02708caa2d81eb928a2b294a29a5e26b5ec09f0da9e6fc20f45fc9ecba7f09ee8557f6ccc28e0898623c0f17fc2fe3f477cdd02f9213f39b0ee89ce18562a88fab34ef5d98f5cd6972ee8f3d489af7f2616d2e666badb2e473446451a1b86671c2954cef8e222f3991ac36dad2a129d249d7275c4f66db51a0277190cda193d971858900cc14238b7fc2c6d456bd4743fa97d44bcd2bd63bf593dfaeb606f35abed68ce098361bc46dcd010396f98edfb99941eed3cbce646d5a3657e34a6fa02b592fb83a91a07571d5dab1ed2fb06e4cec6deb8bc5560294f93f9c661df1bce864f2101f26f8b7e35700728d931c1daf157159fbe45cde8ce7b1a8c5dc95b4617db813368552cd6d861b90d4cd3f944aff64de3d8b1852678293d493c9e8c06940c16c165070e6dde327ad5b8ab47e0204c7c1c39fc091c2a9a0f9b441c1c967a8ff481eed5ef62a51545f15a2ac927f13242cb23fbe96c646a29606b3e89afec6a96ac38e8d7b5d682c75f71fc9a970e0ca15870340b59db58aa6c6d1a2e5cf583a125d854b0df7fa27593df59a1f8dea84d60f08d01b62ee505f530263647e07da9661a325fb31ae41e68e0f8c1ed257f3bf6039b6dfd73c80ae8330b834cda1968d33de1d2010021d92070c903cb5db7119d6f42a3a3b4faecbe9e481755dc6416e01c400643a6fa19ccae4e58c8db3994c0317dd71e7f9421cb5cc6b6466e1da3cee7b926d564d098a05b7e62d75ff65bd698f924b9c8cd9f45247833e2eaacb355e5a5a62d7bf1a99d221c8a6c3f694420c2c3418bedef53542669ceb991cf9de6bd4b1456994e4a81b7b79d86d5dc2bebd708fb3a6cd7aff267d5fae020bbd51ae9ed248c2f091cb3ce91f475a9ed35351c0af81db2754e6f5000e4e0067ac8da4909ba2f2adcc87d5aac519b2a087cd26502059f593dbadbbe68545547d471ccbdd71420af22b98fa4bf4c5d2ac6d45431388983f9500e39ff5814fb31f4782e19073488c0e175350ad02020bf5fde5f40f2fbd488292ea349be501c23fdb3d2dfa80a9fc0224058830277b0c32110e99d700f6f8191e57a2bd3fa362199331831edc4b3ee8fdd81643ab25fea7d0ae07bde000c88ca5edd574581287a4b7a04f09050321763dc72303b6d02b9c9556fbb45dee5c175b81b6c4ddb00ab506b46804e3176fbf5183c95f834c010a76f5c3c7b23e2c1b3ca985b030db552670f943103efd39c15e4ecc6511aaae66eafaddc6f139cb55c5249524a988871c0beaa3c1a68c6502d5b071a97f1053c829702d64215e4b93a781c897732dc1b2e8a6ba84474bab4af3f1506878045878a9fa5b8a733889ad88324ce2e5f38b7b1731d3d18ee6006b0af702689ef22f7e34ce85224611fe17b5dd24f293d15a45075b6a3f1d27b86fdbd0dfcfba73eb4615eb45fe16e2974d627807ec95a683e6c872b1bed231a43900ac672fdc11fa56d8f46b39fdb487bf968109ce7879c69435038c25ddf002e51facf965b10eeef8bd8e9479444053cf4227aba57813966c0a961bfb19975dfeb326659b506a64a4020acc4676ca11b1db064f35c3e92ddb4764715635088b36a641616cdea5dabbe3da89d65bdb8912b5b19550a440547a9b48553829c8f8e5ef97455dca6c7f1c5e1716d7d9646b5b3818160e95182c4da79444dfa98bf2303bc2fd426fe08a8371a5174938ed192549196eaf177a1016ca57992ed335281b79c41b6b293f915fcf68f18253690d5552fff710b79f59dc0cd85f20c439beca9e8b87ea0b4671e2122eac8b9812bb941d97b665140ff03363e1c8b74121d4c3e55cc3fbb16753f02c0c85395712c6a41d9fa2e97e8f3142d8ba85de828ac29e12e62e0bd1836ec4792913bce2257395d05347df66744dc935eb881422404277d4ca57d3208545a77aa46e1cf112b17b5655e4a53eb384f8d68528a891b5b30e8af14afb5ac191fd894e225156fd9530237bb6ba7e6549915b32e38ed97c52c7dad9b44c20cfdde9d197fdb32686e05466a55b230ed52285d0c71cfaef4823bcde01779a5a9623a2426b5bf71dd5a62edac0732d1ec507fb7cb4b5564671af7773167f7f59c6e0fa11a81e8a679e8aee3f0ee8c5f4b15c9c497229970fb86ce305c4a977210a68834c393d807e10cc654c6722fb17ccf85a89cdb3f4d7445dae856dff2f6a6d87992ebe6c3bf0cbce5df5313ea8ee3ce36a2200dd131f587ed19c1f0741dbae0e66105edcccef80a1777c37d8c1dd2cc9761fe46930e49a954e65af22025251bb63b57bea9ff7ba8ea5efdbb7ed7aa46b0e192c63414d964cb128bd85c0b639095dec41bf265c1874498f93c0c2742055c7011673ff4258e3b4dd1de068c86c5e071ff0ab28ce2c4b94ee857e2c5fb63ce780ed92174a8484937acc40ab8e737a258f9d0d92c500f9ffc32d373a8487716a07b4c19000a90c4c703b2c52d2f880ead5068b1131d0846529096624c0ae407c4366e0475360847a85856cb33273cebab4604902fb7a14a4fb1cd23f904d5710179018e60c7140082849a991dca2506affa116ebe2f069a6c8f31d16a97a8452f1c7ec3f7018e64722119c68e8809bb2d31383307d2daed0d19430bfe0358a1a3f6f7fa105ae4b3f020421e3074f0edca4cb7001439f2eb3e51c15371142851e457d332cc0cc7e7301b3d66854ce95981a9e65ba53143b6951cba6044fe87be217722041b01fb78730be9f9146e2e4cff114d35625b5edb30824fc47dc153693f3a805ce6911a41f5f46599fb1a55eb68cee098429fc00dae95e717f5e126b50aab8459e47780f83f00d2991fc1685fbb92906178e95d930c826f5abb81c89dc1db994648d84975e3edd5587f39d971213401a06ce33b4ea1fe1a97b8955f99e82d05b394b1f37f2a673b62cd5b3f09a7b738836bcb39f1ac89c76c756e39ecd1fb5f75c5c9168ddbd477377dc8a7595fa0f5154defb0726560bd7911a451ce524fcaa92e9e911b4957b0b51c949b8d7537cf0fdb1d21397a6250039b000a998a957bf4746a04db420e44b7fa599dcb3ddb1b923f78e2a74a5405cc5a53738b798f7b28513d1e5d788590c82b25d4e8c40f43e10c2519634be08807cbd0f5804b35a45b7f0bb0453632b264e989878eb0fdd48fd89f7b694fb1633d3431db377e2ef2f571a75ae28986e1e28b8687057926adfa1b7bbc29f17b1d09db252dd86112d294870714ab74da88fbe181623a9ccc9e16291d91886e4bc0ab53d2f8518ffa557658a52c62fb7608d37ee037a893c8f622039451efa20ddae3ab4471ef74e3c0388dfc8ff0f55f5ee49c0d6ce74d3aac6292de1f691e6246b33251d06b9fcda57a5b562758cabc2bf0a04e8ffd1456effa60cfd8e0dd067ba9b9f2059d0686c62fd6ff1da3ce150b6dcdc016aa839bf42a237af4715a73efbf5fa29ebcd7acaf12a3cddd64c8642a8454541e90cca1b2830b3c1a2b76bb918edb73d778dfbbf9544be0d919939e0ec88cbccebfdcf235c88561f6eea6f786238911eb6bd69420908ca076ab747d27f88a1d8b6ce1648aa836b55defff43f726e10344a87cab3ab90c06e43f25eb64316809621ce9be4834ffe5d2552db49ef6cd34eaa1752d2984a7335f977cd3e5bbb5b9be61106082a80618a2daf8e29dfec4a59542441812daa9949c80f08496faa503942d7215454921db9f8c7364ba1a7654ab3eb2e670e54adc43f346e3cab5fd1bd2f1af916e125d8694d956e543e485ffd8781a1a1a74ac544f035808794904f8fbbd443f0a21eb00e0ba3d958180cc07ace895e311c9f33a08d045d1ab5d77f70bfe5ddcc1ecf2643032c585dd3c38a62270d0874ae121ac4753732770ae2367015cb09ecbd4717d2a537be"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000000aa00)={{r5, 0x4, 0xffffffffffffff01, 0x62a, 0x1, 0x1f, 0x7f, 0x1, 0x7fffffff, 0x954, 0x80, 0x8001, 0x818e, 0x100000000, 0x40}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000006b240)={0x10000, [{r5, r4}, {r3, r4}, {r7, r4}, {r1, r4}, {r0, r8}, {r1, r4}, {r0, r9}, {r0, r2}, {r3, r2}, {r0, r2}, {r1, r10}, {r11, r4}, {r3, r4}, {r1, r2}, {r12, r13}, {r0, r14}, {r15, r4}, {r16}, {r17, r18}, {r19, r4}, {r3, r2}, {r20, r2}, {r1}, {0x0, r4}, {r3, r2}, {r5, r4}, {r0, r2}, {}, {r0, r2}, {r0, r4}, {r3}, {0x0, r4}, {r1, r2}, {r0, r4}, {r3, r2}, {r1, r2}, {}, {0x0, r2}, {}, {r5, r2}, {r5, r4}, {0x0, r4}, {0x0, r2}, {r1, r2}, {}, {}, {}, {r1, r4}, {r3, r2}, {r1, r2}, {r3}, {r5, r4}, {r0, r4}, {r5, r2}, {r5}, {}, {}, {0x0, r4}, {r0, r2}, {r3, r2}, {r1, r2}, {r5, r2}, {0x0, r4}, {r3, r4}, {r3, r4}, {}, {r5, r2}, {r3}, {r5}, {r0, r4}, {r5, r2}, {r1}, {r5, r4}, {r1, r4}, {}, {0x0, r2}, {r1, r4}, {r3}, {}, {r3}, {0x0, r2}, {}, {r0, r2}, {r1}, {0x0, r2}, {r1, r2}, {0x0, r2}, {0x0, r4}, {0x0, r2}, {0x0, r2}, {0x0, r2}, {r5, r4}, {r5}, {}, {r5}, {r3, r4}, {r0, r4}, {}, {r1, r4}, {0x0, r4}, {r3, r2}, {r1, r2}, {}, {r5, r2}, {}, {}, {r0}, {0x0, r4}, {}, {r5}, {r1, r4}, {0x0, r2}, {0x0, r2}, {r0, r4}, {r1}, {r0, r4}, {r5}, {}, {0x0, r4}, {}, {r1}, {r1, r4}, {r0, r4}, {0x0, r2}, {0x0, r4}, {r0}, {0x0, r4}, {0x0, r2}, {}, {r3}, {0x0, r4}, {0x0, r2}, {r3, r2}, {r0, r2}, {}, {}, {r3}, {0x0, r4}, {0x0, r2}, {r0, r2}, {r0}, {r3}, {}, {r3, r4}, {r3, r4}, {r5, r2}, {r5, r2}, {}, {r5, r2}, {0x0, r4}, {r3}, {0x0, r4}, {r3, r2}, {r1}, {r3}, {r1}, {}, {0x0, r2}, {0x0, r2}, {r3, r2}, {r1}, {0x0, r4}, {r5, r2}, {r5}, {r5, r4}, {r5, r4}, {}, {0x0, r2}, {0x0, r4}, {r1, r4}, {0x0, r4}, {r1}, {r3, r2}, {0x0, r2}, {r0, r2}, {0x0, r4}, {r1}, {r3, r2}, {r1}, {0x0, r2}, {0x0, r4}, {r0, r4}, {r1, r4}, {0x0, r2}, {r1}, {r3}, {r5, r2}, {r3, r4}, {}, {r5}, {}, {r1, r2}, {r5}, {0x0, r4}, {r5}, {r5}, {}, {}, {r1}, {0x0, r2}, {0x0, r4}, {r0, r2}, {}, {r1}, {r1}, {0x0, r4}, {r1, r4}, {r3, r4}, {r1, r2}, {r0, r2}, {r5}, {r3}, {0x0, r4}, {0x0, r2}, {}, {r3}, {0x0, r2}, {0x0, r4}, {r1, r4}, {}, {r0}, {r1, r4}, {}, {0x0, r4}, {}, {0x0, r2}, {r3}, {r0, r2}, {r5, r4}, {0x0, r2}, {r3}, {r1, r4}, {}, {r1, r4}, {r5, r2}, {r5}, {r5, r2}, {0x0, r2}, {0x0, r2}, {r5, r4}, {r5}, {r0, r2}, {r0}, {r0}, {r1, r4}, {0x0, r4}, {r0}, {r1, r4}, {r3, r4}, {r0, r2}, {r5}, {0x0, r4}, {}, {r1, r4}, {r0, r4}], 0x80, "98df9f676c29d0"}) [ 87.634569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.637744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.643080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.648313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.649452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.650283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.653263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.654969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.656925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.658782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.659365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.664785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.664830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.672056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.673272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.711144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.722779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.727267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.728942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.736809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.740809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.742988] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.744914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.753125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.756318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.756336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.761396] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.765817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.766471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.772078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.783001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.785800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.792641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.798532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.799302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.809290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.810686] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.818860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.820921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.837958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.722052] Bluetooth: hci2: command tx timeout [ 89.722060] Bluetooth: hci1: command tx timeout [ 89.722245] Bluetooth: hci0: command tx timeout [ 89.785650] Bluetooth: hci3: command tx timeout [ 89.850063] Bluetooth: hci5: command tx timeout [ 89.851020] Bluetooth: hci7: command tx timeout [ 89.851053] Bluetooth: hci4: command tx timeout [ 89.913674] Bluetooth: hci6: command tx timeout [ 91.769921] Bluetooth: hci0: command tx timeout [ 91.770866] Bluetooth: hci2: command tx timeout [ 91.771507] Bluetooth: hci1: command tx timeout [ 91.833652] Bluetooth: hci3: command tx timeout [ 91.898549] Bluetooth: hci4: command tx timeout [ 91.898817] Bluetooth: hci5: command tx timeout [ 91.898957] Bluetooth: hci7: command tx timeout [ 91.961589] Bluetooth: hci6: command tx timeout [ 93.817690] Bluetooth: hci1: command tx timeout [ 93.818062] Bluetooth: hci2: command tx timeout [ 93.818189] Bluetooth: hci0: command tx timeout [ 93.882519] Bluetooth: hci3: command tx timeout [ 93.946523] Bluetooth: hci5: command tx timeout [ 93.946928] Bluetooth: hci7: command tx timeout [ 93.947320] Bluetooth: hci4: command tx timeout [ 94.009552] Bluetooth: hci6: command tx timeout [ 95.865532] Bluetooth: hci0: command tx timeout [ 95.865658] Bluetooth: hci2: command tx timeout [ 95.865989] Bluetooth: hci1: command tx timeout [ 95.930547] Bluetooth: hci3: command tx timeout [ 95.993573] Bluetooth: hci7: command tx timeout [ 95.995299] Bluetooth: hci4: command tx timeout [ 95.995780] Bluetooth: hci5: command tx timeout [ 96.057599] Bluetooth: hci6: command tx timeout [ 124.128095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.128829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.318685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.319287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.220063] loop0: detected capacity change from 0 to 8 [ 125.239277] loop0: detected capacity change from 0 to 8 [ 125.345589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.346181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.436741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.437332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.562707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.563299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.757557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.758160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.564545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.565785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.717247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.718399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.850592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.852088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.052517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.053123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.374557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.375154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.459498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.460108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.916684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.917296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.962048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.962619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.310883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.311537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.348174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.348901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.962386] audit: type=1400 audit(1752626359.328:8): avc: denied { open } for pid=3956 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:39:19 executing program 0: r0 = inotify_init1(0x800) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x1) splice(r0, &(0x7f0000000000)=0x1, r1, &(0x7f0000000080)=0xffffffffffffffc0, 0xfff, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) kcmp(r2, 0x0, 0x3, r3, r4) r5 = fspick(r1, &(0x7f0000000180)='./file0\x00', 0x1) kcmp(r2, r2, 0x6, r4, r5) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f00000001c0)="0247fd1a46be309771b121c77368004955b0568751d275de5507f8191624adc4ba6779fe44068418359ab9ce510c528b044904afc4f25175d6d75a431606dbef7c7d16ad5530244d0990b1ca3b991a78a83662812fef0628a1552d05e0f0634d5353d0b2e1f4749eed63838c12095bc9d70d538b7d93a1ca0cf11f1f1f2cd8a893203c78b2bb1e63334561a6284cd7930f8751d4b2a9c0929d955047c090c46a5c092a2c04e37aa6cee235d77668aeffb0f93cb58dace6173d325ebc68a60855775a") ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000002c0)={0x9, 0xe28, 0x4, 0x8001, 0x8, [{0xee34, 0x8, 0x7fff, '\x00', 0x400}, {0x5, 0x6, 0x4, '\x00', 0x400}, {0x7fffffff, 0x80000001, 0x7, '\x00', 0x408}, {0x7fff, 0x9, 0xfffffffffffffffa, '\x00', 0x4000}, {0x4, 0x3, 0xff, '\x00', 0x2806}, {0x3, 0x3800000000000, 0x1200000000, '\x00', 0x1280}, {0x1, 0x3, 0x6, '\x00', 0x1000}, {0x10000, 0x1, 0x8, '\x00', 0xc82}]}) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r6) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000014c0)) [ 139.970159] tmpfs: Bad value for 'mpol' [ 139.971256] tmpfs: Bad value for 'mpol' r7 = syz_mount_image$vfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x3, 0x2, &(0x7f0000002600)=[{&(0x7f0000001580)="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", 0x1000, 0x4}, {&(0x7f0000002580)="a157e6bda5a5ebd7b5d31fcc10859a76f5016fef468d88999c6e2c50db85a75d49feb2ff0832a3702d32dfdb31c863b237820606da36dee4cebc81ec2e36697466", 0x41, 0x5}], 0x80000, &(0x7f0000002640)={[{@shortname_winnt}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt}, {@smackfsdef={'smackfsdef', 0x3d, '**'}}, {@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', 0xee01}}]}) faccessat2(r7, &(0x7f0000002700)='./file0\x00', 0x32, 0x200) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000002740)={{0x1, 0x1, 0x18, r0, {0xf3}}, './file0/file0\x00'}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f0000002780)="6845f976494bd04a195ed159f268d0bd369aeacbe6f27fc38aaa92aa9c8a2b948a1c6244b37917fc7d5754ce11168efd87cd5a68d63860a3436ec4c0c8ee5dc7b738e5362f2d094002200e77f32e19c1306872414b800194f593c83926ecfb89e1aeed96d7ca1e5cc1174da11ce6080de005eb2d445956d4d8127dd0d6f91f39f94ad857617bbdcc72a66541c560b1d68f1711640ac35a1b2bb2a29ac5bfedbb86c0a3314df3e1bb87bf7b2f613dd8e44d18974f5ceb9d1ee8a1307d66496647a3a070e36d55c87cd64a595ec757f6") sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x54, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004000) 00:39:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000280)={0x8, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) 00:39:19 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='devtmpfs\x00', 0x48, &(0x7f00000001c0)='\xc4@^%\x00') 00:39:19 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10b202, 0x108) fcntl$setstatus(r0, 0x4, 0x44000) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)='^', 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000100)={0x1, 0x400, 0xda1, 0x302, 0xa1c, 0xd8df}) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)) openat$cgroup_int(r4, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0xfdef) sendfile(r0, r1, 0x0, 0xfdef) 00:39:19 executing program 5: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x3, 0x1, [0xfffffffeffffffff, 0x1f, 0x100, 0x9, 0xe8], [0x7, 0x6, 0x235b3937, 0x8, 0x1ff, 0x1ff, 0x5, 0x25, 0x1, 0x800, 0x3, 0x7, 0x81, 0x4, 0x5, 0x8001, 0x7f, 0x9, 0xf5f, 0x2, 0x4, 0x1, 0x7fff, 0x101, 0x106, 0x7, 0x4, 0xfffffffffffffe00, 0x3, 0x0, 0x100000001, 0x8, 0x6, 0x3, 0xfffffffffffffffd, 0x2000200, 0xfffffffffffffffe, 0x800, 0x6, 0x9, 0x37, 0x10000, 0x2, 0x3, 0x7fffffff, 0x3f, 0x7291, 0x6, 0x5, 0x7, 0x5, 0x7, 0xca7, 0x0, 0x100000000, 0x4, 0xffffffffffffffff, 0x7, 0x8, 0x7fffffff, 0x5, 0xd85, 0x2, 0x4, 0x5, 0xffffffff, 0x8, 0x2fc4, 0xadc, 0xffffffff, 0x8000, 0x9, 0x5, 0x2, 0x4, 0x81, 0xd1, 0x3ff, 0x0, 0x0, 0x2, 0x8, 0x7, 0x9, 0x3, 0xab9c, 0x7, 0x2, 0x4, 0x5, 0x9aa, 0x0, 0xf1e, 0x80000000, 0x1000, 0x40, 0x200000000010001, 0x5, 0x800, 0x4, 0x4, 0x3, 0x9, 0x4, 0x100000001, 0x4b4, 0x719, 0x8001, 0x1, 0xa5, 0xffffffff, 0x2b2, 0x9c2, 0x8, 0x60268cb5, 0x0, 0x6, 0x1f, 0x6, 0x773, 0x800]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(r0, &(0x7f0000000240), 0x80000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x14, 0x4) r1 = dup(r0) read$rfkill(r1, &(0x7f0000000040), 0x8) syncfs(r1) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) 00:39:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = inotify_init1(0x80000) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xc02d) r2 = memfd_secret(0x0) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r3 = inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x900) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x62ab4b40}}, './file0\x00'}) r5 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, 0x0, 0x209, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5a6f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff0f88}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000380)={0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) fchmod(r6, 0x1e) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xe) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x59, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x15}, 0x0, 0x1f, @broadcast, 0x1, 0x0, 0x1f}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x8, 0x2, @broadcast, 0x46e6, 0x800, 0x9}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x8, @device_b, 0x7fffffff, @device_b, 0x81, 0x3ff, @device_a, 0xd8}}]}, @NL80211_ATTR_SSID={0x20, 0x34, @random="47a19470cb11de8b53034f4456b415a4188829e236f65eb01e29ba18"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb8}}, 0x1) r8 = openat(r6, &(0x7f0000000600)='./file0\x00', 0x8041, 0x4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_IE={0x1e, 0x2a, [@gcr_ga={0xbd, 0x6}, @mic={0x8c, 0x10, {0xcc3, "c20fee50ac83", @short="4f5faae42a61e0a6"}}]}]}, 0x5c}}, 0x1) inotify_rm_watch(r0, r3) unlink(&(0x7f0000000780)='./file0\x00') 00:39:19 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) futimesat(r1, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) 00:39:19 executing program 6: sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x1c4bd992ac74590, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x755}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xed0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x420, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11e1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe38}]}, 0x4c}}, 0x40000) r1 = accept$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$vcsn(&(0x7f0000000500), 0x1, 0x10080) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) chdir(&(0x7f0000000580)='./file0\x00') connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000640)={0x1, 0x1, 0x14}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000680)="1923044e3f68dac95746552dde66b28a118d19bce836d9f845c1628e670f16dbc54f485336bc9bc85b3ee5c08efd57cff748ec68e4d9b4f2e6c5816030a8631429a9f6ca7040199e7aa43e6bda417651accbd0eeb46272101329675a8a28c801c0d4ede3ea3e33b25efcc450773ccb8347b173e78532a44316267608346d3fb5f22b735b7402bebee8141e9b28516534e972cccfc358f8ee96772b49b0ae9495952338e358223b5e595cbc71cea7f28e9c60", 0xb2}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/virtio_pci_legacy_dev', 0x600601, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)={0x388, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x144, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4565f554}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56af670a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5463b185}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24936c19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b4ffc04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d866c13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d710908}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2924dc38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5508643a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bb96bbc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x579a9b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41e39f30}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74bf1237}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cb9f123}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c3fed3e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf3f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa81b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6114}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6aff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7c8aaf}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f6ee94}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4132}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46d298a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd472}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2859}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3126}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28738e86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdff3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d89ae5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc259}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58f1b7e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48dbbc67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3279ab08}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73d931e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70e4674f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257bb42f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdbb5f0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a0b12b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ca0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4919}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b01c604}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x711c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x479b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x87a021f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ae4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e04cd87}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x138c7754}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76a0781b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2242}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe919}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x20040000}, 0x8011) chdir(&(0x7f0000000d00)='./file0\x00') sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x150, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x28014815}, 0x44000) 00:39:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000002440000004d08400300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300000c0070000500030090000000"], 0x34}}, 0x0) [ 139.995136] audit: type=1400 audit(1752626359.328:9): avc: denied { kernel } for pid=3956 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 140.032534] ======================================================= [ 140.032534] WARNING: The mand mount option has been deprecated and [ 140.032534] and is ignored by this kernel. Remove the mand [ 140.032534] option from the mount to silence this warning. [ 140.032534] ======================================================= [ 140.061253] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.062242] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 140.062574] devtmpfs: Unknown parameter 'Ä@^%' 00:39:19 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "f76cfd8125c7c4"}, 0x8, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4000020}) [ 140.070306] loop0: detected capacity change from 0 to 8 00:39:19 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400a2a7", @ANYRES16=r2, @ANYBLOB="040028bd7000ffdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r3 = shmget$private(0x0, 0x5000, 0x1, &(0x7f0000ffb000/0x5000)=nil) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x2000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) [ 140.158625] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 140.217835] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 140.249637] mmap: syz-executor.6 (3983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.262451] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 140.814786] devtmpfs: Unknown parameter 'Ä@^%' 00:39:29 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sync_file_range(r1, 0xf40, 0x6, 0x7) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18d101, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7ff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fsetxattr$trusted_overlay_origin(r5, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendfile(r5, r7, &(0x7f00000001c0)=0x8000, 0x9) fadvise64(r6, 0x0, 0x0, 0x1) sendfile(r0, r6, 0x0, 0x68e146a1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe06575a0a7ec97dc, 0x0) 00:39:29 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x114, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @generic="6bde0e11333856f0f5f538f484553724e9e117cac0963cb074002d3da57a267a758f8862fc368377d11a105151049a29bccee364b0f3da8fbb7501a4886dbd6b87c75be5cdff03b6391e8ae99c521181dd8c4395a06e2801249be51405ce9c1bc9aca79155493496b9da4fc097dbcdf70e5200dc9f52c463826cb830613a05a28110fd0214a53812f7ec2b10ab6a7d0ed62edee95e94e56d1269b9099df975d2675a665883674e7e0eb0dbfe8bd7a19bead93f592e84dc684f99f11b49ae3ceb8c2b5bac13c9a6a0a0c0f585c6cb283c32c1f7fb60037aa4009d54c0748d920e640b00f0c2eb442fc9456c6b9c50b1b88e352a00afb5129feb"]}, 0x114}], 0x1}, 0x0) 00:39:29 executing program 5: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x3, 0x1, [0xfffffffeffffffff, 0x1f, 0x100, 0x9, 0xe8], [0x7, 0x6, 0x235b3937, 0x8, 0x1ff, 0x1ff, 0x5, 0x25, 0x1, 0x800, 0x3, 0x7, 0x81, 0x4, 0x5, 0x8001, 0x7f, 0x9, 0xf5f, 0x2, 0x4, 0x1, 0x7fff, 0x101, 0x106, 0x7, 0x4, 0xfffffffffffffe00, 0x3, 0x0, 0x100000001, 0x8, 0x6, 0x3, 0xfffffffffffffffd, 0x2000200, 0xfffffffffffffffe, 0x800, 0x6, 0x9, 0x37, 0x10000, 0x2, 0x3, 0x7fffffff, 0x3f, 0x7291, 0x6, 0x5, 0x7, 0x5, 0x7, 0xca7, 0x0, 0x100000000, 0x4, 0xffffffffffffffff, 0x7, 0x8, 0x7fffffff, 0x5, 0xd85, 0x2, 0x4, 0x5, 0xffffffff, 0x8, 0x2fc4, 0xadc, 0xffffffff, 0x8000, 0x9, 0x5, 0x2, 0x4, 0x81, 0xd1, 0x3ff, 0x0, 0x0, 0x2, 0x8, 0x7, 0x9, 0x3, 0xab9c, 0x7, 0x2, 0x4, 0x5, 0x9aa, 0x0, 0xf1e, 0x80000000, 0x1000, 0x40, 0x200000000010001, 0x5, 0x800, 0x4, 0x4, 0x3, 0x9, 0x4, 0x100000001, 0x4b4, 0x719, 0x8001, 0x1, 0xa5, 0xffffffff, 0x2b2, 0x9c2, 0x8, 0x60268cb5, 0x0, 0x6, 0x1f, 0x6, 0x773, 0x800]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$rfkill(r0, &(0x7f0000000240), 0x80000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x14, 0x4) r1 = dup(r0) read$rfkill(r1, &(0x7f0000000040), 0x8) syncfs(r1) read$rfkill(r0, &(0x7f0000000200), 0xfffffda9) 00:39:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) shutdown(r1, 0x1) 00:39:29 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) close(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5e}}}}, [@NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2a24cb57641a"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b0e392cf79db"}]}]}, 0x48}}, 0x8044) 00:39:29 executing program 6: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/7, 0x7) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/8, 0x8) 00:39:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='devtmpfs\x00', 0x48, &(0x7f00000001c0)='\xc4@^%\x00') 00:39:29 executing program 7: prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) epoll_create1(0x0) [ 150.013935] random: crng reseeded on system resumption [ 150.020228] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.030459] netlink: 'syz-executor.0': attribute type 338 has an invalid length. 00:39:29 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x404a00, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pwritev2(r5, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) openat$null(0xffffffffffffff9c, 0x0, 0x200000, 0x0) [ 150.065465] netlink: 'syz-executor.0': attribute type 338 has an invalid length. [ 150.073313] devtmpfs: Unknown parameter 'Ä@^%' [ 150.078850] random: crng reseeded on system resumption 00:39:29 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x8000000000, 0xffffffffffffffff, 0x9) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) [ 150.099426] netlink: 'syz-executor.0': attribute type 338 has an invalid length. [ 150.115240] netlink: 'syz-executor.0': attribute type 338 has an invalid length. 00:39:29 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) 00:39:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x200488c0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x9c8}, 0x16, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f00000002c0)="01b2366f8241b55a0a530b0edd2b656e30acaa386de556cbcffee17228edb908f1eeffb261a5371bb1237302c6627d799d52d49ef69132f4c2425c26bf194cec6d2a0d4760bed3f4fc7868117d356d530bd5a3880244c0c7b57a226a964860f59fceb3a1230a8b0bf49735ba08548b76993827ff2d640636dca010be62b68ab4dae9b63840d6213feaf004e6a0782b5ea5502d654583d71af42f16df0170a322dd198b75590f017a07e034a4ee131beff24ae5fb9cb06ea776c2d46666298b02eb626f2b6d8a474428f1d054df64dbe2065d332c028d23e81e5555d393068be8bd639769cec1d0d5f2dd12ff5b971279f4c50f14", 0xf4) fallocate(r0, 0x2a, 0x8, 0xffffffff) socket(0x27, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) dup2(r3, r0) 00:39:29 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x33e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c0000, 0x0) 00:39:29 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x404a00, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pwritev2(r5, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) openat$null(0xffffffffffffff9c, 0x0, 0x200000, 0x0) [ 150.533027] syz-executor.2 (4030) used greatest stack depth: 24880 bytes left [ 150.573433] netlink: 'syz-executor.0': attribute type 338 has an invalid length. 00:39:29 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) [ 150.839843] netlink: 'syz-executor.0': attribute type 338 has an invalid length. [ 150.862081] Bluetooth: hci7: link tx timeout [ 150.863557] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.333414] syz-executor.6 (4039) used greatest stack depth: 24120 bytes left [ 152.889563] Bluetooth: hci7: command 0x0406 tx timeout 00:39:39 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f45", 0x5b, 0x8800}], 0x0, &(0x7f0000000040)={[{@map_off}, {@map_acorn}, {@nojoliet}, {@block={'block', 0x3d, 0x800}}, {@unhide}, {@overriderock}, {@hide}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x102) 00:39:39 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) shutdown(r1, 0x1) 00:39:39 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x200488c0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x9c8}, 0x16, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f00000002c0)="01b2366f8241b55a0a530b0edd2b656e30acaa386de556cbcffee17228edb908f1eeffb261a5371bb1237302c6627d799d52d49ef69132f4c2425c26bf194cec6d2a0d4760bed3f4fc7868117d356d530bd5a3880244c0c7b57a226a964860f59fceb3a1230a8b0bf49735ba08548b76993827ff2d640636dca010be62b68ab4dae9b63840d6213feaf004e6a0782b5ea5502d654583d71af42f16df0170a322dd198b75590f017a07e034a4ee131beff24ae5fb9cb06ea776c2d46666298b02eb626f2b6d8a474428f1d054df64dbe2065d332c028d23e81e5555d393068be8bd639769cec1d0d5f2dd12ff5b971279f4c50f14", 0xf4) fallocate(r0, 0x2a, 0x8, 0xffffffff) socket(0x27, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) dup2(r3, r0) 00:39:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x4, 0x81, 0xda, 0x7ff, 0x48, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x100, 0x7f}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:39:39 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) 00:39:39 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) 00:39:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='devtmpfs\x00', 0x48, &(0x7f00000001c0)='\xc4@^%\x00') 00:39:39 executing program 6: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) [ 160.089104] loop7: detected capacity change from 0 to 136 [ 160.110906] isofs_fill_super: get root inode failed [ 160.157780] loop7: detected capacity change from 0 to 136 [ 160.175757] isofs_fill_super: get root inode failed [ 160.238659] devtmpfs: Unknown parameter 'Ä@^%' 00:39:39 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f45", 0x5b, 0x8800}], 0x0, &(0x7f0000000040)={[{@map_off}, {@map_acorn}, {@nojoliet}, {@block={'block', 0x3d, 0x800}}, {@unhide}, {@overriderock}, {@hide}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x102) 00:39:39 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x9, 0x88, 0x1, 0x0, 0x4, 0x40004, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x805, 0x5, 0x4, 0x6, 0x7ff, 0x20, 0x8, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x6, r0, 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) [ 160.354835] netlink: 'syz-executor.0': attribute type 338 has an invalid length. [ 160.508988] loop7: detected capacity change from 0 to 136 [ 160.520929] loop2: detected capacity change from 0 to 16383 [ 160.555193] ext4: Unknown parameter '' [ 160.556626] isofs_fill_super: get root inode failed 00:39:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="1b65d760fe1cd5b5220646e319529245b4d131add5d06b92b561c5f6f8dc771e6880dac811010e5ac436bc22446d9b8c3783aee94ee001f16bc61fb4ef3bf4727f2e10af868ed0f8daac66abdfa7505ad1a1a6a29d4da7357460ce59c4ead1c0d4a1795a7bb2cd", 0x67}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000100)="ebf4b48fd8480737dceba2a9bbac603a919c183c518f7e0788e0277b554eeb746150aed1a193b866fa2a6ad870a73507eb76b9012fb974ba46fd561abd8c4fc1324dade2e216ac4439332855ab31c4e9e9869967046866b9ea1c2301", 0x5c}], 0x3, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x47, [@multicast2, @private=0xa010100, @local, @local, @broadcast, @remote, @rand_addr=0x64010102, @rand_addr=0x64010101, @empty]}, @end, @generic={0x44, 0xe, "a9ade1bddfa9204a80a295f6"}, @generic={0x88, 0x12, "299990de41655ecbed73c5660f7cd501"}, @end]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@end, @rr={0x7, 0x7, 0x86, [@empty]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0x6, [0x6c, 0x7]}, @end, @timestamp_addr={0x44, 0x2c, 0xcd, 0x1, 0x2, [{@rand_addr=0x64010100}, {@rand_addr=0x64010102, 0x8}, {@local, 0xfffffe00}, {@remote, 0x5}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x148}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x35fa1000) [ 160.652401] netlink: 'syz-executor.0': attribute type 338 has an invalid length. [ 160.656644] loop2: detected capacity change from 0 to 16383 [ 160.667627] ext4: Unknown parameter '' [ 160.679850] netlink: 'syz-executor.0': attribute type 338 has an invalid length. 00:39:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x4, 0x81, 0xda, 0x7ff, 0x48, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x100, 0x7f}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:39:40 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x4, 0x81, 0xda, 0x7ff, 0x48, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x100, 0x7f}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:39:40 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) 00:39:40 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0xfffffffffffffffd, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) 00:39:40 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x9, 0x88, 0x1, 0x0, 0x4, 0x40004, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x805, 0x5, 0x4, 0x6, 0x7ff, 0x20, 0x8, 0x0, 0x9, 0x0, 0x1000}, 0x0, 0x6, r0, 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0xfffffffffffffffd}], 0x0, &(0x7f0000000080)=ANY=[]) 00:39:40 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) [ 160.902887] loop2: detected capacity change from 0 to 16383 [ 160.918421] ext4: Unknown parameter '' [ 161.069220] process 'syz-executor.0' launched './file1' with NULL argv: empty string added 00:39:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8}) 00:39:50 executing program 7: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0xbd, 0x7f, 0x0, 0x0, 0x12, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x202100, 0x0) sendfile(r0, r2, &(0x7f0000000740)=0xac, 0x9) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r3 = fork() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) process_vm_readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/122, 0x7a}], 0x3, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/171, 0xab}], 0x4, 0x0) 00:39:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) flistxattr(r0, &(0x7f0000002300)=""/4096, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)={'#! ', './file0', [{0x20, '\\*:'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0x13) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) 00:39:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) shutdown(r1, 0x1) 00:39:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r5, 0x4, 0x81, 0xda, 0x7ff, 0x48, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8, 0x100, 0x7f}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:39:50 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup2(r0, r1) ioctl$SG_GET_PACK_ID(r2, 0x541b, 0x0) 00:39:50 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000040)='/dev/full\x00', &(0x7f00000000c0)='./file0\x00', r4) 00:39:50 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='devtmpfs\x00', 0x48, &(0x7f00000001c0)='\xc4@^%\x00') 00:39:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101440) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8000, r7, &(0x7f0000001040)="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", 0x1000, 0x2c1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, 0xffffffffffffffff, &(0x7f0000000940)="a6049a559e887f6302dc494ee6821a54a6736c9d0de63cd85c831bb033fc0a", 0x1f, 0x3, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000a00)="58ee63cde8f418e13ac18f5b35ec82abe5d4a1d3000000000000c85b6d6d4ea6802b49316ad5026f6b6535cb0c050e16268f3cd2fb8dea17b763840e20a3d57aabf411957445f4", 0x47, 0x3ff, 0x0, 0x7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000ac0)="75d65bb3f10c971972ee72520c46ea59e1c164c987f83b6141b607f4eee2e9a46b47882201fabf42811865fabc012b35b7db9f771da90f41d3c63b2d1278ad4e1de05e582aa410381f06e501db7f5ade357eed937b78922433c0160b4aec14d4eb020c5b37f1a231f1c01bf5e2e9f911e02bdb578cfab179cd19d3a96a90b0d52200179c20ba1ef5f2bcb6008828527df3662ba34b757b827f9682d310b38f68da2610959a643105c86976a9c8b5f08c175ba75d302ae5cd138b583ccbbf0f39147f1c1c950f4874b18524bb5c7501934888e13f8b35dbc3efc04feb0d74903f08a446", 0xe3, 0x67, 0x0, 0x2, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000c00)="c295396fc72362b60921e533e4b0c4f1e04b905eae51fb25903d4dc0b068700745c8b81b1313567f8e23f141937d2aa401b85df3e7a6756c042767db62b994eda56541749104094704e7be0747766265910042cf6b114ee3c3f753af7ccdc35bf0a017e66fc80128b4c577b5995fef58e9bd729eab56b0999317bd0da828da41e53ad9553f64cb3b6aadb47c85214ab6cb2e5d4025f39ead0d879fd672c71a5bf7f58d003a56cee44bf846759b4cbd8d86aae2fc7ceb966dd3215020cc2e257798bb6237ef865a560d2264b0fa2d2bab8cec76f75005482e1abe5f1f8dfdc03f4dd5f9f0e804b77d9214d385a348477a", 0xf0, 0x594, 0x0, 0x1, r4}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000d40)="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", 0xfc, 0x0, 0x0, 0x2, r5}]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) pwrite64(r10, &(0x7f0000000840)="f1e8a251d0fce0f0859a00553fe77972c05ebe2815eb26324322febaef948546ee873edd6886dc257adec0d7e60ca4b5097169b94a09e2336e75b3613e10bec0335826f254760447b7ede2ffe1dc0e357e09d031768875e9f13b15b8f6acbb14e0302182d2b89886892866fd8dce9bebabc871de66e80bf9c166978953a804a2cc1757a6c3ce4c51cc521285fab8a960d6081c38cb5fb789", 0x98, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000cf320000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r12 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000040)="e4a2e7951e56954e735c8b4ef9f589cb966d2396e06723c7b7df27d440850f9d17f61357e9a5ba44bc6a6c2d04e86fe932b32933425400b9ecd95736edb79ee139d33d88293e5ae055919e4e7c217db0807593632213393075483fc9c3324afca0dff7143f6cda64e2571cef592b4c10134f66", 0x73, 0x3, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x35, r6, &(0x7f0000000200)="8c4510bf259fe42563d86e894b77d7913c1c8108e8ed7384f24dfc7797da39c0ea48b6a209b18a67b81f4fbc6a9d4fb1f8822ac23d169823e9f3fad5f6d974f2846d4ea830dfff89faeee49ecf7d71fc248d14de99a9ff2e3ae4a3af76d037b94a9ab431d761707927eef691517b77b3d3a93f7d9930c551512ab40fd1746a0858928ccf444defb2509f40c86de0b204693ce14d14d0699d7ad715e7d3b443a0a59d94e67d60b81ad6a4219cc74059dda5e64537c1f706", 0xb7, 0x4, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xa0, r7, &(0x7f0000000300)="d35fb19e63ce25f842a11ac949a46221269a0d9351188a67ba7d22309c3146e2b89db5a21bd0d1d21b2d754ef104b037413dc851b0fbdb42835236b7ce01508c4a26b74e8f", 0x45, 0x2, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="334aa87f4c989fb5b4027e8d61cb3df8fc4697bf73b8c22357fd1a3486b3036067f3870ff224a3e2aff2e84d21617eb41585244e0e7ab72b315fbedbc3bb8e8fb7a5484eed1d2f2eb417036d38d3", 0x4e, 0x5, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x5, r12, &(0x7f0000000500)="ef36b276433e63d2fb0692ce996e53b698b765ea474183efcdef84cdeace30a665d24a1593474808e462e90778d5133883aade24c86c3fb610a72bdca06b1001115f1d8585b4ceff959b0b7e2019252982b890be28660d461c3b1daf95c8a23de210b431910323d2727f4b70fe35b290d85d4dcec64ceff05e09cd24e548c08a112ce1011317e583997601f311f39c5c37f6b3", 0x93, 0x88f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000000600)="ee04a6145f30e4e2edf3278a0706aa0299f1dfb18bacdc56df7022b6f0b232426dc923e38efde74256f0e8a94c60fac3a8af0f86a797b43f4be17e4230357543c41671aab2dafd6548f0695f2264b85311b0c3fdc60c43f8801ec108b0512f1deb57a8c6bef2980f71ec38622034eabb7a73b71d6f672fbec8e699f133be83ae2bcc290d467e489e5fa2750648d65c64ba18985736fc90acba7c8bc189405cb8a46f14cf436e15f47995621cd6c684a37eeb19627c61245f201af607da5d4950ad1d", 0xc2, 0x2, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000740)="877eb08e19db16c4aa28e90d3505852fd5912280a75971103d73f47f844b380ac84b5609e437ef0ad4a55ceca2130ada51ec83df3266651b09b628b68e590723e436e79e9cd3bcfd6e8c0d4a80e20ca5eb27d9c1c501a1ab551e660a6c026e397b5d64bb2947247d6431c2cd21082ba05c47708619d1c5c64921151bbdb0ac4f", 0x80, 0x40, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 00:39:50 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "1cbceca40b67858fbba2c07c58c2eb9b6c95a189e0c6a2636fd94f332664b208dd4712767e4cc368c439182749d85de328763accfbc1d2cd9af71cb6f62f9e12d2331e4c343ab325a2f53cfa9abb68286e8aaeec340dffad9493764a0c19c4a8c9ce9fcf9c850dc91a7aedb95b5b8fd00fcfe83a93c1f9d12761071cdda976ac6ed08060f5572025489afc835358eba0e217f72644acb18fc9e8a164d911acbea735a497203ebeb7f23de44d61a2e4"}, 0xb3) [ 171.187023] devtmpfs: Unknown parameter 'Ä@^%' 00:39:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8}) [ 171.261957] netlink: 'syz-executor.2': attribute type 338 has an invalid length. [ 171.309388] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:39:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) flistxattr(r0, &(0x7f0000002300)=""/4096, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)={'#! ', './file0', [{0x20, '\\*:'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0x13) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) 00:39:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) flistxattr(r0, &(0x7f0000002300)=""/4096, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)={'#! ', './file0', [{0x20, '\\*:'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0x13) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) 00:39:50 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "1cbceca40b67858fbba2c07c58c2eb9b6c95a189e0c6a2636fd94f332664b208dd4712767e4cc368c439182749d85de328763accfbc1d2cd9af71cb6f62f9e12d2331e4c343ab325a2f53cfa9abb68286e8aaeec340dffad9493764a0c19c4a8c9ce9fcf9c850dc91a7aedb95b5b8fd00fcfe83a93c1f9d12761071cdda976ac6ed08060f5572025489afc835358eba0e217f72644acb18fc9e8a164d911acbea735a497203ebeb7f23de44d61a2e4"}, 0xb3) [ 171.384593] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:01 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8}) 00:40:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101440) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8000, r7, &(0x7f0000001040)="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", 0x1000, 0x2c1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, 0xffffffffffffffff, &(0x7f0000000940)="a6049a559e887f6302dc494ee6821a54a6736c9d0de63cd85c831bb033fc0a", 0x1f, 0x3, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000a00)="58ee63cde8f418e13ac18f5b35ec82abe5d4a1d3000000000000c85b6d6d4ea6802b49316ad5026f6b6535cb0c050e16268f3cd2fb8dea17b763840e20a3d57aabf411957445f4", 0x47, 0x3ff, 0x0, 0x7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000ac0)="75d65bb3f10c971972ee72520c46ea59e1c164c987f83b6141b607f4eee2e9a46b47882201fabf42811865fabc012b35b7db9f771da90f41d3c63b2d1278ad4e1de05e582aa410381f06e501db7f5ade357eed937b78922433c0160b4aec14d4eb020c5b37f1a231f1c01bf5e2e9f911e02bdb578cfab179cd19d3a96a90b0d52200179c20ba1ef5f2bcb6008828527df3662ba34b757b827f9682d310b38f68da2610959a643105c86976a9c8b5f08c175ba75d302ae5cd138b583ccbbf0f39147f1c1c950f4874b18524bb5c7501934888e13f8b35dbc3efc04feb0d74903f08a446", 0xe3, 0x67, 0x0, 0x2, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000c00)="c295396fc72362b60921e533e4b0c4f1e04b905eae51fb25903d4dc0b068700745c8b81b1313567f8e23f141937d2aa401b85df3e7a6756c042767db62b994eda56541749104094704e7be0747766265910042cf6b114ee3c3f753af7ccdc35bf0a017e66fc80128b4c577b5995fef58e9bd729eab56b0999317bd0da828da41e53ad9553f64cb3b6aadb47c85214ab6cb2e5d4025f39ead0d879fd672c71a5bf7f58d003a56cee44bf846759b4cbd8d86aae2fc7ceb966dd3215020cc2e257798bb6237ef865a560d2264b0fa2d2bab8cec76f75005482e1abe5f1f8dfdc03f4dd5f9f0e804b77d9214d385a348477a", 0xf0, 0x594, 0x0, 0x1, r4}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000d40)="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", 0xfc, 0x0, 0x0, 0x2, r5}]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) pwrite64(r10, &(0x7f0000000840)="f1e8a251d0fce0f0859a00553fe77972c05ebe2815eb26324322febaef948546ee873edd6886dc257adec0d7e60ca4b5097169b94a09e2336e75b3613e10bec0335826f254760447b7ede2ffe1dc0e357e09d031768875e9f13b15b8f6acbb14e0302182d2b89886892866fd8dce9bebabc871de66e80bf9c166978953a804a2cc1757a6c3ce4c51cc521285fab8a960d6081c38cb5fb789", 0x98, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000cf320000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r12 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000040)="e4a2e7951e56954e735c8b4ef9f589cb966d2396e06723c7b7df27d440850f9d17f61357e9a5ba44bc6a6c2d04e86fe932b32933425400b9ecd95736edb79ee139d33d88293e5ae055919e4e7c217db0807593632213393075483fc9c3324afca0dff7143f6cda64e2571cef592b4c10134f66", 0x73, 0x3, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x35, r6, &(0x7f0000000200)="8c4510bf259fe42563d86e894b77d7913c1c8108e8ed7384f24dfc7797da39c0ea48b6a209b18a67b81f4fbc6a9d4fb1f8822ac23d169823e9f3fad5f6d974f2846d4ea830dfff89faeee49ecf7d71fc248d14de99a9ff2e3ae4a3af76d037b94a9ab431d761707927eef691517b77b3d3a93f7d9930c551512ab40fd1746a0858928ccf444defb2509f40c86de0b204693ce14d14d0699d7ad715e7d3b443a0a59d94e67d60b81ad6a4219cc74059dda5e64537c1f706", 0xb7, 0x4, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xa0, r7, &(0x7f0000000300)="d35fb19e63ce25f842a11ac949a46221269a0d9351188a67ba7d22309c3146e2b89db5a21bd0d1d21b2d754ef104b037413dc851b0fbdb42835236b7ce01508c4a26b74e8f", 0x45, 0x2, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="334aa87f4c989fb5b4027e8d61cb3df8fc4697bf73b8c22357fd1a3486b3036067f3870ff224a3e2aff2e84d21617eb41585244e0e7ab72b315fbedbc3bb8e8fb7a5484eed1d2f2eb417036d38d3", 0x4e, 0x5, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x5, r12, &(0x7f0000000500)="ef36b276433e63d2fb0692ce996e53b698b765ea474183efcdef84cdeace30a665d24a1593474808e462e90778d5133883aade24c86c3fb610a72bdca06b1001115f1d8585b4ceff959b0b7e2019252982b890be28660d461c3b1daf95c8a23de210b431910323d2727f4b70fe35b290d85d4dcec64ceff05e09cd24e548c08a112ce1011317e583997601f311f39c5c37f6b3", 0x93, 0x88f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000000600)="ee04a6145f30e4e2edf3278a0706aa0299f1dfb18bacdc56df7022b6f0b232426dc923e38efde74256f0e8a94c60fac3a8af0f86a797b43f4be17e4230357543c41671aab2dafd6548f0695f2264b85311b0c3fdc60c43f8801ec108b0512f1deb57a8c6bef2980f71ec38622034eabb7a73b71d6f672fbec8e699f133be83ae2bcc290d467e489e5fa2750648d65c64ba18985736fc90acba7c8bc189405cb8a46f14cf436e15f47995621cd6c684a37eeb19627c61245f201af607da5d4950ad1d", 0xc2, 0x2, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000740)="877eb08e19db16c4aa28e90d3505852fd5912280a75971103d73f47f844b380ac84b5609e437ef0ad4a55ceca2130ada51ec83df3266651b09b628b68e590723e436e79e9cd3bcfd6e8c0d4a80e20ca5eb27d9c1c501a1ab551e660a6c026e397b5d64bb2947247d6431c2cd21082ba05c47708619d1c5c64921151bbdb0ac4f", 0x80, 0x40, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 00:40:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) shutdown(r1, 0x1) 00:40:01 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) 00:40:01 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101440) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8000, r7, &(0x7f0000001040)="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", 0x1000, 0x2c1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, 0xffffffffffffffff, &(0x7f0000000940)="a6049a559e887f6302dc494ee6821a54a6736c9d0de63cd85c831bb033fc0a", 0x1f, 0x3, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000a00)="58ee63cde8f418e13ac18f5b35ec82abe5d4a1d3000000000000c85b6d6d4ea6802b49316ad5026f6b6535cb0c050e16268f3cd2fb8dea17b763840e20a3d57aabf411957445f4", 0x47, 0x3ff, 0x0, 0x7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000ac0)="75d65bb3f10c971972ee72520c46ea59e1c164c987f83b6141b607f4eee2e9a46b47882201fabf42811865fabc012b35b7db9f771da90f41d3c63b2d1278ad4e1de05e582aa410381f06e501db7f5ade357eed937b78922433c0160b4aec14d4eb020c5b37f1a231f1c01bf5e2e9f911e02bdb578cfab179cd19d3a96a90b0d52200179c20ba1ef5f2bcb6008828527df3662ba34b757b827f9682d310b38f68da2610959a643105c86976a9c8b5f08c175ba75d302ae5cd138b583ccbbf0f39147f1c1c950f4874b18524bb5c7501934888e13f8b35dbc3efc04feb0d74903f08a446", 0xe3, 0x67, 0x0, 0x2, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000c00)="c295396fc72362b60921e533e4b0c4f1e04b905eae51fb25903d4dc0b068700745c8b81b1313567f8e23f141937d2aa401b85df3e7a6756c042767db62b994eda56541749104094704e7be0747766265910042cf6b114ee3c3f753af7ccdc35bf0a017e66fc80128b4c577b5995fef58e9bd729eab56b0999317bd0da828da41e53ad9553f64cb3b6aadb47c85214ab6cb2e5d4025f39ead0d879fd672c71a5bf7f58d003a56cee44bf846759b4cbd8d86aae2fc7ceb966dd3215020cc2e257798bb6237ef865a560d2264b0fa2d2bab8cec76f75005482e1abe5f1f8dfdc03f4dd5f9f0e804b77d9214d385a348477a", 0xf0, 0x594, 0x0, 0x1, r4}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000d40)="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", 0xfc, 0x0, 0x0, 0x2, r5}]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) pwrite64(r10, &(0x7f0000000840)="f1e8a251d0fce0f0859a00553fe77972c05ebe2815eb26324322febaef948546ee873edd6886dc257adec0d7e60ca4b5097169b94a09e2336e75b3613e10bec0335826f254760447b7ede2ffe1dc0e357e09d031768875e9f13b15b8f6acbb14e0302182d2b89886892866fd8dce9bebabc871de66e80bf9c166978953a804a2cc1757a6c3ce4c51cc521285fab8a960d6081c38cb5fb789", 0x98, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000cf320000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r12 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000040)="e4a2e7951e56954e735c8b4ef9f589cb966d2396e06723c7b7df27d440850f9d17f61357e9a5ba44bc6a6c2d04e86fe932b32933425400b9ecd95736edb79ee139d33d88293e5ae055919e4e7c217db0807593632213393075483fc9c3324afca0dff7143f6cda64e2571cef592b4c10134f66", 0x73, 0x3, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x35, r6, &(0x7f0000000200)="8c4510bf259fe42563d86e894b77d7913c1c8108e8ed7384f24dfc7797da39c0ea48b6a209b18a67b81f4fbc6a9d4fb1f8822ac23d169823e9f3fad5f6d974f2846d4ea830dfff89faeee49ecf7d71fc248d14de99a9ff2e3ae4a3af76d037b94a9ab431d761707927eef691517b77b3d3a93f7d9930c551512ab40fd1746a0858928ccf444defb2509f40c86de0b204693ce14d14d0699d7ad715e7d3b443a0a59d94e67d60b81ad6a4219cc74059dda5e64537c1f706", 0xb7, 0x4, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xa0, r7, &(0x7f0000000300)="d35fb19e63ce25f842a11ac949a46221269a0d9351188a67ba7d22309c3146e2b89db5a21bd0d1d21b2d754ef104b037413dc851b0fbdb42835236b7ce01508c4a26b74e8f", 0x45, 0x2, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="334aa87f4c989fb5b4027e8d61cb3df8fc4697bf73b8c22357fd1a3486b3036067f3870ff224a3e2aff2e84d21617eb41585244e0e7ab72b315fbedbc3bb8e8fb7a5484eed1d2f2eb417036d38d3", 0x4e, 0x5, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x5, r12, &(0x7f0000000500)="ef36b276433e63d2fb0692ce996e53b698b765ea474183efcdef84cdeace30a665d24a1593474808e462e90778d5133883aade24c86c3fb610a72bdca06b1001115f1d8585b4ceff959b0b7e2019252982b890be28660d461c3b1daf95c8a23de210b431910323d2727f4b70fe35b290d85d4dcec64ceff05e09cd24e548c08a112ce1011317e583997601f311f39c5c37f6b3", 0x93, 0x88f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000000600)="ee04a6145f30e4e2edf3278a0706aa0299f1dfb18bacdc56df7022b6f0b232426dc923e38efde74256f0e8a94c60fac3a8af0f86a797b43f4be17e4230357543c41671aab2dafd6548f0695f2264b85311b0c3fdc60c43f8801ec108b0512f1deb57a8c6bef2980f71ec38622034eabb7a73b71d6f672fbec8e699f133be83ae2bcc290d467e489e5fa2750648d65c64ba18985736fc90acba7c8bc189405cb8a46f14cf436e15f47995621cd6c684a37eeb19627c61245f201af607da5d4950ad1d", 0xc2, 0x2, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000740)="877eb08e19db16c4aa28e90d3505852fd5912280a75971103d73f47f844b380ac84b5609e437ef0ad4a55ceca2130ada51ec83df3266651b09b628b68e590723e436e79e9cd3bcfd6e8c0d4a80e20ca5eb27d9c1c501a1ab551e660a6c026e397b5d64bb2947247d6431c2cd21082ba05c47708619d1c5c64921151bbdb0ac4f", 0x80, 0x40, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 00:40:01 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101440) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8000, r7, &(0x7f0000001040)="38132f935a9151ab003313bbedc892b1e33813e95532c9e77d1ab552d72cfad831d8d0400119428fe3fd430113e8743c57e305583ea1171bca6d3b5f62718c3a98407db3cfca6345cc365d08d4c77bf5bc3dd2eebab80e78b952577e733ad5b88c94d3ed30d30decc03cc0f9557b10320305d1509fd14c67bd39ed0073842a3854a4323633056501d46a3068fb5e31e76a5b4c75b22c1bf747a099c8efab3a96e5e30798dbd0d6bda545f8d3ae1efd76ce334aaa53077e041dc1e2b1bda090d2807f18fc812cc320405172be828ec57add0746190bfac85b5b61e4a85223c0b452eb97f0bde46289276c10beb9cdb2df8faa30e541f9a062c4a240e882405316642fef051bc4fb9ddcff92adaa9ded4682fd188fcb6fa262243f296a75cfc7a1ca6eccf0f03dfbb282c1a23a4f6bd66860afee4ff094308b4d8eeec8e222b1b897786047cdab436707bc9a1a6c7d1644cec101edb105ea9d25925227fd1a0d38bf7835ae2ac903e9919a522e1026d78d5b47b883a3923d72fde511935197efdd7e7f8ba7d5466531e121132d0353686f4f15e68209d747604cf477724d592192c48dbd1b393e2b303caf59f029643670557a4b93ae3294567be8fa4cae92cce1a87f01106b6b9ef90914b542bf5aca96a489608ccdf0d1f5ceffe173e20a8faca4f1ba8e2e6e73cb44bb8c32faeeca963c881236fd2db99a5c51ac8e3951d34872472de753ea771ca88829a0a726d1bc7d7b6007550944c27114e51d80bc705142ca2e1ccd9fd3c583fdb4fcd7a8a801ee651ce447664ce7582c5f0ee1a19dd111d4070bae0b3b0fc717b513fa1360a454fddb80746d3a5a4259147fa3d3de4e58fe555c7f03b0ebd1384d3ff090cbf170d2628ae1f3b1800446ed295b0afe09652b87ba9de621217041e6247cc5d447c084d8ca48ec612f9e1d81759f908d01afccc9b54c6c1d1497a9fc4c39c94fded0977b77d447b6e583932dcd2bfe1dc20528677c66bc1f55933be250c8bfc5d0e779d0a1e2b7d25c33f71528c6ea921f3ad7c0939133f1a55ffe67dcd214f1fa07f1676cba4a66ba6bdd837bdd3584b0794321ee06d4ea5fe054255aad36c8a17cbdf281eed1ee95dd8a39e74138f9513c9678e134192a8414e3d367ac46364e5889e4391696fb2e2767a50720975cfaed8555dac8a9ef745469eb18dc93812c7c42b948044e6effb2070038544e2ac5d44403f6456f0b175ad506be1c911a614c718d20cb2265d52afaa3c30fb731965f3dc253c8dca53342a6813c9531735fb8537b774ecd716fb05e0ac9472d7e6cbf21cba6758c5468ec3937eef3b5d45cc2b1ba7abb360a42a7e9d0fa6647010e570646a540d730477fd5c23df4038c780abdac0b0ea42e1d3aa4cf34e7b79c444f7321a5e748e9b47e4624197b2f59e1342159c96bd9943d99d770b436f3a7b687c40ca0abe57ba269c5ceade014a5da2bc5d6cf219b2b6547dba1d4ed791870217dce5eec8dcbf8aa92cdf9410bce9edb9c2346d1050ef883f557b5713cf2db40131712a88a613feab3999ff5eb2d998300bc530781444cc600f7246aafdcf474a9290d337c6a1688dba7a75e250aa841344b590089327c2c3ff3877b8de35c2c7a8d5bbf9fe7e8d2dff77a6cb7b91ffb7b210ab915c4fd60a1b562de32028533bf5e29828add3887657205dda8d2d2699ba23f13b0e796c201b8dbc1d2042d5a180d3a7d6c21db7bf529c08a323871e0ba912798f157358e6dff1d48f20cf1a3917849f230c69e5f21c94bf9bbfe5dc8283d6a92487887d100bcc4a9093009aefed7a53688ee2be69624aa7d85d1774d033ce0e761cafe369693f9abfdd7ab0393413d8b40f0bea12a2b6993b249ffeaf11eb015beeafeefbfbb94e4d42b09759c2fb479c3aa6ef7ead229c96336facca880d15d0f44cd1d6e2f77d57a9ba7dca4eec227f1e025a1ec5ba45a325159b1662a18de211148a1c2c3e9df5777473eb91580722b0e4660ffa69fcdb1dc3be610b4a4f1bbcd0e5077e61812c9b1a7a55155eab4a98919664bba91f65f5e7fc7ed086378f18a8f3f879dc653076da6166d91e7af1fc8416cc9c0d56ddb33509ee838d95ce3414cd51fb93878bbc897afa30d59043d259adb0faa944fbc52c5451f08c717649f76fd69ea10797728be7f94ceb3f6e6b165c109eeaf797e66f3ba697892db40cb9615b7908bf17f94287e94a87cb718a94ad4f8d487fc3776e169af9e50e2ba5e2b62705e132030f799720b9606f8fe72684514d937c33db5602ace659b8e0d004446689f091c7019bebfd8482bb7d8b2ad93eb1b0f8c7b55c66db3740f5e5257280042c0481e72a272d67fc416a5aa1abcda6ebc05f5aef553e361ffe6858123913cb7b518dcc08d1d4ffd235d2f53fbb8c1ea16dc03406235a761a45c6cf9f650195e6f2540d354d328f0fa3be0e308126be72ffcec5eb0aeda62c69271e29cf4805f503b63503860cb2c43f87844cc132bcd9925ef32dbc413d0adc76ec93b853c907288c752418685a4488b51f49c26dc6f6ec8b84b4a925921d4e264dd7d73667ae5b0827dabc00bc7a3f5fffd1b478b3f781bbd29f075e20fbb416e0f4d37b7d3161d7a08291a72e1f89180a859bd4c2bbb58ce1f8ebfc1b075284e7186446901d88241f446645e02739b237d39e7da6a121d8eede867c1fbb8308d81d6e84426e4c60d63265859aff1ff504e10f8532cab54fb68728d63f52fdad590a8097b9603a0d920b86bef131678a930ef1a7c0fe07f7b12ba59c5d0cf806c73201826f161ec579ee83fda9624cc4e4d1e973c7502ca57922c05395308d95df22ba9d52fd10e5463a5ef68f0e339bd7f29fcf427ff1eec408c1f7080d135b346521c8a12e5aceea1d9801568bb6271f8e2a1d1f62168e826d108738d08c17ddb84dcae7936c1cf26f261ffeb0984012c1ee93c264f538cb5ce4aa943a1ffd94049f1664477f0d785c1a018f068c07f93a92947616866d9ccce6f397ba90ff5201e5627373c34d0f6de0d5490646b0effd6474e57b15201a7e801cdd6954fdcef134e9f6bf5049c231667fb6a78704836cbaae119ade1fe83448f07f8ffd3baaf7a7368b23fcc84f202e598f9fc28d847f8ee1e54cdc7dd8f80e33955aea586aa7535831c18fdf095d07a320efc86581e21b3044100ed67ac6555f24ea6821ea5761fd9fcbd213dfa040385fe6aae8377ae06189134c6bd4ab7885167d669bae11065b4aa3fdbde7a5ddb1d94dd0088aefe1406a1efe8ec50d780e2bac5275b6748fbff411c623b3cf9faf96ec9e8a485eef0c4dd76222080d5cdc3c67e7a679d219f498c61b3a3c5169976ed3b1943a55475bf006a6722b24ad471c6b7d789ba19e6b9b9ea30b81b5253148207fa049247fac696fff5801a88382f2972c8498b733cc1330833d0ac68f3c870cc944cf7379f8e1786b32e8d98f876b7abe67f966e837ef83627ea289db770ff89807b136cc69f240b0eeb12b2c4960e224b995f8c62eff6d70fbb24f3dee5acf1d223bf9250a09539a7ead9fc9175eb3e89082e0765d9e8080d518d04be04e44ef6d02f9dc94b8551b989af8767f8b5d9403e2c81299c1b310ee675b5a79b67e08099aafc8d759529bbee99d423acec144a73a9c72405688d4787d490b1160687147479fe8570020b73f46841334e024826dad02ec31f95ecca86c56f3dbda6ff3bf9909a15c648aa4ef42fe486194722ef6096c1de88a4ac5809fc33603d2c2929cf6b5ceadddb22d2568a24c6e01c4384d6896ef574fc58cf1b737b882338ad74f56875af63118794e99ef611376a70a5d595e99de405085d38ef2db1e8df782b7a29bfb5e4e75e10f3b897d732190f7fa19a6994fedc59db05c9200754fa7a314a70a6dab9a149d8b6a425c1b57afccdc2370e31bb9599d6ca0040f8fcee5b87c0d4d9e87e86ca0791951c0cb704b708a64aa3067c8a51d6ac8b942061f5ddb287371aa07e6ae20f9d6658eefc490d662b0fe07fa98d921a50be130631a8736c68955ccb660656f4f3ec2a82ffbc88a5b9ea99d8822e23486df86bc632b8b1cb9e89d64755545ba9143d4dc0a5940fba1d0af64fc0062489c9510b011bf748ab9d5eabc880778d99a9e07c161a0353849018675c2bf93d5e0e50841e34aa05e80ac57933d3eb1e784ff0403f4ea1b214111607be3cc5c52a5aff386dfe7383b44b290ba89e4e6d2b1083c49e78a0b601e6940f796fce17162b450bab593a141411e894302afed1daf58d014f30c6c3c3bcbdac680ec2d419851f97ee32820e48c5f9d69c494248c76362f9b6b0a8d5db1d2e5758e0b5aeb42f2f4c8d0b4084331b1311432a87983de85f4f2b2e8340771114990a9756799e3491453d9bee1c3025bd5f8014e3347df34c5089f26f317b9b6ffa36b46e14a782f8ab2e674db359d557b4e45ed3e8adf8f560647c0bf8f0f820b372628762421fc9e4e9288514a96519986be5eac112229d74b8ee2f41bb556483b0300ebe156d3991931ca117c8fe8f9ed85f376c32c65083d2207cd1e0b8398999c9bfb5a43dbf2efde64eddaca5ac2cce07e714b95a3e8651b42162e44b0d08934d4aa7762744e301cba1c9866d437eec5492a16ea0500becc89dbfeb9d80de092c82cded4d71162587de3ab92b326d10799557bdb77c31cf59a328e3deae96bba2529f81b79114e29628d34f04dce43c3f3ec6a16dc7067fa71bc026cd85a7101f84629d070967a325a9b48be7b7ee53abe02e30425a53fab897bbde6834ef1a16aeb9fe7e34454c774ef6f14f755879bd7e75a53c9e0462331e5559a4795e316eafa995388d16c2595abd802713c031dc459700a978b8e13335ec40b8459941f8770411d136a3a660629caa51b12fe9b78603b20297bc9150a447d1b397682007837fda2b3217b58bd2486f698e80deee2569cae28b7fd391f609fab79bfcedd52c70dd0a6640a149fccd0042f6d5880bdbe35156a45afe051f265a9fd4a0aae592f1afbe256e4096cd85c9b017b3b1f44afa1ddd8db065c73af34cd033f0a9d53ebfb1bdefe93043dd58730de957350a0f7db0057b2f8d824d2abae31455540a5755f2e778735fb9bc2fd10e62b5d10ef15e582b0958986ae96c7149941ffc157ff9b44fda49857cc6e081d73fd0395c5f761c6177ebf6f44c291420a7cd382f6b32a5d4892c10a3b852716cb5bc89b907ec92f587b8444699d1ce95c11e578856e4cb92eeb653cf4f6612fe18c6ae252df5f85e21c0961592de381a4be8e358cb2e85aaadc623df03fe1d28677bc6f3f03078d08c9693c184c241901c01e36651678994c774a859a6a06e144f07e1d7963e937a7f1e2fd18ab82265c6a70697caf0518ae83776a01ce724e93dadffe152c4b80041f78ebd68ae3d033ab07d70aaef37dd0b8b96b3a5e798f9fd01f890e9f71af043419e51a6c1a380157da480b185a5f4e87dfb2e4cd397fd6200aae6acc5f642f3653cfc78a7cc51ec6be153dcdeabc9412ee076a5a298a4b6a499926d3db13080aaa229a4aabe2f6efa728bfce12dad7559811ec89c2ef104e30c77f60ca06dda08d32b63de1ff614c6dc0d1ba5f39b5c2bdeeefb24b9868315c937b6862726e5e86eeb8b2dce46ed32dd5cde2b732ca46e37e40c832ead72c5a662ce716b24af10f942355da2978699ea759d856805e64eefed7e05e954504ede29fd5110014da8a7de45e758b4ad91ff58dba810c91e257f916d3409d495b05e8c9a7cf2e8477a881be8ee9bbb525eb482612cf0ea17f783", 0x1000, 0x2c1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, 0xffffffffffffffff, &(0x7f0000000940)="a6049a559e887f6302dc494ee6821a54a6736c9d0de63cd85c831bb033fc0a", 0x1f, 0x3, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000a00)="58ee63cde8f418e13ac18f5b35ec82abe5d4a1d3000000000000c85b6d6d4ea6802b49316ad5026f6b6535cb0c050e16268f3cd2fb8dea17b763840e20a3d57aabf411957445f4", 0x47, 0x3ff, 0x0, 0x7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000ac0)="75d65bb3f10c971972ee72520c46ea59e1c164c987f83b6141b607f4eee2e9a46b47882201fabf42811865fabc012b35b7db9f771da90f41d3c63b2d1278ad4e1de05e582aa410381f06e501db7f5ade357eed937b78922433c0160b4aec14d4eb020c5b37f1a231f1c01bf5e2e9f911e02bdb578cfab179cd19d3a96a90b0d52200179c20ba1ef5f2bcb6008828527df3662ba34b757b827f9682d310b38f68da2610959a643105c86976a9c8b5f08c175ba75d302ae5cd138b583ccbbf0f39147f1c1c950f4874b18524bb5c7501934888e13f8b35dbc3efc04feb0d74903f08a446", 0xe3, 0x67, 0x0, 0x2, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000c00)="c295396fc72362b60921e533e4b0c4f1e04b905eae51fb25903d4dc0b068700745c8b81b1313567f8e23f141937d2aa401b85df3e7a6756c042767db62b994eda56541749104094704e7be0747766265910042cf6b114ee3c3f753af7ccdc35bf0a017e66fc80128b4c577b5995fef58e9bd729eab56b0999317bd0da828da41e53ad9553f64cb3b6aadb47c85214ab6cb2e5d4025f39ead0d879fd672c71a5bf7f58d003a56cee44bf846759b4cbd8d86aae2fc7ceb966dd3215020cc2e257798bb6237ef865a560d2264b0fa2d2bab8cec76f75005482e1abe5f1f8dfdc03f4dd5f9f0e804b77d9214d385a348477a", 0xf0, 0x594, 0x0, 0x1, r4}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000d40)="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", 0xfc, 0x0, 0x0, 0x2, r5}]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) pwrite64(r10, &(0x7f0000000840)="f1e8a251d0fce0f0859a00553fe77972c05ebe2815eb26324322febaef948546ee873edd6886dc257adec0d7e60ca4b5097169b94a09e2336e75b3613e10bec0335826f254760447b7ede2ffe1dc0e357e09d031768875e9f13b15b8f6acbb14e0302182d2b89886892866fd8dce9bebabc871de66e80bf9c166978953a804a2cc1757a6c3ce4c51cc521285fab8a960d6081c38cb5fb789", 0x98, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000cf320000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r12 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000040)="e4a2e7951e56954e735c8b4ef9f589cb966d2396e06723c7b7df27d440850f9d17f61357e9a5ba44bc6a6c2d04e86fe932b32933425400b9ecd95736edb79ee139d33d88293e5ae055919e4e7c217db0807593632213393075483fc9c3324afca0dff7143f6cda64e2571cef592b4c10134f66", 0x73, 0x3, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x35, r6, &(0x7f0000000200)="8c4510bf259fe42563d86e894b77d7913c1c8108e8ed7384f24dfc7797da39c0ea48b6a209b18a67b81f4fbc6a9d4fb1f8822ac23d169823e9f3fad5f6d974f2846d4ea830dfff89faeee49ecf7d71fc248d14de99a9ff2e3ae4a3af76d037b94a9ab431d761707927eef691517b77b3d3a93f7d9930c551512ab40fd1746a0858928ccf444defb2509f40c86de0b204693ce14d14d0699d7ad715e7d3b443a0a59d94e67d60b81ad6a4219cc74059dda5e64537c1f706", 0xb7, 0x4, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xa0, r7, &(0x7f0000000300)="d35fb19e63ce25f842a11ac949a46221269a0d9351188a67ba7d22309c3146e2b89db5a21bd0d1d21b2d754ef104b037413dc851b0fbdb42835236b7ce01508c4a26b74e8f", 0x45, 0x2, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="334aa87f4c989fb5b4027e8d61cb3df8fc4697bf73b8c22357fd1a3486b3036067f3870ff224a3e2aff2e84d21617eb41585244e0e7ab72b315fbedbc3bb8e8fb7a5484eed1d2f2eb417036d38d3", 0x4e, 0x5, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x5, r12, &(0x7f0000000500)="ef36b276433e63d2fb0692ce996e53b698b765ea474183efcdef84cdeace30a665d24a1593474808e462e90778d5133883aade24c86c3fb610a72bdca06b1001115f1d8585b4ceff959b0b7e2019252982b890be28660d461c3b1daf95c8a23de210b431910323d2727f4b70fe35b290d85d4dcec64ceff05e09cd24e548c08a112ce1011317e583997601f311f39c5c37f6b3", 0x93, 0x88f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000000600)="ee04a6145f30e4e2edf3278a0706aa0299f1dfb18bacdc56df7022b6f0b232426dc923e38efde74256f0e8a94c60fac3a8af0f86a797b43f4be17e4230357543c41671aab2dafd6548f0695f2264b85311b0c3fdc60c43f8801ec108b0512f1deb57a8c6bef2980f71ec38622034eabb7a73b71d6f672fbec8e699f133be83ae2bcc290d467e489e5fa2750648d65c64ba18985736fc90acba7c8bc189405cb8a46f14cf436e15f47995621cd6c684a37eeb19627c61245f201af607da5d4950ad1d", 0xc2, 0x2, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000740)="877eb08e19db16c4aa28e90d3505852fd5912280a75971103d73f47f844b380ac84b5609e437ef0ad4a55ceca2130ada51ec83df3266651b09b628b68e590723e436e79e9cd3bcfd6e8c0d4a80e20ca5eb27d9c1c501a1ab551e660a6c026e397b5d64bb2947247d6431c2cd21082ba05c47708619d1c5c64921151bbdb0ac4f", 0x80, 0x40, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 00:40:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000001280)='\x00', 0x0) flistxattr(r0, &(0x7f0000002300)=""/4096, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)={'#! ', './file0', [{0x20, '\\*:'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0x13) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) 00:40:01 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8}) 00:40:01 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8}) 00:40:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x2) lseek(r0, 0x0, 0x3) lseek(r0, 0x5ca5, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d40)={0x0, 0x5, 0x1e1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001140)={r1, "5e45dab67525324e248d6c770df6310e"}) fcntl$setlease(r0, 0x400, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x41) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x1b) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c1}, 0x804) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0xf8000000, 0x5, 0xfffffff8, 0x3ff, 0x44}) [ 182.749581] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:02 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) [ 182.784639] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x6f, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @padn]}, 0xe0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) 00:40:02 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x2) lseek(r0, 0x0, 0x3) lseek(r0, 0x5ca5, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d40)={0x0, 0x5, 0x1e1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001140)={r1, "5e45dab67525324e248d6c770df6310e"}) fcntl$setlease(r0, 0x400, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x41) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x1b) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c1}, 0x804) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0xf8000000, 0x5, 0xfffffff8, 0x3ff, 0x44}) 00:40:02 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x301, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='./file0\x00', 0x0, 0x2042, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8181, 0x105) 00:40:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101440) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8000, r7, &(0x7f0000001040)="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", 0x1000, 0x2c1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, 0xffffffffffffffff, &(0x7f0000000940)="a6049a559e887f6302dc494ee6821a54a6736c9d0de63cd85c831bb033fc0a", 0x1f, 0x3, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000a00)="58ee63cde8f418e13ac18f5b35ec82abe5d4a1d3000000000000c85b6d6d4ea6802b49316ad5026f6b6535cb0c050e16268f3cd2fb8dea17b763840e20a3d57aabf411957445f4", 0x47, 0x3ff, 0x0, 0x7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000ac0)="75d65bb3f10c971972ee72520c46ea59e1c164c987f83b6141b607f4eee2e9a46b47882201fabf42811865fabc012b35b7db9f771da90f41d3c63b2d1278ad4e1de05e582aa410381f06e501db7f5ade357eed937b78922433c0160b4aec14d4eb020c5b37f1a231f1c01bf5e2e9f911e02bdb578cfab179cd19d3a96a90b0d52200179c20ba1ef5f2bcb6008828527df3662ba34b757b827f9682d310b38f68da2610959a643105c86976a9c8b5f08c175ba75d302ae5cd138b583ccbbf0f39147f1c1c950f4874b18524bb5c7501934888e13f8b35dbc3efc04feb0d74903f08a446", 0xe3, 0x67, 0x0, 0x2, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000c00)="c295396fc72362b60921e533e4b0c4f1e04b905eae51fb25903d4dc0b068700745c8b81b1313567f8e23f141937d2aa401b85df3e7a6756c042767db62b994eda56541749104094704e7be0747766265910042cf6b114ee3c3f753af7ccdc35bf0a017e66fc80128b4c577b5995fef58e9bd729eab56b0999317bd0da828da41e53ad9553f64cb3b6aadb47c85214ab6cb2e5d4025f39ead0d879fd672c71a5bf7f58d003a56cee44bf846759b4cbd8d86aae2fc7ceb966dd3215020cc2e257798bb6237ef865a560d2264b0fa2d2bab8cec76f75005482e1abe5f1f8dfdc03f4dd5f9f0e804b77d9214d385a348477a", 0xf0, 0x594, 0x0, 0x1, r4}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000d40)="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", 0xfc, 0x0, 0x0, 0x2, r5}]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) pwrite64(r10, &(0x7f0000000840)="f1e8a251d0fce0f0859a00553fe77972c05ebe2815eb26324322febaef948546ee873edd6886dc257adec0d7e60ca4b5097169b94a09e2336e75b3613e10bec0335826f254760447b7ede2ffe1dc0e357e09d031768875e9f13b15b8f6acbb14e0302182d2b89886892866fd8dce9bebabc871de66e80bf9c166978953a804a2cc1757a6c3ce4c51cc521285fab8a960d6081c38cb5fb789", 0x98, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000cf320000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r12 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000040)="e4a2e7951e56954e735c8b4ef9f589cb966d2396e06723c7b7df27d440850f9d17f61357e9a5ba44bc6a6c2d04e86fe932b32933425400b9ecd95736edb79ee139d33d88293e5ae055919e4e7c217db0807593632213393075483fc9c3324afca0dff7143f6cda64e2571cef592b4c10134f66", 0x73, 0x3, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x35, r6, &(0x7f0000000200)="8c4510bf259fe42563d86e894b77d7913c1c8108e8ed7384f24dfc7797da39c0ea48b6a209b18a67b81f4fbc6a9d4fb1f8822ac23d169823e9f3fad5f6d974f2846d4ea830dfff89faeee49ecf7d71fc248d14de99a9ff2e3ae4a3af76d037b94a9ab431d761707927eef691517b77b3d3a93f7d9930c551512ab40fd1746a0858928ccf444defb2509f40c86de0b204693ce14d14d0699d7ad715e7d3b443a0a59d94e67d60b81ad6a4219cc74059dda5e64537c1f706", 0xb7, 0x4, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xa0, r7, &(0x7f0000000300)="d35fb19e63ce25f842a11ac949a46221269a0d9351188a67ba7d22309c3146e2b89db5a21bd0d1d21b2d754ef104b037413dc851b0fbdb42835236b7ce01508c4a26b74e8f", 0x45, 0x2, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="334aa87f4c989fb5b4027e8d61cb3df8fc4697bf73b8c22357fd1a3486b3036067f3870ff224a3e2aff2e84d21617eb41585244e0e7ab72b315fbedbc3bb8e8fb7a5484eed1d2f2eb417036d38d3", 0x4e, 0x5, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x5, r12, &(0x7f0000000500)="ef36b276433e63d2fb0692ce996e53b698b765ea474183efcdef84cdeace30a665d24a1593474808e462e90778d5133883aade24c86c3fb610a72bdca06b1001115f1d8585b4ceff959b0b7e2019252982b890be28660d461c3b1daf95c8a23de210b431910323d2727f4b70fe35b290d85d4dcec64ceff05e09cd24e548c08a112ce1011317e583997601f311f39c5c37f6b3", 0x93, 0x88f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000000600)="ee04a6145f30e4e2edf3278a0706aa0299f1dfb18bacdc56df7022b6f0b232426dc923e38efde74256f0e8a94c60fac3a8af0f86a797b43f4be17e4230357543c41671aab2dafd6548f0695f2264b85311b0c3fdc60c43f8801ec108b0512f1deb57a8c6bef2980f71ec38622034eabb7a73b71d6f672fbec8e699f133be83ae2bcc290d467e489e5fa2750648d65c64ba18985736fc90acba7c8bc189405cb8a46f14cf436e15f47995621cd6c684a37eeb19627c61245f201af607da5d4950ad1d", 0xc2, 0x2, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000740)="877eb08e19db16c4aa28e90d3505852fd5912280a75971103d73f47f844b380ac84b5609e437ef0ad4a55ceca2130ada51ec83df3266651b09b628b68e590723e436e79e9cd3bcfd6e8c0d4a80e20ca5eb27d9c1c501a1ab551e660a6c026e397b5d64bb2947247d6431c2cd21082ba05c47708619d1c5c64921151bbdb0ac4f", 0x80, 0x40, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) [ 182.925346] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:02 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:02 executing program 2: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x2) lseek(r0, 0x0, 0x3) lseek(r0, 0x5ca5, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d40)={0x0, 0x5, 0x1e1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001140)={r1, "5e45dab67525324e248d6c770df6310e"}) fcntl$setlease(r0, 0x400, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x41) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x1b) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r3, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c1}, 0x804) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0xf8000000, 0x5, 0xfffffff8, 0x3ff, 0x44}) [ 182.978674] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 182.990937] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 183.009772] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 183.021382] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 183.078283] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:02 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1614c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x2e9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 00:40:11 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x108) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) 00:40:11 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1614c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(r0, 0xfffffffffffffffe, 0xfffffffffffffffc) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x2e9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) 00:40:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:11 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:11 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@ll={0x11, 0x9, r7, 0x1, 0x7, 0x6, @random="2dc59e1d14be"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="1f653b91edcda0c0a8dbf6f63e93e25c03b19b664cc4b92a00e7bd22edb2ce77c1979d5fbe53a01369dee4791bf047615ab0f71171a21ec09e098f9743bb0d2c676cd6b71dd5b1bf9b2b3f393470232c40875c67433fa31cff3ae1332d3c59e56632eb63983bb4182377124089ad1e32076b21eae3086daa23de4ae6e740f0b5f8c50c75d1295b7eb91d9ba521853d69d75a03c314de5b8f3219ca897ebbf3de8315959130d860548fb7554c43741916c77cd10d6a7e6f33d6009d2528", 0xbd}, {&(0x7f0000000040)="da9437aeaee8325c1092c3d7028b131423eb11a19fe449ac2e4e5f", 0x1b}, {&(0x7f0000000300)="043db404a2f569c7918429a597dddfa964a38de2e074cc0b08a96ee3db944573c91012d01e3445880dd2e5189cea096d38ce79a06520ee5fc5be560f807892d934e736de60641fda09d79a93e0aebd0efda9093d6729b30a6a0bacd7131a2be5a9b958308d63d386b7fa48aadcf3ef9f40468c4253e32db35c37486e53077721edc1b3020cb3bb4bee247d696d19cceda20fc6", 0x93}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="777576ef0b3b8b5acc9b6463a663c75e50693ddca807e4371cdca2120575fabd5057feb4428aefcb2a27af435f80ab264ac168deaf986421a9f45d1d65965f6bddf3333bdc7fb0fed1decd2209e26de6e3c6dcdd459c1a0f", 0x58}], 0x5, &(0x7f00000005c0)=[{0xe0, 0x115, 0xfffffeff, "48cc4ba24c86fcec7644032544cc85ae7902b9f5c460aaae5b5f91f09915fbf56e051e4e15c88f038e2ce154fea4bd7e1062f91fe206a8c61455107c7095227925e14423512881c78c21ba0651f1815422a4e708ea956732ad832965b883a91f5593941333f1b21ed81cd65f79691867cf1ae1fc569b5b79f664185c521f614d2accce4ea987806042364489e35518da7d7208d7ff11e8c2a0778bcb1492b7f86bd041b3d0d4b28733814c1182ebea4969c9456ea10e8c7b68bb75e9b4bb22101dc596fb4392d8cd440751"}, {0xe8, 0x119, 0x80000001, "d9a6f9b04d02a0db4297b6101f71491ab7cc17b1a449987deb74ed948ba9df3611558fff4862c8af500dac79563e73035f71ae849d900f264e23bff49654fb0d95b9c75c4f310456df55e0f3edecfef9c597012f6d6aaa81dc2bdc15586370a1c648fa6b2e844cf74776e89dff2058afa7357f66a1549cfd0ecf68beaa6c746a4cf748ebe6dee546a4400f45ef84126b346b0373d72e37bb602194c71106a67eaa9e6326d0b405614a277f1597b23042579bd40f59a3ece7767289bf21c22b6fbe39f5723436eca9ad62718c9d92db223fd7e1af99bd5446"}, {0x80, 0x108, 0x7, "551f4b0a11a086d83dff554ef9e9e95629bab6bc7224ce599eff475f4d003ee8d30a752f2fb719c8c91a0459f316a64eab0befb2943b36bf88295f87cac1902dbb23ec2fa4641950d794f753072fa04e3237062c9ae48cf220b2ee50fcc35a5d25f00e8d5c394efe66"}, {0x108, 0x103, 0x1, "b453ae4b3d7346894d58dbecf8d2deaf1d687c5faa4ee5f7c54a5367a32540084994a24f42e4da62ca41b423317a8806ad1fe4c95a71b445a659ebae4f1d8db76c8d5e495d36d3a599336ecac55b9c89d223a5c07f70a98fa10935aa8cf362cb8e3316c34346621b40794497671844a47c1c12c9ba96dbe7a389b89179404764b68a0e4e956a5b2204c488a6683c993343dcaadae4dd328122a3be59b1c8cf896472e0bb67d4939ab1c8ef4e01b27bd918099df19da84787c8c090378272b6608d0aad29229fc92cec1c948d3119bf9ea7abff0c777359fd120ffd42dd3e3e0fd6780d2e5ebe79a384ce70ea1637e6f3283cb7a9"}], 0x350}, 0x20000000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) splice(r2, &(0x7f0000000940)=0x100000000, r9, &(0x7f0000000980)=0x8, 0x8001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:40:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000010", @ANYRES16=r3, @ANYBLOB="000427bd7000fbdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="060048000300000006004800250000000a00340001010101010100000a00f5005050505050500000"], 0x44}, 0x1, 0x0, 0x0, 0x3aa2fb117f36c06}, 0x408c0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x464184}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000700)={0x1284, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1134, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\\\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!-%-[(%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\xaf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+)/\\*^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x91\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+!!$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x84, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1217}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',@/%#.-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%*\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "445ebf82750231bfe287855ee6"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf07d4618754b9209}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1284}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x0, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf2513000000280001801400020069703667726530000000000000000000080003000200000008000300020000003c0001800800030001000000140002007465616d5f736c6176655f310000000014000200766c616e31000000000000000000000008000300000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020063616966300000000000000000000000340001801400020067656e6576653100000000000000000008000300020000001400020076657468305f746f5f7465616d00000030000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="14000200626f6e645f736c6176655f3000000000"], 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'sit0\x00', r8, 0x2f, 0x40, 0x7, 0x8, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0x4, 0x9}}) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000040)=0xfffffbff, 0x4) 00:40:11 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001000), 0x3, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x101440) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) [ 192.603274] netlink: 'syz-executor.2': attribute type 338 has an invalid length. io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x8000, r7, &(0x7f0000001040)="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", 0x1000, 0x2c1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x400, 0xffffffffffffffff, &(0x7f0000000940)="a6049a559e887f6302dc494ee6821a54a6736c9d0de63cd85c831bb033fc0a", 0x1f, 0x3, 0x0, 0x1}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000a00)="58ee63cde8f418e13ac18f5b35ec82abe5d4a1d3000000000000c85b6d6d4ea6802b49316ad5026f6b6535cb0c050e16268f3cd2fb8dea17b763840e20a3d57aabf411957445f4", 0x47, 0x3ff, 0x0, 0x7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f0000000ac0)="75d65bb3f10c971972ee72520c46ea59e1c164c987f83b6141b607f4eee2e9a46b47882201fabf42811865fabc012b35b7db9f771da90f41d3c63b2d1278ad4e1de05e582aa410381f06e501db7f5ade357eed937b78922433c0160b4aec14d4eb020c5b37f1a231f1c01bf5e2e9f911e02bdb578cfab179cd19d3a96a90b0d52200179c20ba1ef5f2bcb6008828527df3662ba34b757b827f9682d310b38f68da2610959a643105c86976a9c8b5f08c175ba75d302ae5cd138b583ccbbf0f39147f1c1c950f4874b18524bb5c7501934888e13f8b35dbc3efc04feb0d74903f08a446", 0xe3, 0x67, 0x0, 0x2, r5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000c00)="c295396fc72362b60921e533e4b0c4f1e04b905eae51fb25903d4dc0b068700745c8b81b1313567f8e23f141937d2aa401b85df3e7a6756c042767db62b994eda56541749104094704e7be0747766265910042cf6b114ee3c3f753af7ccdc35bf0a017e66fc80128b4c577b5995fef58e9bd729eab56b0999317bd0da828da41e53ad9553f64cb3b6aadb47c85214ab6cb2e5d4025f39ead0d879fd672c71a5bf7f58d003a56cee44bf846759b4cbd8d86aae2fc7ceb966dd3215020cc2e257798bb6237ef865a560d2264b0fa2d2bab8cec76f75005482e1abe5f1f8dfdc03f4dd5f9f0e804b77d9214d385a348477a", 0xf0, 0x594, 0x0, 0x1, r4}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f0000000d40)="2a029436fd4792d2146b706f68fce38447881ece18e6a01ea34fc4b13e855e789d7b662a3b40b6d828c6da7280854d31aa88aa99887ecde1591baaa3afff9de6225d3b0b8e3c641ac584ecf72ab06c8dfd38fe353075bfa5dfeafb01b0cf9b268d56348e2a77a0e0406c3e787b980f01ad0c2872b4281d117243d1391cf09cc83f7243ee600a4579957aef1db40c4a74076a7ae799e54a6da150f0b5ccd546c36896e415139560280cc2a9f923a942701b9c5ab935a4c8f58c083f27087449b858d22f7661b75a038d1dd989fc3f19596210b608299746043167f53caad57dc5116468708c591b665cf2b0e92577a92a1eec5e5fe6683621fb4865bb", 0xfc, 0x0, 0x0, 0x2, r5}]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) pwrite64(r10, &(0x7f0000000840)="f1e8a251d0fce0f0859a00553fe77972c05ebe2815eb26324322febaef948546ee873edd6886dc257adec0d7e60ca4b5097169b94a09e2336e75b3613e10bec0335826f254760447b7ede2ffe1dc0e357e09d031768875e9f13b15b8f6acbb14e0302182d2b89886892866fd8dce9bebabc871de66e80bf9c166978953a804a2cc1757a6c3ce4c51cc521285fab8a960d6081c38cb5fb789", 0x98, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000cf320000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r12 = accept$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x1c) io_submit(0x0, 0x7, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r4, &(0x7f0000000040)="e4a2e7951e56954e735c8b4ef9f589cb966d2396e06723c7b7df27d440850f9d17f61357e9a5ba44bc6a6c2d04e86fe932b32933425400b9ecd95736edb79ee139d33d88293e5ae055919e4e7c217db0807593632213393075483fc9c3324afca0dff7143f6cda64e2571cef592b4c10134f66", 0x73, 0x3, 0x0, 0x3, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x35, r6, &(0x7f0000000200)="8c4510bf259fe42563d86e894b77d7913c1c8108e8ed7384f24dfc7797da39c0ea48b6a209b18a67b81f4fbc6a9d4fb1f8822ac23d169823e9f3fad5f6d974f2846d4ea830dfff89faeee49ecf7d71fc248d14de99a9ff2e3ae4a3af76d037b94a9ab431d761707927eef691517b77b3d3a93f7d9930c551512ab40fd1746a0858928ccf444defb2509f40c86de0b204693ce14d14d0699d7ad715e7d3b443a0a59d94e67d60b81ad6a4219cc74059dda5e64537c1f706", 0xb7, 0x4, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xa0, r7, &(0x7f0000000300)="d35fb19e63ce25f842a11ac949a46221269a0d9351188a67ba7d22309c3146e2b89db5a21bd0d1d21b2d754ef104b037413dc851b0fbdb42835236b7ce01508c4a26b74e8f", 0x45, 0x2, 0x0, 0x1, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)="334aa87f4c989fb5b4027e8d61cb3df8fc4697bf73b8c22357fd1a3486b3036067f3870ff224a3e2aff2e84d21617eb41585244e0e7ab72b315fbedbc3bb8e8fb7a5484eed1d2f2eb417036d38d3", 0x4e, 0x5, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x5, r12, &(0x7f0000000500)="ef36b276433e63d2fb0692ce996e53b698b765ea474183efcdef84cdeace30a665d24a1593474808e462e90778d5133883aade24c86c3fb610a72bdca06b1001115f1d8585b4ceff959b0b7e2019252982b890be28660d461c3b1daf95c8a23de210b431910323d2727f4b70fe35b290d85d4dcec64ceff05e09cd24e548c08a112ce1011317e583997601f311f39c5c37f6b3", 0x93, 0x88f}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000000600)="ee04a6145f30e4e2edf3278a0706aa0299f1dfb18bacdc56df7022b6f0b232426dc923e38efde74256f0e8a94c60fac3a8af0f86a797b43f4be17e4230357543c41671aab2dafd6548f0695f2264b85311b0c3fdc60c43f8801ec108b0512f1deb57a8c6bef2980f71ec38622034eabb7a73b71d6f672fbec8e699f133be83ae2bcc290d467e489e5fa2750648d65c64ba18985736fc90acba7c8bc189405cb8a46f14cf436e15f47995621cd6c684a37eeb19627c61245f201af607da5d4950ad1d", 0xc2, 0x2, 0x0, 0x3, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000740)="877eb08e19db16c4aa28e90d3505852fd5912280a75971103d73f47f844b380ac84b5609e437ef0ad4a55ceca2130ada51ec83df3266651b09b628b68e590723e436e79e9cd3bcfd6e8c0d4a80e20ca5eb27d9c1c501a1ab551e660a6c026e397b5d64bb2947247d6431c2cd21082ba05c47708619d1c5c64921151bbdb0ac4f", 0x80, 0x40, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) [ 192.749217] netlink: 'syz-executor.6': attribute type 338 has an invalid length. 00:40:12 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x729b5e31bc7cc3c) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) [ 192.828883] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:12 executing program 2: set_mempolicy(0x4000, 0x0, 0x0) r0 = clone3(&(0x7f0000000000)={0x16c060300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) r2 = openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x18000, 0x1c8, 0x9}, 0x18) clone3(&(0x7f0000000440)={0x10010880, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x36}, &(0x7f0000000140)=""/236, 0xec, &(0x7f0000000240)=""/227, &(0x7f0000000380)=[r0, r0, r0, r1, r0], 0x5, {r2}}, 0x58) 00:40:12 executing program 5: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(r2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x813, 0xa, "33d406297758217c"}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffffc) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(0x0, r4, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) linkat(r5, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 00:40:12 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:12 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) io_uring_setup(0x16fc, &(0x7f0000000040)={0x0, 0xe17d, 0x0, 0x2, 0x261, 0x0, r0}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000, 0x7, 0x9, 0x0, 0x0, 0x2b38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) 00:40:12 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@ll={0x11, 0x9, r7, 0x1, 0x7, 0x6, @random="2dc59e1d14be"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="1f653b91edcda0c0a8dbf6f63e93e25c03b19b664cc4b92a00e7bd22edb2ce77c1979d5fbe53a01369dee4791bf047615ab0f71171a21ec09e098f9743bb0d2c676cd6b71dd5b1bf9b2b3f393470232c40875c67433fa31cff3ae1332d3c59e56632eb63983bb4182377124089ad1e32076b21eae3086daa23de4ae6e740f0b5f8c50c75d1295b7eb91d9ba521853d69d75a03c314de5b8f3219ca897ebbf3de8315959130d860548fb7554c43741916c77cd10d6a7e6f33d6009d2528", 0xbd}, {&(0x7f0000000040)="da9437aeaee8325c1092c3d7028b131423eb11a19fe449ac2e4e5f", 0x1b}, {&(0x7f0000000300)="043db404a2f569c7918429a597dddfa964a38de2e074cc0b08a96ee3db944573c91012d01e3445880dd2e5189cea096d38ce79a06520ee5fc5be560f807892d934e736de60641fda09d79a93e0aebd0efda9093d6729b30a6a0bacd7131a2be5a9b958308d63d386b7fa48aadcf3ef9f40468c4253e32db35c37486e53077721edc1b3020cb3bb4bee247d696d19cceda20fc6", 0x93}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="777576ef0b3b8b5acc9b6463a663c75e50693ddca807e4371cdca2120575fabd5057feb4428aefcb2a27af435f80ab264ac168deaf986421a9f45d1d65965f6bddf3333bdc7fb0fed1decd2209e26de6e3c6dcdd459c1a0f", 0x58}], 0x5, &(0x7f00000005c0)=[{0xe0, 0x115, 0xfffffeff, "48cc4ba24c86fcec7644032544cc85ae7902b9f5c460aaae5b5f91f09915fbf56e051e4e15c88f038e2ce154fea4bd7e1062f91fe206a8c61455107c7095227925e14423512881c78c21ba0651f1815422a4e708ea956732ad832965b883a91f5593941333f1b21ed81cd65f79691867cf1ae1fc569b5b79f664185c521f614d2accce4ea987806042364489e35518da7d7208d7ff11e8c2a0778bcb1492b7f86bd041b3d0d4b28733814c1182ebea4969c9456ea10e8c7b68bb75e9b4bb22101dc596fb4392d8cd440751"}, {0xe8, 0x119, 0x80000001, "d9a6f9b04d02a0db4297b6101f71491ab7cc17b1a449987deb74ed948ba9df3611558fff4862c8af500dac79563e73035f71ae849d900f264e23bff49654fb0d95b9c75c4f310456df55e0f3edecfef9c597012f6d6aaa81dc2bdc15586370a1c648fa6b2e844cf74776e89dff2058afa7357f66a1549cfd0ecf68beaa6c746a4cf748ebe6dee546a4400f45ef84126b346b0373d72e37bb602194c71106a67eaa9e6326d0b405614a277f1597b23042579bd40f59a3ece7767289bf21c22b6fbe39f5723436eca9ad62718c9d92db223fd7e1af99bd5446"}, {0x80, 0x108, 0x7, "551f4b0a11a086d83dff554ef9e9e95629bab6bc7224ce599eff475f4d003ee8d30a752f2fb719c8c91a0459f316a64eab0befb2943b36bf88295f87cac1902dbb23ec2fa4641950d794f753072fa04e3237062c9ae48cf220b2ee50fcc35a5d25f00e8d5c394efe66"}, {0x108, 0x103, 0x1, "b453ae4b3d7346894d58dbecf8d2deaf1d687c5faa4ee5f7c54a5367a32540084994a24f42e4da62ca41b423317a8806ad1fe4c95a71b445a659ebae4f1d8db76c8d5e495d36d3a599336ecac55b9c89d223a5c07f70a98fa10935aa8cf362cb8e3316c34346621b40794497671844a47c1c12c9ba96dbe7a389b89179404764b68a0e4e956a5b2204c488a6683c993343dcaadae4dd328122a3be59b1c8cf896472e0bb67d4939ab1c8ef4e01b27bd918099df19da84787c8c090378272b6608d0aad29229fc92cec1c948d3119bf9ea7abff0c777359fd120ffd42dd3e3e0fd6780d2e5ebe79a384ce70ea1637e6f3283cb7a9"}], 0x350}, 0x20000000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) splice(r2, &(0x7f0000000940)=0x100000000, r9, &(0x7f0000000980)=0x8, 0x8001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 00:40:12 executing program 0: capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:12 executing program 5: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup(r2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x813, 0xa, "33d406297758217c"}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffffc) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(0x0, r4, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) linkat(r5, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 00:40:12 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg(r3, &(0x7f00000000c0)={&(0x7f00000001c0)=@ll={0x11, 0x9, r7, 0x1, 0x7, 0x6, @random="2dc59e1d14be"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="1f653b91edcda0c0a8dbf6f63e93e25c03b19b664cc4b92a00e7bd22edb2ce77c1979d5fbe53a01369dee4791bf047615ab0f71171a21ec09e098f9743bb0d2c676cd6b71dd5b1bf9b2b3f393470232c40875c67433fa31cff3ae1332d3c59e56632eb63983bb4182377124089ad1e32076b21eae3086daa23de4ae6e740f0b5f8c50c75d1295b7eb91d9ba521853d69d75a03c314de5b8f3219ca897ebbf3de8315959130d860548fb7554c43741916c77cd10d6a7e6f33d6009d2528", 0xbd}, {&(0x7f0000000040)="da9437aeaee8325c1092c3d7028b131423eb11a19fe449ac2e4e5f", 0x1b}, {&(0x7f0000000300)="043db404a2f569c7918429a597dddfa964a38de2e074cc0b08a96ee3db944573c91012d01e3445880dd2e5189cea096d38ce79a06520ee5fc5be560f807892d934e736de60641fda09d79a93e0aebd0efda9093d6729b30a6a0bacd7131a2be5a9b958308d63d386b7fa48aadcf3ef9f40468c4253e32db35c37486e53077721edc1b3020cb3bb4bee247d696d19cceda20fc6", 0x93}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="777576ef0b3b8b5acc9b6463a663c75e50693ddca807e4371cdca2120575fabd5057feb4428aefcb2a27af435f80ab264ac168deaf986421a9f45d1d65965f6bddf3333bdc7fb0fed1decd2209e26de6e3c6dcdd459c1a0f", 0x58}], 0x5, &(0x7f00000005c0)=[{0xe0, 0x115, 0xfffffeff, "48cc4ba24c86fcec7644032544cc85ae7902b9f5c460aaae5b5f91f09915fbf56e051e4e15c88f038e2ce154fea4bd7e1062f91fe206a8c61455107c7095227925e14423512881c78c21ba0651f1815422a4e708ea956732ad832965b883a91f5593941333f1b21ed81cd65f79691867cf1ae1fc569b5b79f664185c521f614d2accce4ea987806042364489e35518da7d7208d7ff11e8c2a0778bcb1492b7f86bd041b3d0d4b28733814c1182ebea4969c9456ea10e8c7b68bb75e9b4bb22101dc596fb4392d8cd440751"}, {0xe8, 0x119, 0x80000001, "d9a6f9b04d02a0db4297b6101f71491ab7cc17b1a449987deb74ed948ba9df3611558fff4862c8af500dac79563e73035f71ae849d900f264e23bff49654fb0d95b9c75c4f310456df55e0f3edecfef9c597012f6d6aaa81dc2bdc15586370a1c648fa6b2e844cf74776e89dff2058afa7357f66a1549cfd0ecf68beaa6c746a4cf748ebe6dee546a4400f45ef84126b346b0373d72e37bb602194c71106a67eaa9e6326d0b405614a277f1597b23042579bd40f59a3ece7767289bf21c22b6fbe39f5723436eca9ad62718c9d92db223fd7e1af99bd5446"}, {0x80, 0x108, 0x7, "551f4b0a11a086d83dff554ef9e9e95629bab6bc7224ce599eff475f4d003ee8d30a752f2fb719c8c91a0459f316a64eab0befb2943b36bf88295f87cac1902dbb23ec2fa4641950d794f753072fa04e3237062c9ae48cf220b2ee50fcc35a5d25f00e8d5c394efe66"}, {0x108, 0x103, 0x1, "b453ae4b3d7346894d58dbecf8d2deaf1d687c5faa4ee5f7c54a5367a32540084994a24f42e4da62ca41b423317a8806ad1fe4c95a71b445a659ebae4f1d8db76c8d5e495d36d3a599336ecac55b9c89d223a5c07f70a98fa10935aa8cf362cb8e3316c34346621b40794497671844a47c1c12c9ba96dbe7a389b89179404764b68a0e4e956a5b2204c488a6683c993343dcaadae4dd328122a3be59b1c8cf896472e0bb67d4939ab1c8ef4e01b27bd918099df19da84787c8c090378272b6608d0aad29229fc92cec1c948d3119bf9ea7abff0c777359fd120ffd42dd3e3e0fd6780d2e5ebe79a384ce70ea1637e6f3283cb7a9"}], 0x350}, 0x20000000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) splice(r2, &(0x7f0000000940)=0x100000000, r9, &(0x7f0000000980)=0x8, 0x8001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 193.408384] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 193.506974] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:40:22 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:22 executing program 0: capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:22 executing program 2: syz_emit_ethernet(0x7b, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@val={0x9100, 0x7, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x3d, 0x11, 0x0, @private0, @rand_addr=' \x01\x00', {[], {0x0, 0x0, 0x3d, 0x0, @gue={{0x1, 0x1, 0x2, 0x6, 0x100, @void}, "012d91f354db39c35603e2fe77ad388428732394f82e3fb57a1fc16fb0df59444acf78ab7b97be408534a256e7b9762430"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/129, 0x81}], 0x4, &(0x7f00000003c0)=""/33, 0x21}}, {{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/58, 0x3a}, {&(0x7f0000000700)=""/222, 0xde}], 0x7, &(0x7f0000000880)=""/9, 0x9}, 0x5}, {{&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000009c0)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/82, 0x52}], 0x5}, 0x6}], 0x3, 0x40000060, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0xc56, 0xffff) 00:40:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) 00:40:22 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x24400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r2, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r0, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r6, 0x10, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x42}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x5, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2e}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x401}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf7}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300991a200192bb2231b748d13e8ebd81", @ANYRES32=r7, @ANYBLOB="0c00238006001b0000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6760}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r10, 0x0, 0x0) 00:40:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 00:40:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 202.875132] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 202.883876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 202.899203] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 202.908585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:40:22 executing program 0: capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:22 executing program 2: stat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)) 00:40:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x24400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r2, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r0, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r6, 0x10, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x42}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x5, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2e}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x401}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf7}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300991a200192bb2231b748d13e8ebd81", @ANYRES32=r7, @ANYBLOB="0c00238006001b0000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6760}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r10, 0x0, 0x0) 00:40:22 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x24400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r2, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r0, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r6, 0x10, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x42}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x5, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2e}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x401}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf7}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300991a200192bb2231b748d13e8ebd81", @ANYRES32=r7, @ANYBLOB="0c00238006001b0000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6760}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r10, 0x0, 0x0) [ 203.105151] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:40:22 executing program 0: capset(&(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) [ 203.129007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:40:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x24400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r2, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r0, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r6, 0x10, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x42}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x5, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2e}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x401}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf7}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300991a200192bb2231b748d13e8ebd81", @ANYRES32=r7, @ANYBLOB="0c00238006001b0000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6760}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r10, 0x0, 0x0) [ 203.231178] netlink: 'syz-executor.2': attribute type 338 has an invalid length. [ 203.243445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.317826] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 203.336183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 212.601596] Bluetooth: hci6: command 0x0406 tx timeout [ 212.607097] Bluetooth: hci0: command 0x0406 tx timeout [ 212.608675] Bluetooth: hci3: command 0x0406 tx timeout [ 212.608731] Bluetooth: hci1: command 0x0406 tx timeout [ 212.610281] Bluetooth: hci2: command 0x0406 tx timeout [ 212.610555] Bluetooth: hci5: command 0x0406 tx timeout [ 212.610752] Bluetooth: hci4: command 0x0406 tx timeout [ 213.028581] netlink: 'syz-executor.2': attribute type 338 has an invalid length. [ 213.031285] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:32 executing program 0: capset(&(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) 00:40:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:40:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @multicast1}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1000}}}}}}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x60}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 00:40:32 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x24400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, r2, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x81, 0x13}}}}}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = pidfd_getfd(r0, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r6, 0x10, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x42}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x5, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2e}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x401}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xf7}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20048000) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@sco={0x1f, @fixed}, &(0x7f0000000500)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300991a200192bb2231b748d13e8ebd81", @ANYRES32=r7, @ANYBLOB="0c00238006001b0000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6760}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r10, 0x0, 0x0) 00:40:32 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:32 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) 00:40:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) close(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x9, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) [ 213.056679] Bluetooth: hci7: link tx timeout [ 213.057619] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 213.097137] Bluetooth: hci7: link tx timeout [ 213.097894] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 213.152296] Bluetooth: hci7: link tx timeout [ 213.153195] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa 00:40:32 executing program 0: capset(&(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0xfffffffe}) [ 213.184234] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:40:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, 0x0) [ 213.205896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:40:32 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400001, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x40, 0x1, 0x8, 0x40, 0x0, 0x200, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0x6}, 0x208, 0x9, 0x2ea, 0x6, 0x1, 0x7, 0x3, 0x0, 0x81, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x200) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@multicast1}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) 00:40:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) 00:40:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, 0x0) [ 213.354281] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:32 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0x0) [ 213.450335] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 213.453331] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 213.455633] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 213.456881] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 04 00 [ 213.458219] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 213.468521] netlink: 'syz-executor.2': attribute type 338 has an invalid length. [ 213.474353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 213.475078] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.476037] Buffer I/O error on dev sr0, logical block 8, async page read [ 213.484179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 213.484791] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.485560] Buffer I/O error on dev sr0, logical block 9, async page read 00:40:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, 0x0) [ 213.526269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 213.527019] I/O error, dev sr0, sector 10 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 0 [ 213.527704] Buffer I/O error on dev sr0, logical block 10, async page read [ 213.528304] Buffer I/O error on dev sr0, logical block 11, async page read [ 213.528918] Buffer I/O error on dev sr0, logical block 12, async page read [ 213.529511] Buffer I/O error on dev sr0, logical block 13, async page read [ 213.530098] Buffer I/O error on dev sr0, logical block 14, async page read [ 213.530695] Buffer I/O error on dev sr0, logical block 15, async page read [ 213.532123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 213.532717] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.533372] Buffer I/O error on dev sr0, logical block 8, async page read 00:40:32 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 213.551359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 213.552465] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0 [ 213.553724] Buffer I/O error on dev sr0, logical block 9, async page read [ 213.581437] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 213.583903] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 213.584967] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 213.585984] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 213.587108] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 213.680293] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 213.681748] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 213.682789] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 213.683787] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 213.684922] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 213.810064] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 213.811613] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 213.812990] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 213.814001] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 213.815110] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 215.099773] Bluetooth: hci7: command 0x0406 tx timeout 00:40:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:40:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) 00:40:43 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:40:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:43 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:43 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4fa2ce298cb65ff01e5143ef85c3c17825597009a6e3bc2e", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 00:40:43 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0x0) [ 223.681000] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 223.746656] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 223.748317] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 223.749614] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 223.750617] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 04 00 [ 223.751734] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 223.753994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.755133] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.756691] buffer_io_error: 30 callbacks suppressed [ 223.756706] Buffer I/O error on dev sr0, logical block 8, async page read [ 223.793545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.795721] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0 [ 223.796356] Buffer I/O error on dev sr0, logical block 9, async page read [ 223.798106] Buffer I/O error on dev sr0, logical block 10, async page read [ 223.798705] Buffer I/O error on dev sr0, logical block 11, async page read [ 223.799304] Buffer I/O error on dev sr0, logical block 12, async page read [ 223.799889] Buffer I/O error on dev sr0, logical block 13, async page read [ 223.800455] Buffer I/O error on dev sr0, logical block 14, async page read [ 223.801056] Buffer I/O error on dev sr0, logical block 15, async page read [ 223.801920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.802874] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.804100] Buffer I/O error on dev sr0, logical block 8, async page read [ 223.819193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.820335] I/O error, dev sr0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 223.821748] Buffer I/O error on dev sr0, logical block 9, async page read [ 223.840304] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 223.841854] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 223.842895] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 223.843895] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 03 00 00 01 00 [ 223.845026] I/O error, dev sr0, sector 12 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 223.847856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.848303] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 223.849187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.849740] I/O error, dev sr0, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.862391] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 223.864006] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 223.865162] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 223.866175] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 03 00 00 01 00 [ 223.867292] I/O error, dev sr0, sector 12 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 223.869195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.870368] I/O error, dev sr0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.874701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.879935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.881849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.888706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:40:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 223.900770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.904738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 223.910818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:40:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) 00:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) 00:40:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 224.009118] netlink: 'syz-executor.2': attribute type 338 has an invalid length. [ 224.050291] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:40:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) [ 224.379875] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) [ 224.447972] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:40:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:40:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) 00:40:43 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) (fail_nth: 1) 00:40:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b820000000000000000000000000000000a000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33353633373030303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000400)="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", 0xfa, 0x560}, {&(0x7f0000010300)='P', 0x1, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040080", 0x1d, 0x4080}, {&(0x7f0000013000)="504d4d50cd000200", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x2820000, &(0x7f0000000040)=ANY=[@ANYBLOB="0012b3cc033cf15c01b96d050b1647"]) [ 224.668884] FAULT_INJECTION: forcing a failure. [ 224.668884] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 224.669874] CPU: 1 UID: 0 PID: 4466 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 224.669890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 224.669898] Call Trace: [ 224.669902] [ 224.669907] dump_stack_lvl+0xfa/0x120 [ 224.669933] should_fail_ex+0x4d7/0x5e0 [ 224.669957] _copy_from_user+0x30/0xd0 [ 224.669978] __do_sys_capset+0x1dd/0x450 [ 224.669998] ? __pfx___do_sys_capset+0x10/0x10 [ 224.670016] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 224.670037] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 224.670058] ? ksys_write+0x1a3/0x240 [ 224.670075] do_syscall_64+0xbf/0x360 [ 224.670091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.670104] RIP: 0033:0x7fe019041b19 [ 224.670113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.670125] RSP: 002b:00007fe0165b7188 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 224.670137] RAX: ffffffffffffffda RBX: 00007fe019154f60 RCX: 00007fe019041b19 [ 224.670145] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 224.670153] RBP: 00007fe0165b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.670160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.670167] R13: 00007ffe6d04f75f R14: 00007fe0165b7300 R15: 0000000000022000 [ 224.670183] 00:40:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:40:44 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) (fail_nth: 2) [ 224.760332] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 224.778966] FAULT_INJECTION: forcing a failure. [ 224.778966] name failslab, interval 1, probability 0, space 0, times 1 [ 224.780938] CPU: 0 UID: 0 PID: 4475 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 224.780977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 224.780995] Call Trace: [ 224.781004] [ 224.781013] dump_stack_lvl+0xfa/0x120 [ 224.781050] should_fail_ex+0x4d7/0x5e0 [ 224.781094] ? prepare_creds+0x2c/0x7e0 [ 224.781119] should_failslab+0xc2/0x120 [ 224.781150] kmem_cache_alloc_noprof+0x5f/0x470 [ 224.781201] ? __might_fault+0xe0/0x190 [ 224.781236] prepare_creds+0x2c/0x7e0 [ 224.781273] __do_sys_capset+0x261/0x450 [ 224.781312] ? __pfx___do_sys_capset+0x10/0x10 [ 224.781345] ? perf_trace_preemptirq_template+0x259/0x430 [ 224.781398] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 224.781440] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 224.781494] ? ksys_write+0x1a3/0x240 [ 224.781533] do_syscall_64+0xbf/0x360 [ 224.781565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.781593] RIP: 0033:0x7fe019041b19 [ 224.781612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.781633] RSP: 002b:00007fe0165b7188 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 224.781655] RAX: ffffffffffffffda RBX: 00007fe019154f60 RCX: 00007fe019041b19 [ 224.781671] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 224.781684] RBP: 00007fe0165b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.781698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.781712] R13: 00007ffe6d04f75f R14: 00007fe0165b7300 R15: 0000000000022000 [ 224.781741] [ 224.814711] loop2: detected capacity change from 0 to 264192 [ 224.836123] loop2: detected capacity change from 0 to 264192 00:40:44 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) (fail_nth: 3) 00:40:55 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) (fail_nth: 4) 00:40:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:40:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:40:55 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) sendfile(r0, r1, 0x0, 0xf5) 00:40:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r2, 0x0) setpriority(0x0, 0x0, 0x47) fork() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)) fork() fallocate(r2, 0x11, 0x13, 0x10001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0xae, 0x3, 0x2, 0x0, 0x180000000000000, 0x110, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x4, 0x9}, 0x10020, 0xde, 0x9, 0x6, 0x8, 0x7fff, 0x7, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r2, 0x3) 00:40:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b820000000000000000000000000000000a000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33353633373030303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000400)="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", 0xfa, 0x560}, {&(0x7f0000010300)='P', 0x1, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040080", 0x1d, 0x4080}, {&(0x7f0000013000)="504d4d50cd000200", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x2820000, &(0x7f0000000040)=ANY=[@ANYBLOB="0012b3cc033cf15c01b96d050b1647"]) [ 235.889876] loop2: detected capacity change from 0 to 264192 [ 235.909318] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 235.916854] FAULT_INJECTION: forcing a failure. [ 235.916854] name failslab, interval 1, probability 0, space 0, times 0 [ 235.918675] CPU: 0 UID: 0 PID: 4507 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 235.918709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 235.918723] Call Trace: [ 235.918731] [ 235.918741] dump_stack_lvl+0xfa/0x120 [ 235.918774] should_fail_ex+0x4d7/0x5e0 [ 235.918814] ? security_prepare_creds+0x101/0x160 [ 235.918849] should_failslab+0xc2/0x120 [ 235.918876] __kmalloc_noprof+0xb4/0x4b0 [ 235.918920] security_prepare_creds+0x101/0x160 [ 235.918958] prepare_creds+0x579/0x7e0 [ 235.918988] __do_sys_capset+0x261/0x450 [ 235.919021] ? __pfx___do_sys_capset+0x10/0x10 [ 235.919054] ? perf_trace_preemptirq_template+0x259/0x430 [ 235.919101] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 235.919141] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 235.919184] ? ksys_write+0x1a3/0x240 [ 235.919219] do_syscall_64+0xbf/0x360 [ 235.919248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.919274] RIP: 0033:0x7fe019041b19 [ 235.919294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 235.919317] RSP: 002b:00007fe0165b7188 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 235.919342] RAX: ffffffffffffffda RBX: 00007fe019154f60 RCX: 00007fe019041b19 [ 235.919359] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 235.919374] RBP: 00007fe0165b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 235.919389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.919404] R13: 00007ffe6d04f75f R14: 00007fe0165b7300 R15: 0000000000022000 [ 235.919436] 00:40:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:40:55 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) (fail_nth: 5) [ 249.233434] loop2: detected capacity change from 0 to 8336 00:41:08 executing program 5: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7, 0x0, 0x1}, 0x20) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x0, 0x57f, 0x0, 0x7, 0x1, [{0x9bf, 0x0, 0x0, '\x00', 0x1000}]}) 00:41:08 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) (fail_nth: 6) 00:41:08 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x8) 00:41:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:08 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:41:08 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) 00:41:08 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) [ 249.249261] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 249.252953] EXT4-fs (loop2): get root inode failed [ 249.253416] EXT4-fs (loop2): mount failed [ 249.262585] loop2: detected capacity change from 0 to 8336 [ 249.270618] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 249.272795] EXT4-fs (loop2): get root inode failed [ 249.273260] EXT4-fs (loop2): mount failed [ 249.285454] FAULT_INJECTION: forcing a failure. [ 249.285454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.287000] CPU: 0 UID: 0 PID: 4530 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 249.287025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 249.287036] Call Trace: [ 249.287042] [ 249.287048] dump_stack_lvl+0xfa/0x120 [ 249.287076] should_fail_ex+0x4d7/0x5e0 [ 249.287108] _copy_to_user+0x32/0xd0 [ 249.287140] simple_read_from_buffer+0xe0/0x180 [ 249.287171] proc_fail_nth_read+0x189/0x270 [ 249.287204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.287236] ? security_file_permission+0x22/0x90 [ 249.287264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.287295] vfs_read+0x1eb/0xbe0 [ 249.287330] ? __pfx_vfs_read+0x10/0x10 [ 249.287360] ? lock_release+0xc8/0x290 [ 249.287386] ? __fget_files+0x20d/0x3b0 [ 249.287426] ksys_read+0x121/0x240 [ 249.287442] ? __pfx_ksys_read+0x10/0x10 [ 249.287473] do_syscall_64+0xbf/0x360 [ 249.287497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.287516] RIP: 0033:0x7fe018ff469c [ 249.287529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 249.287549] RSP: 002b:00007fe0165b7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.287569] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe018ff469c [ 249.287581] RDX: 000000000000000f RSI: 00007fe0165b71e0 RDI: 0000000000000003 [ 249.287592] RBP: 00007fe0165b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.287604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.287614] R13: 00007ffe6d04f75f R14: 00007fe0165b7300 R15: 0000000000022000 [ 249.287640] 00:41:08 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x8) 00:41:08 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:41:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) [ 249.520415] loop2: detected capacity change from 0 to 8336 [ 249.534556] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 249.538914] EXT4-fs (loop2): get root inode failed [ 249.539706] EXT4-fs (loop2): mount failed 00:41:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x8) 00:41:09 executing program 7: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) [ 249.739139] capability: warning: `syz-executor.7' uses 32-bit capabilities (legacy support in use) [ 249.753051] loop2: detected capacity change from 0 to 8336 [ 249.785769] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 249.795830] EXT4-fs (loop2): get root inode failed [ 249.796828] EXT4-fs (loop2): mount failed 00:41:20 executing program 7: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 00:41:20 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x8) 00:41:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:41:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x238, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf5, 0x3, "be164bba29ed22b5ae62bb88f2fef6fe17947431ee6f93bd4b45a5c875a87207469278da9a6709a94a35b96d06901e2457fcf5eff0708f60b0573e72311ef5ce964f914bff665e892b368d34f7a9fc1c683a671791bb6b570e21c1f61f499f9566efdcb55e93130c4d2a49ff424a8b80f6adb83522d0d915e03114dfcb174e17e5b10a51c018911f07bad903a1fa9d65fd33f1aec1068c518c223dc9fa3ecedc286cde981e08df400442189e2aed3fcb8ef4f429c35a32a6621f116081622a61ae9b351eb2e0d68105b85fa0d3b8414bba07ad61a3aef298118763ad17c4ceaadc2edc77ca80f23fef02736b2e9eddf468"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "24e8bf36fb1869c11a0bd1b3e8cac9cbe85980440cf35689"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "344633a105c5531735d1ad075b215b7f5798e8835e2ce5729988259471f2991dfd054789a398a0e8e9136127c08423b4839ec75faba292"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_loaded', 0x31b02, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c011) accept4(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000d34678f0d66e36d04b7230d5b5efa45f84fc712d1b240fef619ac28adea389bb6a6f25972e9847d0af0b6a23271aa051efdbfabbbb86334616c764f321ca9b86f7e936450cf40f715982824f972509e974b0bdbf6bbb3dd7975f0015db5fe41be67626c8323bb5a63f70ad42a8dcce6b3a6f6e7c9e26dd7bcff5", 0x82, 0x2200}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:20 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(r1, 0x7ff, 0x0) 00:41:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x3f5, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="34000000f7ceace1dbb6a6ce13a742f40518884ac23ec705bd3f6b8a1a220d12f6264cce86b0c15f624ae0eaca15715dc2da0238980549", @ANYRES16=r8, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r9, @ANYBLOB="0a001a00ffffffffffff00000a0006000802110000010000"], 0x34}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="73797a318bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183087b9b87556d745a437abf3eb80d5b2167548578731c678e581bd0d54c57a7d4217c75c0c0d6d080c8b883aff892890614466c5007eefe1f44ba"], 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xa8}}, 0x10) 00:41:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) [ 261.292224] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1013 sclass=netlink_xfrm_socket pid=4573 comm=syz-executor.5 [ 261.315644] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure 00:41:20 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 261.322767] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 261.337512] loop2: detected capacity change from 0 to 8336 [ 261.356158] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 261.357596] loop6: detected capacity change from 0 to 8336 [ 261.364524] EXT4-fs (loop2): get root inode failed [ 261.365015] EXT4-fs (loop2): mount failed 00:41:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 261.421751] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: bogus i_mode (0) 00:41:20 executing program 7: capset(&(0x7f00000000c0)={0x20080502}, &(0x7f0000000100)) [ 261.452630] EXT4-fs (loop6): get root inode failed [ 261.453517] EXT4-fs (loop6): mount failed [ 261.473220] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4600 comm=syz-executor.5 [ 261.498197] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 261.571351] loop2: detected capacity change from 0 to 8336 [ 261.584436] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 261.593301] EXT4-fs (loop2): get root inode failed [ 261.593785] EXT4-fs (loop2): mount failed [ 261.632304] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1013 sclass=netlink_xfrm_socket pid=4573 comm=syz-executor.5 00:41:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x238, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf5, 0x3, "be164bba29ed22b5ae62bb88f2fef6fe17947431ee6f93bd4b45a5c875a87207469278da9a6709a94a35b96d06901e2457fcf5eff0708f60b0573e72311ef5ce964f914bff665e892b368d34f7a9fc1c683a671791bb6b570e21c1f61f499f9566efdcb55e93130c4d2a49ff424a8b80f6adb83522d0d915e03114dfcb174e17e5b10a51c018911f07bad903a1fa9d65fd33f1aec1068c518c223dc9fa3ecedc286cde981e08df400442189e2aed3fcb8ef4f429c35a32a6621f116081622a61ae9b351eb2e0d68105b85fa0d3b8414bba07ad61a3aef298118763ad17c4ceaadc2edc77ca80f23fef02736b2e9eddf468"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "24e8bf36fb1869c11a0bd1b3e8cac9cbe85980440cf35689"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "344633a105c5531735d1ad075b215b7f5798e8835e2ce5729988259471f2991dfd054789a398a0e8e9136127c08423b4839ec75faba292"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_loaded', 0x31b02, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c011) accept4(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000d34678f0d66e36d04b7230d5b5efa45f84fc712d1b240fef619ac28adea389bb6a6f25972e9847d0af0b6a23271aa051efdbfabbbb86334616c764f321ca9b86f7e936450cf40f715982824f972509e974b0bdbf6bbb3dd7975f0015db5fe41be67626c8323bb5a63f70ad42a8dcce6b3a6f6e7c9e26dd7bcff5", 0x82, 0x2200}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:21 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x1) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0x354, 0x80, 0xe0c6, 0xff, 0x1ff, 0x7fff}) 00:41:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 261.710460] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 261.733879] loop6: detected capacity change from 0 to 8336 [ 261.761086] loop2: detected capacity change from 0 to 8336 00:41:21 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x20, 0xf38, 0x6}) [ 261.769552] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: bogus i_mode (0) [ 261.779764] EXT4-fs (loop6): get root inode failed [ 261.780848] EXT4-fs (loop6): mount failed [ 261.813623] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4573 comm=syz-executor.5 00:41:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x3f5, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="34000000f7ceace1dbb6a6ce13a742f40518884ac23ec705bd3f6b8a1a220d12f6264cce86b0c15f624ae0eaca15715dc2da0238980549", @ANYRES16=r8, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r9, @ANYBLOB="0a001a00ffffffffffff00000a0006000802110000010000"], 0x34}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="73797a318bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183087b9b87556d745a437abf3eb80d5b2167548578731c678e581bd0d54c57a7d4217c75c0c0d6d080c8b883aff892890614466c5007eefe1f44ba"], 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xa8}}, 0x10) 00:41:21 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)) [ 261.940552] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1013 sclass=netlink_xfrm_socket pid=4632 comm=syz-executor.5 [ 262.107373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4632 comm=syz-executor.5 00:41:30 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x2, 0x101, 0xffffffff, 0x6, 0x7}) 00:41:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x238, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf5, 0x3, "be164bba29ed22b5ae62bb88f2fef6fe17947431ee6f93bd4b45a5c875a87207469278da9a6709a94a35b96d06901e2457fcf5eff0708f60b0573e72311ef5ce964f914bff665e892b368d34f7a9fc1c683a671791bb6b570e21c1f61f499f9566efdcb55e93130c4d2a49ff424a8b80f6adb83522d0d915e03114dfcb174e17e5b10a51c018911f07bad903a1fa9d65fd33f1aec1068c518c223dc9fa3ecedc286cde981e08df400442189e2aed3fcb8ef4f429c35a32a6621f116081622a61ae9b351eb2e0d68105b85fa0d3b8414bba07ad61a3aef298118763ad17c4ceaadc2edc77ca80f23fef02736b2e9eddf468"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "24e8bf36fb1869c11a0bd1b3e8cac9cbe85980440cf35689"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "344633a105c5531735d1ad075b215b7f5798e8835e2ce5729988259471f2991dfd054789a398a0e8e9136127c08423b4839ec75faba292"}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_loaded', 0x31b02, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c011) accept4(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000d34678f0d66e36d04b7230d5b5efa45f84fc712d1b240fef619ac28adea389bb6a6f25972e9847d0af0b6a23271aa051efdbfabbbb86334616c764f321ca9b86f7e936450cf40f715982824f972509e974b0bdbf6bbb3dd7975f0015db5fe41be67626c8323bb5a63f70ad42a8dcce6b3a6f6e7c9e26dd7bcff5", 0x82, 0x2200}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) 00:41:30 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 00:41:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:30 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 270.701445] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 270.710438] loop5: detected capacity change from 0 to 8336 [ 270.711073] loop2: detected capacity change from 0 to 8336 [ 270.723826] loop6: detected capacity change from 0 to 8336 00:41:30 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0xaae}) capset(&(0x7f0000003780)={0x20071026, 0xffffffffffffffff}, &(0x7f00000037c0)={0x3f, 0x9, 0x4c, 0x8, 0x5, 0x800}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x0) [ 270.732506] EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: bogus i_mode (0) sendmsg$unix(r1, &(0x7f0000003740)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="82a4ce1c3e0412f15d281ba4adea3454971b9c83052c82c763bcf9c1709e0f720b8b66c3f5a8e45d3b4366b6a87b17a8392b30a361bbda188a3f3a953790e9b8c7bcb65e2b152de0534a3811ef05f41d14c5b091375ca295f96a55f7785ed411f8358ed80495443d00bc05365ca531bcdbb04cf70609f149b775d6d5fff80bdeb449aa3b672cba0a47281bb79014faa4a71e1b2ef607f58854e871422d624807b4f14dbc14818fb2dd109fe724d2d5fdee9d", 0xb2}, {&(0x7f0000001300)="1cdac3865bc9014ec8e2e8739a61f41e2dba3fa495a098a00ab10b8155c7340880aad64326b5af6654ae55669f4112728bfc8a7328aeee338dc8ca94d859601787d9599dcd7f573dd173e6bb5fb793999320229d5c2fe33d355f4005fefb6d92bad9bd72aa8999ff71b56fa9d544592fe297c86f147ffefcdc53e6e71687b1e5f17b8f7775075be5f9755a00c0c49c5e537414e6ba", 0x95}, {&(0x7f00000013c0)="3e0440ac49192ba167fb7dc460f0b00a04a533dc5eea8bcc69601eab97b6472ec545592ff105d5f7fb5673eb225e75d15cdba438e6bce4cd0262c307637f487694d86a43080e24aabad8a242b3c76f907516e554af89", 0x56}, {&(0x7f0000001440)="f5d5742ed42ae6b10a595579bad5b7976808276371c07f86712d52a1082b854a842b104f9a25b24c1ca64a26190fbead2dd81a47aa201fd13c77620eeb0dcb288258702e51d021f33fb1be408328dc5c4052f7eb5aef32dfde319126c31e440ead2fe7748c5d72ae58efba0c4869c02fe03eb16ebcea1e076b193bc40b64bf03ff8350cbcac39a135b4e452da0ab16efda02fca229bc032d8d9702489308e6f499104a56c51d654da7d5017c93b8956bc446f68dee8f5f8cf086e57b66572fb35859a5df059d9a3e583c4e79e2efb84f31c4daa45826e53e3851e496b5fb7edb5992b752d907f0e80415d068891d9fa71bed0341f8b7d9604da026fa673a3ad79a2ced7ac4b67585922baa0440c02ce53bee3fc9254c88bbc3038fe452be6bfcd469c52c9ace66b0434cde9e990e3477933ca1e7259a1dbe2ad1f0f462803c78b8740135ff3a351a76e3957d3ce114c1b1d641e2717f326afaf3a30bfd97a96b0f1e6297d37ec208dccccfa183593b1fd1348ab076db255597cc8a1c0066977b6e84d451075cf5cf13ec6f02f914e56ada43aa067a31174869c2ee86401236137a4e2bab905d49cbf821705ba9aa90bf4e36ddc9ad02efd8346335b9102c4bb58e61a326702cc5beccf685e0e9f8120971cb042f79040f50ae021293d211d24f18a0d95aa3550339241f686b479aedf96ad007beadbf00664205d59404e77114bc02a8ae994ff5dea0f9ea3f2608a236545e8cde2bceba1bb86f8a95900d298d04e786f5105312ce14f2f595b949bac16fbf8b24a26c2a42557c329b836711973a9b9f21309c2ff6286ed9fe190c3a141bfb27c8a590b04cffca931f4e808809962505150c57303dc3506d5de0b52f12733682d457520533352e6ed7cc08a3bf4be28325d6292742fbe1f2a32bbf14c45388cc7e72262e314775fa5a10c43c67c34a72fbd69c2457f9270272af1d6f77657239869bc23c28fd8947347aedb83def35ab6a2720b147c8ef707d22d15c2bf43fcf5f108e3330d808ba9045a8fc128dc296cff313186b9ef42fb23ee901ad5214420316a78390d02768fc742d8f860ab527cddc120ca83b4481694d9a53355ab38f963ef9dce6658674509755bcfb8ffa3e927bc50d135807e86c84485c5b51de8cdf1bf6924a1ff988aa90372513542611642b92542f5726e4bcb9220f2d853edc98d80afc7c974f68413953e3d5410975ec7f1b154377aacfd4e07a65c3f8d5ee2a619513f3415334bf1c4cb1037b39631da2be03498014cd08e6017f37fbeccaa9c0f3e75113ebd654246838cc3855beccb8a741a415ddf3363c2486ed3e042ce37a09061e4a9c32000a59887e96c8090c055dca19f4cc2bcb8eb50c8a727ae621454c754813520b71e4b94ccab0c890d7bc065e471d470bb4a42a13d65538c811000b5b812d8d7a70c575fc7bfb7ec0d3605f727bb2418211a604eddebde77ed4d0cbeb410c71fd9196984fe197fed9ffc203b8a9ddea665d49aa5f2ec6942ab7968b15bb156a9aba7e579874fb2b382f351f2fb66a8865d0457e3190e45ce5bf232cf897342dbae9a32b37cb2f2dec76e7cee89d76818f8f4adc893734cee7a1ba3936ceb2023f5fe20a086aaa7ecbff7e746327e636e8ed09d60d21c3075d0589cd0058c5b2b0506ff798bad29a0dfa45efea10c0edeaef615e7d54c7601e645c69f4406fa8fd41b6c42d1c134319383aab46ca6fb7fa13b5396bfcb4189c615f0b91004863a4f7d43274586df69fbd4b6d8f712a06f63730f87da0537c4702feea37a6bc17a11b79e192d620c7339fae256255a830ff2a8d34ed62ed35045b969d877004f975fcff5f42dc136852a6f58113b3307cee1f63f2c44320675eea8ef63490b1977bab0646bcecf05d631dcaaef6b4af451dd9a48004ea893e2e4ed7b8af00ddd384d9fdd5043b450b29c1d230d534dbb6960883f761927fbec42b6fc4b54d23ebd226e407d7193272606266c74c8ed59a6fc4a73e655948365ee7f610be83216ee078252eea6247d56c8998defd577ea96f69737e241df8af32e605416c815f282e24434434be5d3d4d9d7f72ac6ceb3e7dddbb1c8826f2026e7bce4e9f871da377165f673ce63517363f1f62541115166b8af853697044379f60b033bfa35c015b1a9f69c4b6f51149ffaa3f8f4d83af4ede3fffcfd0da4daaaea9b444adf2db30098316b2832af6420ab861b77c3d2fc503b20ceab457fa8a97f26aca27053ceed2d9afbc740cb13e1af0ed3d51d8bc4c20d61a1d1224b86e6428262f24422ab5e34ea1fb006849128eae4a33614160e52adeebb3c223c4e0f98dbd72e2a5d8482ca0d3d9f89058be862f276d923889491cd144359ead5c29f6ee7c8362f97055ed1b3fb360858166930625c7290b863e26f756bfcebe2d948fb69175328439931294aa4a544be5251ab4eedfe202eeb87900cd7c688c44de07d6b5405e6e2b9e5fe7c48632a5bd02ecef317685be059180ec6d8800ee931cbf0d20bb19c4c567db82910e3c0b5232e5509a437f9147f1bc781dbd8c171375a5699e80fef580f005a26d1ce214f485e55af07fb364eceee543ee12669cc758a2154a62ffdfe1279936276457aaf7b7d60482dbf52efb741fcb564f10f153b43c052893fa697ad7c50168f03dd958581c898a7bd854415443173b03e9366da5a82c36ba375bb75de48a21c7c72b756ad57ba171a25f94f8ab1e6417f960ee434d7d63b81e2ab33550628d3025fb117af4a5e53132a71649f96e1f2a3d9fb3cf3d4bb526a5fc8f603cfbfc9204dae7ee67c08cc550e81b41170af53dc9120f1095df693c02ced4159c80d7e6aedaeca745cf234315f9ddef469e4c1dcf6903a5f8fdaeb497f49e7eb6afd7cfd0d55a1db59d0a783ac3332edb59a7af06eb3e383827bc1ba3a8c06b3401addb1ac964b1f417150a6b3d725eac212a930ee482705333f9789c56db024e4c80d5487ed2067705695c77154b6b1fed9f97a98f4a576809c32638f6891514888f0d45213a535e7c957517aab75817c4d139cb8b840701d1ce386db3844bd759cabf2ee078775d09e3b2f76720bb0ff075d51fc2b50c5d4046c876df4d67d15bdbd923ab9e08333abbb590db76d40c6a7f9f55de6a75a21ad409735d5cfa979b69209387b1427e877e176806e1ba3f27aebeb5c9bbe17c25326e6b293147e2eae3eecd22d1963fbd4cfc748c17f1e6e1b576940b04e395c152853c864ecb0b8651ada350d096ab1ec4d8bf1e33c5750d6ea68dfd69ead346133cfc745646c386a3fbfaec1159ec26069f1e9260396c017d15675ea76c87aa58737997dbd24570a85d38cce76f6085a97e36a2e75cefbcd480c3dc9b921498c182213d7d26eeb1fbdba3fbc22fa7034c43b780e7468e31451b255996e0bcfdfc946b989abcfa84e0b34dc0106a61f150819c59a16a8fc66c305bf6381b8ca86be292d98ebaf13655cd80167a8b11e01b3bf672536c3227abebca775fdb0e5bceb51e0bb23bd5745bbd79ae3687ff2d95ac5db5b1a011d39e5356002c5a6eb442b6731f63c64560ef76e92a34905d1d96d5cd0021dd664702dd4ebc651e13a3766b2628c167547412da72a585f9887af3852c53cf48392bb08f4d56200ee261446ad44f7f6fc072a0738075ecd1aa600c632518b66d51b9c36d0e0afda7385662086df3a8fdb944e82cf05405ed3babed6d6c56862170928e78c73c71df6d0f394173d5209e0bc68ba5551ef9502f1e10fb45556b5880956002c7e133fa56631ff0eb77eb1c473b0c60e5890a8bf7d10868d1def647de2518ef98d031649e5b6aedd8785cf0b60f9cb5af2dfdb020f504e3f8de44aea890cefe5cca6de294d5065431808867f5c235f10d05cabe57a3d1e560d563c900a7ad2748feb53858cd65035fe20189fadb92cd33ce778a635167391e94da73b7ba360e389f3791d1a3e50db41b67f23842202688ecc49959cf5806469cfccdd2d31467b8dc1b28135c8366e2894e67e3a34b4317ff989e966078ac70b60abe976f30553c3b5768f6ddce778c575f985834a79090dfa03d648552d69484e48fde6fba7c37f5379baf8e312af3bb2192a8c23f31c897d21cfd31e7f95fa69a96ac796c19a2bf08cd96425a0d6f9c9b2fde24905befd83b20205c023d824bb1581ec55174be8df692354f4581ffadb03cb8868250bb7f4091ea48daa08fbfd54cac8b8f5f914ac01148e17826207504335fa36c71f91ffa14e6e118bed419c717983bde5a4aa4e587bc53373c7dfa925e4ee05afbe75968172aa94f025d014c9050660ceec46bea0433cf33fa12ad4ecca90c87b724b22b4871eddedc7f0887991ae42eea9de8c8d3f527857712f9d8d2422d918e15ef641b56a909e11b942a5f3a82f6a14443590653d817ebccd37c4f1f86e51a8070ccb4858cb29c77ad34c6df5b12f54cf5feb4e0daf179fe56ec3803f0492c22bdeebf16a2135d7ec3035abd58518c88e8a6b47d419bbb49de155a084ceced8f8e90b22da3a680252609ece8a1919e65ec7f7476836470312b486b9c06f142c8c47a323d23bdb2d886cf20ce46fe498c2d5fada024894d75b05ee0133831e47d8b9bf02f58dcbd7b8cce84c8c0a633532d19507805d20336c0350e53a59bc3e45530dd58c5bc081a7442708366d0f3cc18be07729496277bb9f2039fec1bbc1cc11c0afa37b22cd8575bf65d780be4819295c01e7841105c086f7d5b4fd53bef68a71f76c60ce54c75c3d879f055da8ccb28bce9bbac69c31d1d243bcd502970bccebc57bb12357fa746330955951db9b7019d576b9967b7df9f6d08ff819be1118f578339e13716fb24be0c185802093ee5021c9a08f6e7cd2ae7fd089c698c20873c15f6ee0c72539dacc939a22929e6f68690fc1a33d785be62218f31217e0629e4f9c959f9f415ba26da57832837ff5f29c06f4eb16df91877e20d78c7e15f495cdf871de9f30f470b5a8051d3a3865832328a664c5916bbaca8591c960c8f4d3aac7b43554fe71854d3a4195950dae8652d9e47bbb6cbb0faf706b78b730daaa84f4d3426e750069f8f2e4cad06dcd264eb725dd2a2dc8bbb9ac9e904037ca77ba237361529231f08b839a920dfd5ef6373ad028ae0dfd412b9d4ec3c34f5e3526638be0a6b0fad6d8b48bc14955ac0018c8bb525e2ce73f040900cbacfe400738a3647196f3e78ba5136ea1f83aae4847f08b0f331eecd66ec9ea66ef26d593bab267b248a122c6569f3aae0ace527db142de1badfeea2bc33af532299f59b7c12439892e00b4b9ebd34847e177cba0abeea42584fe14ebe172484a6e525be75cbd4cccd757153d5d0349a00b08714c79e7b4367c8096a5057476de161333986d5d90a8b736303a34d3af782828c03c3bd11ec74809752b55bc5e6e11ecb0d2689ea501f4285eb7e41f64f44b8d2ba4bcdd99aaad6453119d7c013ca38a2cc02bdc830d95e7061537c41fd3d311ccc2080743a6cd55f3272ad53fd8e750fb2482830b61dfe224f577889c8b855f3fc56e7fd5f39c35d134d5aa704d8d5b164ba393eb88d7d3ec5d0684b758e4c64a41eebcb46a421dfbcd4092671da882ac95a4a8ceefd69f4c74657417933391a2a42f7588f3f41a7366833ba1d1a9c7ba27e96276361622622ac12c9cc0cd99b93f3e7acab4f718079549e3fcf6690a6d43e44a022585373a05bd66f278de4cb28db0fd4cab49a9f5851de6c9d262137c32abd8c87b5ba65b63489f97196c758bac982f00ce21031c625337f5c7688", 0x1000}, {&(0x7f0000002440)="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", 0xfc}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="b81c6b7b712fae835bf9d018ca431e32bd70ac5823ea8e36174aaad4c070e5602c9677d8e9", 0x25}, {&(0x7f0000003580)="8ee6d29c551f877045016542e4e8b8edeaf5afcee9165647cc55035683b30d6b09f9522a8d3a5d834dc89eb38302357dd7b5a97f602af2109209d30ef4203c1c9431ce4950079f695cfb430219683b8e2297593d234d447e6160fb81d1dac993bc8da89f985405d1f62653ec90f18c8377bfba6bbcd13e70f3ae7711889b1deaff7eb00d7f81c97b07b090c81647db5b5d89b844bd39a8d8b826e396b81748efc4d4b49e4bb6c24961003a0f1304ac991673edf7629267ccc4fee9adea24d08357ec49715a838ad0dda1e9f1e86278656224ca8225e10427a46665c18ba0dae321cf7b1be1d4a68489d3d9a93dba0f054acd6c39f6e620831f", 0xf9}], 0x9, 0x0, 0x0, 0x40}, 0x4008811) pipe(&(0x7f0000003800)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000003840)={{0x32, @multicast1, 0x4e23, 0x1, 'nq\x00', 0x22, 0x0, 0x42}, {@multicast1, 0x4e24, 0x2, 0x2, 0x2, 0x34}}, 0x44) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000140)={0x1, 0x40, 0x10000, 0xc7, 0x0, 0x7fffffff}) r3 = getpgrp(r0) capset(&(0x7f00000038c0)={0x19980330, r3}, &(0x7f0000003900)={0x4000000, 0x200, 0x7fff, 0x3f, 0x0, 0x56c9}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0xe0c22eade762da90, &(0x7f0000003940)=""/147, &(0x7f0000003a00)=0x93) [ 270.741002] EXT4-fs (loop5): get root inode failed [ 270.741431] EXT4-fs (loop5): mount failed [ 270.755557] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 270.764018] EXT4-fs (loop6): get root inode failed [ 270.764878] EXT4-fs (loop6): mount failed 00:41:30 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x8) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x81, 0x29, 0x0, @private=0xa010100, @local}}}}}, 0x0) 00:41:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:30 executing program 6: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xde71}], 0x1) semctl$GETNCNT(r0, 0x0, 0x10, 0x0) 00:41:30 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x800, 0x7fff, 0x80000000, 0x0, 0x6, 0x7}) [ 271.008156] loop2: detected capacity change from 0 to 8336 00:41:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0xeaefcd8e4f5f4629, &(0x7f0000000080)={[{@nobarrier}]}) 00:41:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 271.100087] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 271.115942] loop5: detected capacity change from 0 to 4 [ 271.187289] loop2: detected capacity change from 0 to 8336 00:41:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x50fbb39643421c34) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev}, {@in6=@remote, 0x0, 0x6c}, @in=@multicast1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 00:41:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000280)={0x50a37b89f8211ca8, 0x80, 0x1, 0x7, 0x5, 0x4, 0x0, 0x9, 0x2000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xcad9, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x40008, 0x345, 0x1, 0x1, 0x2, 0x40, 0x5, 0x0, 0x5, 0x0, 0x9}, r2, 0x4, r0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@version_9p2000}, {@uname={'uname', 0x3d, '9p\x00'}}]}}) 00:41:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x50fbb39643421c34) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev}, {@in6=@remote, 0x0, 0x6c}, @in=@multicast1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 00:41:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:41 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:41:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000280)={0x50a37b89f8211ca8, 0x80, 0x1, 0x7, 0x5, 0x4, 0x0, 0x9, 0x2000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xcad9, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x40008, 0x345, 0x1, 0x1, 0x2, 0x40, 0x5, 0x0, 0x5, 0x0, 0x9}, r2, 0x4, r0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@version_9p2000}, {@uname={'uname', 0x3d, '9p\x00'}}]}}) 00:41:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 00:41:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:41:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:41:41 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000100)={0xfffe, 0x0, 0x0, 0x4, 0x0, 0x628b}) [ 282.017597] loop2: detected capacity change from 0 to 8336 00:41:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 282.107096] loop2: detected capacity change from 0 to 8336 00:41:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:41 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)={0xfffffffd, 0x0, 0x0, 0xfc7}) 00:41:41 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:41:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)) [ 282.203710] No source specified 00:41:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)) 00:41:41 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) [ 282.284455] No source specified 00:41:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)) [ 282.369294] No source specified 00:41:52 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:41:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012c00)) 00:41:52 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x8, 0x80, 0x1, 0xa7, 0x400, 0x5}) 00:41:52 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 00:41:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:41:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 00:41:52 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:41:52 executing program 4: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 293.203110] loop2: detected capacity change from 0 to 8 [ 293.213687] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (2 blocks) 00:41:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:41:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012c00)) 00:41:52 executing program 7: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x8, &(0x7f0000001580)=[{&(0x7f0000000140)="00de63291bb6fce9ac109d60bf5d198ba0f0abdd328a65879e88dc858cc06a921db6f4db5fd175d12ed132f74833e7ab4f92dcf5e3d361d8d5b0de18e2a2e5a2cbc6af940d446119eb88820c90f79f131ff22e21f44e044f1a7e9a7eaa343cbe3abb5f", 0x63, 0xffff}, {&(0x7f00000001c0)="5a9f663811346744ef55ea9a159fb1185bffc12333bcdaac05d2c3eaa4113c4616f815ebd7be750470471f287327a54b2b79fe3b592a4aa1ea70e15fffa4a3de62a22f10e05840313d8b36fb61da287aa14bc8c1177cfee862218620b5395f8c329d1e33d7c89f3f8411e2bc953c58e66c13067aab8384f7c4d398cd03bd3e3e0b268b3d44f1f04993e1a87e78f821358ca72ac93cbefe8600f53a1f55cb8f98138fa3256586c7b39d9cfa9cc0c9904f270a983e9080205c3d3b6b76c1c07e4ae8fccb29ef5c3510c9bc0e227c30484381ff82ad4316aa688b9ba4306687ba7b19059b7998d90f00", 0xe8, 0x3ff}, {&(0x7f00000002c0)="5af7a345884182b31b15886ed895d92e104885b418bdd7481e0c91db23f0630c4f732d5af9af0abc7f64832eea8849000e1d7d2cbee402b3a03ea639b689ddc39e7fce4dc398655dd2cca67dfd908c170a24b2d37440028f2db0ffd16dd575109bf5623a727cf9cad9b50c5c23f130d996677555c7b078683ff6bfa2abb56adfadc985bf53e3fa7e30766ed38504dea51b1322043c3cd8fcfd1afea303a01d9f634dc9c66fa8462a435ffe170fc8b696adacdde1ef8988801789", 0xba, 0x4f1b54a9}, {&(0x7f0000000380)="e66c33744d6c21283688af2a379994fbcba27b9f41b4ca14ef08ab887afe1cee0ae8817e25a1b317b1385d77101435da9fc49f7ab3edbed3feb2f603689c58fc032bb72c8e488b7c2ac7b2d4e59793f065740c18a2b3104b5d219999a3653ca9f31ca9beef3b630e1a3897f3fac2c036ee92de1d573a330c036aebe5b1e943db52f14714b9292ebbc319d562b29ec07be58db36121e624187c3ac054c85e6e336b140593f6eb266656", 0xa9, 0x7}, {&(0x7f0000000440)="b76c4eb474cbac0d3c4c2f9aba9a313073b54a2c2a9bd1dff1cb62f499a144345753419d59ea9579d12f58a3566d4c4fdd2748de5c19a247e202c0cf742e2107a1e6d2603ec1d93f8a6a015f6fc359dfd8ecaa07383e614b686c0b59351824dee86b7d1530e3a9790fa39bb6a5e21c18f39076146d45710852fa2e36c6bfef0d389dca2afd9d9ad54d3de087414dd234619fb9da9909b84d6b12419928ce221faf", 0xa1, 0x6}, {&(0x7f0000000080), 0x0, 0x101}, {&(0x7f0000000500)="a2b0788f63748e95461e65c293c272b9bdd9b7e16b6cab519b3819a03ed96a9f7a2d824ebec1ee881d6f875e49c252dc8397e49098f337107e73cc06f72702fd99a8c9e990beb9f1aa4b09d97d", 0x4d, 0x5}, {&(0x7f0000000580)="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", 0x1000, 0x1}], 0x50000, &(0x7f0000001640)=ANY=[@ANYBLOB='appraisg,meid>\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) io_cancel(0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000001680)="a78ef55cb151b7bf5b7ea52963ca947b10cf0ece00d7185970cf0213c15d515b531b864d1e1eddf9d82bea38040fd49540daf48aa0b6867dd37f13b71d9147178550a3a042e68224e45a82857e9b1c", 0x4f, 0x9, 0x0, 0x1, r1}, &(0x7f0000001740)) fstat(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) splice(r1, &(0x7f0000001c80)=0x100000001, r0, &(0x7f0000001cc0)=0x1, 0x20, 0x8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000001780)='./file0\x00', 0x7, 0x5, &(0x7f0000001ac0)=[{&(0x7f00000017c0)="bae7d68bd9dca62454b32d728bcda2c01e12a334b6271a6b706b3e93740c1a258b0defe80f597e235f3193e6a8cffdeba8bb9b982d31382279c49b672b614de46c255450d3193fd00124e186786e61c44697f7510cd257e21262b560cddfd27a51149866af7b39d8f768e562b0bc2057732d98f57843889bc90bbcd0cfd708fdaa0344cfed919127e9dca299a0f2c29e82ed4517ec9a645e9fe6b3cd492069ef8067d69b3c4522022b7569a2306241eda491d1022d8ab1226157ff9fa0de87e7fdfb6626424a09b67ea1a79b3fbc96fb952b61c0e2a9ef454f645b1fba82d593e1b9d6923c771ae2f700b4062fe16421c46e", 0xf2, 0x7}, {&(0x7f00000018c0)="1dafbc6ff5da49e4ef076d9a2b8e0ec7ac89ddb3d7d4841e17eefff5353817b49571549d18fae5e016a23baf3d2f74af361caeb790a0d4a7ed373ba48fdcf78ad022", 0x42, 0x9}, {&(0x7f0000001940)="8a230a822c2aab75aafb9856b0e3aa30f4c338", 0x13}, {&(0x7f0000001980)="95273a3782e777653dd4417b8de9ad9acfcd24413f65a352ca3fe5074f46e8e4371e6a2747f6ec9508251e3c80cc8ceb12640d299cdd88ba67ef4cf67b5e9d489129c534d4c2441b8396e2dafbd9c417584a57bd52af9295aefcfeb4dcc015e613b3885688fdabdb2a1db4d0ae73984d7688e24461b0676d4cac1b00cd963c0f1a755c116a71bfd953e95ff9c38d239b96d921ef9948561fbec341fcd0efe15dc020ebae99948c2906cbf2ad53", 0xad, 0x4}, {&(0x7f0000001a40)="07fdf6941bd9f407ef99e7f1824ee56ffacbe7b89650b82d8d1c3ebf3c5ffbf4abf0ce2d05eaa66be53c238eefb005298cd1007b3ac3791ffbe823473bb5d722e37e", 0x42, 0x1ff}], 0x10, &(0x7f0000001bc0)={[{@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@nojoliet}, {@cruft}], [{@obj_role={'obj_role', 0x3d, 'nfs4\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_eq={'uid', 0x3d, r2}}, {@fowner_gt={'fowner>', 0xee01}}, {@subj_type}, {@fowner_gt={'fowner>', r4}}]}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 293.331433] loop7: detected capacity change from 0 to 264192 [ 293.350460] loop2: detected capacity change from 0 to 8 [ 293.353599] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (2 blocks) [ 293.358409] loop7: detected capacity change from 0 to 1 00:41:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:41:52 executing program 7: r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/35) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:41:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012c00)) [ 293.481718] loop2: detected capacity change from 0 to 8 [ 293.533939] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (2 blocks) 00:42:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0}], 0x0, &(0x7f0000012c00)) 00:42:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:42:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012c00)) 00:42:02 executing program 4: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:02 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:02 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012c00)) 00:42:02 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) capset(&(0x7f0000000140)={0x20071026, r1}, &(0x7f0000000180)={0xeda00000, 0x80000001, 0x7, 0xffffffff, 0x200, 0x7}) r2 = gettid() tgkill(r0, r2, 0x0) capset(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0x5, 0x4, 0xc0f8, 0x1, 0xf0}) [ 302.943390] loop2: detected capacity change from 0 to 8 [ 302.946393] loop6: detected capacity change from 0 to 8 [ 302.955790] EXT4-fs (loop6): bad geometry: block count 128 exceeds size of device (2 blocks) [ 302.959589] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (2 blocks) [ 302.982736] loop5: detected capacity change from 0 to 8 [ 303.003535] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) 00:42:02 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0}], 0x0, &(0x7f0000012c00)) 00:42:02 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:42:02 executing program 7: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x10000, 0x8, 0x0, 0x0, 0x0, 0x40000000}) 00:42:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012c00)) 00:42:02 executing program 0: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) [ 303.174604] loop2: detected capacity change from 0 to 8 [ 303.196672] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (2 blocks) 00:42:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) close_range(r0, r2, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:42:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) [ 303.277873] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 303.279462] loop5: detected capacity change from 0 to 8 [ 303.284626] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 303.297956] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) [ 303.298181] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:42:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0}], 0x0, &(0x7f0000012c00)) [ 303.309701] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:42:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) [ 303.409992] loop2: detected capacity change from 0 to 8 [ 303.428024] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (2 blocks) 00:42:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x0, 0x489}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 00:42:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:42:15 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000140)={0x10001, 0xfffffffe, 0x9, 0x1f, 0x80000000, 0xd5bed56}) 00:42:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:15 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:15 executing program 4: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 315.797034] loop2: detected capacity change from 0 to 8336 [ 315.831261] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 315.832747] EXT4-fs (loop2): group descriptors corrupted! [ 315.836369] audit: type=1326 audit(1752626535.200:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4839 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b72e5ab19 code=0x0 00:42:15 executing program 7: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) 00:42:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:15 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0x5, 0x40, 0x241, 0x2, 0x10001}) [ 316.095612] loop2: detected capacity change from 0 to 8336 [ 316.111261] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 316.112764] EXT4-fs (loop2): group descriptors corrupted! [ 316.668359] audit: type=1326 audit(1752626536.034:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4839 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b72e5ab19 code=0x0 00:42:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:25 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:25 executing program 3: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:25 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x6}) 00:42:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:42:25 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:25 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 326.329289] loop2: detected capacity change from 0 to 8336 [ 326.350398] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 326.351272] EXT4-fs (loop2): group descriptors corrupted! 00:42:25 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:42:25 executing program 3: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:25 executing program 3: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 326.619553] loop2: detected capacity change from 0 to 8336 00:42:25 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x1, 0x30df69a8, 0x7, 0x4, 0xff, 0xc8}) [ 326.639786] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 326.641178] EXT4-fs (loop2): group descriptors corrupted! 00:42:26 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:26 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 326.805645] loop2: detected capacity change from 0 to 8336 [ 326.837442] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 326.839072] EXT4-fs (loop2): group descriptors corrupted! 00:42:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:35 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:35 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:35 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:42:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:35 executing program 7: r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x6, 0xcb67}) 00:42:35 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:35 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 336.672243] loop2: detected capacity change from 0 to 8336 [ 336.678184] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 336.679796] EXT4-fs (loop2): group descriptors corrupted! 00:42:36 executing program 7: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x9, 0x1, 0x2, 0x0, 0x2}) 00:42:36 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:36 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) capset(&(0x7f0000000340)={0x20071026, r0}, &(0x7f0000000380)={0x2, 0x40, 0xffff, 0x4, 0x800, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) capset(&(0x7f00000003c0)={0x19980330, r0}, &(0x7f0000000400)={0x9, 0x1, 0x1f5, 0x7, 0x80000000}) clone(0x800, &(0x7f0000000140)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)="97916c3011fe359169926cd510a91c5a4dd2b23641c623de05fbc0baa0b402d0ca54ae847fd7606cd7c856dff015f5362c5405dae373c7bdba35fd0bee2c78a2d335d0d86a5629bef55210c55c08f355604d421cc5fb5261ce6a499913b1ccbbb3f653166d3137d56da4b83ee2c287338bd42523ebbb12fb90361aecbec687d27ce8ac8f485603e3a9fdea87de916fac3da8a1398cee9875e2813dd7ae05e3ba3d6e10d5fa9db57548db41bd4f1022610ef3bd9c975e04a4f88f6f9909ab6c73e25fc65cbd2b8aa55d6e71100529c03d8875329e0fe79b9984437965a39fef5d2687c250") [ 336.817350] loop2: detected capacity change from 0 to 8336 [ 336.830421] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 336.831793] EXT4-fs (loop2): group descriptors corrupted! [ 336.842928] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 336.859957] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:42:36 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:36 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="78803cb6f1ce59a75494ad4971d70525", 0x10) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 336.995322] loop2: detected capacity change from 0 to 8336 [ 337.005243] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 337.006679] EXT4-fs (loop2): group descriptors corrupted! 00:42:36 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:47 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:47 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:47 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7, 0x7fffffff, 0x4, 0x8fd7, 0x4, 0xe1f}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x0, 0x4, 0xca, 0x6, 0x0, 0x7}) 00:42:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:42:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300), 0x0, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:47 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 348.337959] loop2: detected capacity change from 0 to 8336 00:42:47 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)={0x0, 0xfffffffc, 0x20000000, 0x0, 0xefc7, 0x8000}) [ 348.355260] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 348.356044] EXT4-fs (loop2): group descriptors corrupted! 00:42:47 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 348.509362] loop2: detected capacity change from 0 to 8336 00:42:47 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000000)={0xfffffffd, 0x80000000, 0x8, 0xd3e3}) [ 348.532626] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 348.534012] EXT4-fs (loop2): group descriptors corrupted! 00:42:47 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000f13100000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x2f}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:42:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 348.708908] loop2: detected capacity change from 0 to 8336 [ 348.738206] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 348.739810] EXT4-fs (loop2): group descriptors corrupted! 00:42:58 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:58 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4a57e64747aec1f0e459baadf11074d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b7bc2aca368549142af5afb7f86aa570"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7f46cdd8e2d47115dbcc288bf721899"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x80}, @NL80211_ATTR_PMKID={0x14, 0x55, "840174aaf573c32fe63df32183deaf59"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:58 executing program 7: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000002280)=""/132, 0x84}, {&(0x7f0000002340)=""/39, 0x27}, {&(0x7f0000002380)=""/53, 0x35}, {&(0x7f00000023c0)=""/34, 0x22}, {&(0x7f0000002400)=""/63, 0x3f}, {&(0x7f0000002440)=""/88, 0x58}], 0xa, &(0x7f0000002580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000002600)=""/222, 0xde}, {&(0x7f0000002700)=""/252, 0xfc}, {&(0x7f0000002800)=""/253, 0xfd}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/242, 0xf2}, {&(0x7f0000003a00)=""/199, 0xc7}, {&(0x7f0000003b00)=""/4096, 0x1000}], 0x7, &(0x7f0000004b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x2, 0x100, &(0x7f0000004c40)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x9}) 00:42:58 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:58 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:42:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003", 0x5, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:42:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 358.889294] loop2: detected capacity change from 0 to 8336 [ 358.900172] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 358.900991] EXT4-fs (loop2): group descriptors corrupted! 00:42:58 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:42:58 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:42:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 359.004276] loop2: detected capacity change from 0 to 8336 [ 359.015599] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 359.016370] EXT4-fs (loop2): group descriptors corrupted! 00:42:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:42:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f00000000c0)=0x8004, 0x4, 0x0) r2 = epoll_create1(0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x40000000}) 00:42:58 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 359.174396] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 359.196058] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:42:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="02000000030000", 0x7, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 359.295817] loop2: detected capacity change from 0 to 8336 [ 359.308877] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 359.310580] EXT4-fs (loop2): group descriptors corrupted! 00:43:10 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:10 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:43:10 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:10 executing program 7: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/106) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:43:10 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:43:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:43:10 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 371.509362] loop2: detected capacity change from 0 to 8336 [ 371.533630] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 371.535115] EXT4-fs (loop2): group descriptors corrupted! 00:43:10 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:10 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:43:10 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd4}}, './file0\x00'}) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x2) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x4000000) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000140)=0x7) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x5}) 00:43:10 executing program 5: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:11 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 371.702771] loop2: detected capacity change from 0 to 8336 [ 371.711551] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 371.712343] EXT4-fs (loop2): group descriptors corrupted! 00:43:20 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:20 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0x0) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r7 = io_uring_setup(0x201d, &(0x7f0000000340)={0x0, 0xfcb3, 0x2, 0x3, 0xb3}) r8 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @initdev}, &(0x7f0000000400)=0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r10) r11 = getegid() r12 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000540)=0xe8) sendmmsg$unix(r0, &(0x7f0000002b00)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)="85072c945b1a5ac64d2180fa7cbcc2919f06ee9ef06ad027507786054ee250b72f9725a76b030845d37d6eb8088ac97120e14340ffb3458511f2e7c1c8c76d1cc0918278946106369ba39b821aefb350d2681c99c04caf74fd9dc9c32d139a071bfe", 0x62}, {&(0x7f0000000240)="283646935392e76c0534da9e5c714fa518c48ae1321351b4", 0x18}, {&(0x7f0000000280)="f2a70a77f49835d37de055b45270125b365900124e28466eb0116af7d6b88480b51bdd14ed59ac7f8574d5ede530f41b7392afa43c8ab15516116d6408dffd942e86573bc199842dfbaa57554aa25726362a8c733b9ecd0ba5aa8d8f5f0bda5c916d26bf3255c8", 0x67}], 0x3, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r2, r1, r3, r5]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0xf0, 0x8000}}, {{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000700)="5a789409fa28949772d1e7ef0d6459dabcf150f2688468165f834faae96285695e71c53c4db5096815d36193c4aac01b9995a0328e20e90580bbacf0e40fe538ea920ccced7a20568567222e0bf59cace2fd31483c47327e64f7c0f440e11df4e9b77fc648eeaa405c5258bf346c176378", 0x71}, {&(0x7f0000000780)="404520a7a9657f1309f3e87e0f3d69be553becbbf27ca203425cccca4a15c5ea8d3cdf3bbe3ba9a68a189397a9f30f02115530f997f56dd354ce5622e029fc25518f46b45f7d10f4c32b3d217ce2ef1edee88b4f3c572aa954af71e6cd517879876f6e271c9774a5b6b8bd21b9b1fe64258d3309a6ed47b977fc4b9e3340a0a96f68c83cb4603c9d85015420c6db88c4f46575994ff3334934480b543faca8659ad0eabc39f546813425f6a3a245eca0bad8642d09202c8b6123db353671f290db1c8d93456cf7d6759b1e1417436f60ba677e1f8b50a469fd369b4e25f3e6933eb2ca11dee0eea2b8ef6dcb79d9", 0xee}, {&(0x7f0000000880)="3541137799c7adc656ca551d081e95b61d511aac17a482353122f4e3eac81e149d737b079a6aa1611a0358aae31341f43ba7c2b4b493ea7570b96558e898ec3cf87584a6eea640cc7422f4f044705513afeb31e50afeccb9dd3dacf1bc189c61c6c0a350f0fc0c4aae38f4ccda8088f6ebf0977d180dcc4a29e61d939f93ff26a2fc640ce3385d2b16d234b341b846b3674c9cd78077d96e8e4d4248396aa20d557c337a39be81749a6b19607ef754e4bbc72051c3a9ab49d8070591e46bceed9a4db9867f30f0b0d65ba8838019f0f3300b41428c46527cb5361ca059a2905fb690a43da53e", 0xe6}, {&(0x7f0000000980)="e356c817d7bda8cf6ffafbedcc688b2ea7f5c6b9fce0bcd3493ce3c5cffc0712c929bdcacbe0d34e4ba197c644b1104cbf28c6e3446b4abf8567ed0dab692cf54dbc89841c563efda2f437b48b4fb047", 0x50}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="30a9a053fa9d2a9efc177c125ee9f22bd52a9b9838b1adfb2ea26de5172ac4277cfa0233c8893a1ae658bf1c3a07ac94052421bab537926e25aea2d3fcddd5429576e33146f032cd99dfa0c642062e88", 0x50}, {&(0x7f0000001a80)="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", 0x1000}], 0x7, 0x0, 0x0, 0x4c000}}], 0x2, 0x80) bind(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x1}) 00:43:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:20 executing program 5: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:43:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:43:20 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 381.150790] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 381.164797] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 381.169271] loop2: detected capacity change from 0 to 8336 [ 381.179813] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 381.180662] EXT4-fs (loop2): group descriptors corrupted! 00:43:20 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) [ 381.218897] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:43:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:20 executing program 5: r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 381.239763] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 381.274626] loop2: detected capacity change from 0 to 8336 [ 381.283163] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 381.283932] EXT4-fs (loop2): group descriptors corrupted! 00:43:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:20 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="132cd199fcd72e87ec1cd152b8679c9c0b3f490680f4f0d5ac6c54c8efedf7aa4bf940e210f4228dff8faf3d7df599e3f6c34f91b8677481f20a85a1b42687ca0c4a", @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="f977c610047db9563ca39e89e1abcceb250a066b6c8ab06bb4f15f06c176c2f75f2889feaa55b827b11a9942928c3c41bf7a09e4b63f93749058231473b7942f7d619a7a5c27c4fd4a02"], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001580), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000001140)=""/106, 0x6a}, {&(0x7f00000011c0)=""/192, 0xc0}, {&(0x7f0000001280)=""/205, 0xcd}, {&(0x7f0000001380)=""/129, 0x81}, {&(0x7f0000001440)=""/176, 0xb0}], 0x7, &(0x7f0000001880)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c099cd007be6175df35fbe11c000000060002001e00000000000000bbbde4821e2d1cedaaa8e981e63c427e865bd27398b68b898b5c7958b35ca91fa920136631eb57a93ac240c05dee06bac27b1daa3295ab6ac9e450e99a9c127c6140ff176b062cf110571cbb59ae5b6e80dc7e8b330e6cc99c34483072b1d5c09a5dadcdc278d049799a05b7d72f1a6f9326f2f1bdad6e9e1a6c5921d0c1c37db886a226e1d91444410a2afa10091a874bd35f13", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x40) capset(&(0x7f00000016c0)={0x20080522, r3}, &(0x7f0000001700)={0x100, 0x200, 0x400, 0x100, 0x6, 0x2}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001740)=0x0) capset(&(0x7f0000001780)={0x19980330, r5}, &(0x7f00000017c0)={0x1, 0x4, 0x3, 0x6, 0x8}) capset(&(0x7f0000001800)={0x19980330, r5}, &(0x7f0000001840)={0x8, 0x101, 0x8b47, 0xda3, 0x401, 0x2}) [ 381.371160] loop2: detected capacity change from 0 to 8336 [ 381.380294] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 381.381064] EXT4-fs (loop2): group descriptors corrupted! 00:43:20 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 381.469284] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 381.480193] loop2: detected capacity change from 0 to 8336 [ 381.500843] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 381.507240] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 381.508020] EXT4-fs (loop2): group descriptors corrupted! 00:43:20 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:29 executing program 6: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="132cd199fcd72e87ec1cd152b8679c9c0b3f490680f4f0d5ac6c54c8efedf7aa4bf940e210f4228dff8faf3d7df599e3f6c34f91b8677481f20a85a1b42687ca0c4a", @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="f977c610047db9563ca39e89e1abcceb250a066b6c8ab06bb4f15f06c176c2f75f2889feaa55b827b11a9942928c3c41bf7a09e4b63f93749058231473b7942f7d619a7a5c27c4fd4a02"], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001580), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000001140)=""/106, 0x6a}, {&(0x7f00000011c0)=""/192, 0xc0}, {&(0x7f0000001280)=""/205, 0xcd}, {&(0x7f0000001380)=""/129, 0x81}, {&(0x7f0000001440)=""/176, 0xb0}], 0x7, &(0x7f0000001880)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c099cd007be6175df35fbe11c000000060002001e00000000000000bbbde4821e2d1cedaaa8e981e63c427e865bd27398b68b898b5c7958b35ca91fa920136631eb57a93ac240c05dee06bac27b1daa3295ab6ac9e450e99a9c127c6140ff176b062cf110571cbb59ae5b6e80dc7e8b330e6cc99c34483072b1d5c09a5dadcdc278d049799a05b7d72f1a6f9326f2f1bdad6e9e1a6c5921d0c1c37db886a226e1d91444410a2afa10091a874bd35f13", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x40) capset(&(0x7f00000016c0)={0x20080522, r3}, &(0x7f0000001700)={0x100, 0x200, 0x400, 0x100, 0x6, 0x2}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001740)=0x0) capset(&(0x7f0000001780)={0x19980330, r5}, &(0x7f00000017c0)={0x1, 0x4, 0x3, 0x6, 0x8}) capset(&(0x7f0000001800)={0x19980330, r5}, &(0x7f0000001840)={0x8, 0x101, 0x8b47, 0xda3, 0x401, 0x2}) 00:43:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:43:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:43:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:29 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x2015e4c2, 0x6, 0x1, 0x80}) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000140)={0x1, 0x80000001, 0x1f, 0x20, 0x3f, 0xa9}) 00:43:29 executing program 3: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="132cd199fcd72e87ec1cd152b8679c9c0b3f490680f4f0d5ac6c54c8efedf7aa4bf940e210f4228dff8faf3d7df599e3f6c34f91b8677481f20a85a1b42687ca0c4a", @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="f977c610047db9563ca39e89e1abcceb250a066b6c8ab06bb4f15f06c176c2f75f2889feaa55b827b11a9942928c3c41bf7a09e4b63f93749058231473b7942f7d619a7a5c27c4fd4a02"], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001580), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000), 0x6e, &(0x7f0000001500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000001140)=""/106, 0x6a}, {&(0x7f00000011c0)=""/192, 0xc0}, {&(0x7f0000001280)=""/205, 0xcd}, {&(0x7f0000001380)=""/129, 0x81}, {&(0x7f0000001440)=""/176, 0xb0}], 0x7, &(0x7f0000001880)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESDEC=r0, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c099cd007be6175df35fbe11c000000060002001e00000000000000bbbde4821e2d1cedaaa8e981e63c427e865bd27398b68b898b5c7958b35ca91fa920136631eb57a93ac240c05dee06bac27b1daa3295ab6ac9e450e99a9c127c6140ff176b062cf110571cbb59ae5b6e80dc7e8b330e6cc99c34483072b1d5c09a5dadcdc278d049799a05b7d72f1a6f9326f2f1bdad6e9e1a6c5921d0c1c37db886a226e1d91444410a2afa10091a874bd35f13", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x40) capset(&(0x7f00000016c0)={0x20080522, r3}, &(0x7f0000001700)={0x100, 0x200, 0x400, 0x100, 0x6, 0x2}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001740)=0x0) capset(&(0x7f0000001780)={0x19980330, r5}, &(0x7f00000017c0)={0x1, 0x4, 0x3, 0x6, 0x8}) capset(&(0x7f0000001800)={0x19980330, r5}, &(0x7f0000001840)={0x8, 0x101, 0x8b47, 0xda3, 0x401, 0x2}) 00:43:29 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 390.578008] loop2: detected capacity change from 0 to 8336 [ 390.587822] netlink: 'syz-executor.3': attribute type 338 has an invalid length. [ 390.590793] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:30 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) 00:43:30 executing program 7: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="010100000000000009000000000000000700000008000000040000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000500000000000000bbb9000000000000000400000000000000000000000000000000000000000000020000000000000000000000000000000200000000000000ff030000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000007000000000000004b0c000000000000030000e37b26e90e265c276ab2000000000000000000000000000000000000000000000100000000"]) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 390.675258] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 390.683133] loop3: detected capacity change from 0 to 8336 [ 390.693531] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 390.694278] EXT4-fs (loop3): group descriptors corrupted! 00:43:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:30 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 390.772134] loop3: detected capacity change from 0 to 8336 [ 390.781761] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 390.782721] EXT4-fs (loop3): group descriptors corrupted! 00:43:30 executing program 7: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0xfffffffd, 0x80000}) r0 = gettid() r1 = gettid() tgkill(0x0, r1, 0x1000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000280)={0x8000, 0x80000001, 0x8, 0x8, 0x198, 0x97}) r3 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) kcmp(r2, r0, 0x7, 0xffffffffffffffff, r3) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x4, 0x40106, 0xfffdfffa, 0x0, 0x1, 0x5}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) capset(&(0x7f0000000380)={0x0, r4}, &(0x7f0000000300)={0x1, 0xc81f, 0x40001, 0x9, 0x7fffffff, 0x2}) r5 = gettid() r6 = gettid() r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000000)) faccessat2(r7, &(0x7f0000000200)='./file0\x00', 0x10c, 0x1200) tgkill(r5, r6, 0x0) r8 = getpgrp(r2) getpgrp(r8) capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000140)={0x2, 0x400, 0xffffffff, 0x800, 0x8, 0x4}) [ 390.807933] loop2: detected capacity change from 0 to 8336 00:43:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:30 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) [ 390.841220] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 390.888184] loop3: detected capacity change from 0 to 8336 [ 390.900196] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 390.900951] EXT4-fs (loop3): group descriptors corrupted! 00:43:40 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000080)={0xc0, 0x3, 0x2, 0x763, 0xffff, 0x4}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000340)=""/189, 0xbd}], 0x4, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/48, 0x30}, {&(0x7f0000001540)=""/248, 0xf8}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/116, 0x74}, {&(0x7f0000001700)=""/4, 0x4}, {&(0x7f0000001740)=""/41, 0x29}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x2, 0x2001, &(0x7f0000001980)={0x0, 0x989680}) capset(&(0x7f00000019c0)={0x19980330, r0}, &(0x7f0000001a00)={0x10001, 0xffffff00, 0x900000, 0x6, 0x5}) 00:43:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:40 executing program 6: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0xfffffffd, 0x80000}) r0 = gettid() r1 = gettid() tgkill(0x0, r1, 0x1000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000280)={0x8000, 0x80000001, 0x8, 0x8, 0x198, 0x97}) r3 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) kcmp(r2, r0, 0x7, 0xffffffffffffffff, r3) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x4, 0x40106, 0xfffdfffa, 0x0, 0x1, 0x5}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) capset(&(0x7f0000000380)={0x0, r4}, &(0x7f0000000300)={0x1, 0xc81f, 0x40001, 0x9, 0x7fffffff, 0x2}) r5 = gettid() r6 = gettid() r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000000)) faccessat2(r7, &(0x7f0000000200)='./file0\x00', 0x10c, 0x1200) tgkill(r5, r6, 0x0) r8 = getpgrp(r2) getpgrp(r8) capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000140)={0x2, 0x400, 0xffffffff, 0x800, 0x8, 0x4}) 00:43:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:43:40 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) 00:43:40 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 401.092705] loop2: detected capacity change from 0 to 8336 [ 401.117585] loop3: detected capacity change from 0 to 8336 [ 401.120142] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:43:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:40 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:43:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:40 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) [ 401.228872] loop3: detected capacity change from 0 to 8336 00:43:40 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0xffffff95, "a8"}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffe, 0x4b, 0x18, @buffer={0x0, 0xf1, &(0x7f00000001c0)=""/241}, &(0x7f0000000140)="82aff8f5400128066fe4c3ba2cc34c08e2ca66f2fac85134dd4b9c13a595d70000000000000000000f30053171125fb4cbf210f67b9a3c85788f79d71c15d2b07dd596e26cd3803095e47b", &(0x7f0000000640)=""/71, 0x1, 0x10031, 0x0, &(0x7f00000006c0)}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, 0x7}) 00:43:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 401.317875] loop2: detected capacity change from 0 to 8336 [ 401.324579] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.328744] ata1.00: non-matching transfer count (0/1) [ 401.331405] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 401.338669] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.346011] ata1.00: non-matching transfer count (6656/1) [ 401.348980] loop3: detected capacity change from 0 to 8336 00:43:40 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:43:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 401.466366] loop3: detected capacity change from 0 to 8336 [ 401.489154] loop6: detected capacity change from 0 to 8336 [ 401.489366] loop2: detected capacity change from 0 to 8336 [ 401.507575] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:43:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:43:51 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:43:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:51 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000180)={0x5, 0x5, 0x2fc8, 0xffffff92, 0x5, 0x800}) gettid() capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0xfffffff7, 0x4c900, 0x34, 0x8, 0x1ff, 0xc0}) 00:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) [ 411.676849] loop3: detected capacity change from 0 to 8336 [ 411.690176] loop6: detected capacity change from 0 to 8336 00:43:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:51 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) [ 411.711806] loop2: detected capacity change from 0 to 8336 [ 411.716159] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 411.717585] EXT4-fs (loop6): group descriptors corrupted! [ 411.721343] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:43:51 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x800, 0x1, 0x2, 0x4000, 0xfffffffe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) 00:43:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:51 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) 00:43:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:43:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:43:51 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 411.843003] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 411.856843] loop2: detected capacity change from 0 to 8336 [ 411.859923] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 411.869127] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 411.899879] loop3: detected capacity change from 0 to 8336 00:44:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:44:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:44:02 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) 00:44:02 executing program 7: r0 = gettid() gettid() r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) kcmp(r0, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() r4 = gettid() tgkill(r3, r4, 0x0) wait4(r3, &(0x7f0000000080), 0x1, &(0x7f0000000140)) migrate_pages(r1, 0x3f, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0xffffffffffffff32) gettid() capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 00:44:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)) 00:44:02 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x10000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:44:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:44:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 422.906304] No source specified [ 422.919336] loop2: detected capacity change from 0 to 8336 [ 422.943450] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)) 00:44:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 422.998439] No source specified 00:44:02 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) 00:44:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)) 00:44:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) [ 423.058794] loop2: detected capacity change from 0 to 8336 [ 423.072872] No source specified 00:44:02 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) [ 423.083756] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}], 0x0, &(0x7f0000012c00)) 00:44:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:44:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:44:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) 00:44:13 executing program 7: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xdc30}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000000}, 0x44005) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:44:13 executing program 6: r0 = gettid() gettid() r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) kcmp(r0, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() r4 = gettid() tgkill(r3, r4, 0x0) wait4(r3, &(0x7f0000000080), 0x1, &(0x7f0000000140)) migrate_pages(r1, 0x3f, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0xffffffffffffff32) gettid() capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 00:44:13 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) [ 433.981916] loop3: detected capacity change from 0 to 8 [ 433.988801] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (2 blocks) [ 434.023733] loop2: detected capacity change from 0 to 8336 00:44:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}], 0x0, &(0x7f0000012c00)) [ 434.044551] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:13 executing program 6: r0 = gettid() gettid() r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) kcmp(r0, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() r4 = gettid() tgkill(r3, r4, 0x0) wait4(r3, &(0x7f0000000080), 0x1, &(0x7f0000000140)) migrate_pages(r1, 0x3f, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0xffffffffffffff32) gettid() capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 00:44:13 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 434.090170] loop3: detected capacity change from 0 to 8 00:44:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) [ 434.108266] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (2 blocks) 00:44:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}], 0x0, &(0x7f0000012c00)) 00:44:13 executing program 7: set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:44:13 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 434.210023] loop3: detected capacity change from 0 to 8 [ 434.218678] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (2 blocks) [ 434.221172] loop2: detected capacity change from 0 to 8336 00:44:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) [ 434.253592] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:13 executing program 7: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x30000002}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x1000, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x1, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x2014}) r4 = gettid() r5 = gettid() tgkill(r4, r5, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) capset(&(0x7f00000001c0)={0x20080522, r5}, &(0x7f0000000140)={0x2, 0x8, 0x8001, 0x10000, 0x80000000, 0x9}) [ 434.330805] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 434.331829] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 434.349328] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 434.349439] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:44:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:44:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:44:23 executing program 6: set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:44:23 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) 00:44:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:23 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:44:23 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1, 0x8000, 0xffff, 0xd9, 0x80000001, 0x800}) capset(&(0x7f0000000080)={0x39900612}, &(0x7f0000000140)={0xdc0, 0xfffffff9, 0x8, 0x7, 0x6b, 0x1}) r0 = gettid() capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x10001, 0x4, 0x8, 0x8, 0x2e3}) 00:44:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) [ 444.482994] loop2: detected capacity change from 0 to 8336 [ 444.493869] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 444.515095] loop3: detected capacity change from 0 to 4 [ 444.526737] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 00:44:23 executing program 6: set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:44:23 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:44:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 444.582275] loop2: detected capacity change from 0 to 8336 [ 444.587020] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:23 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)) 00:44:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) 00:44:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:24 executing program 6: set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 444.708020] loop2: detected capacity change from 0 to 8336 [ 444.714867] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 444.731817] loop3: detected capacity change from 0 to 4 [ 444.741082] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 446.522641] Bluetooth: hci7: command 0x0406 tx timeout 00:44:34 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x5, 0x3, 0x200, 0xee75, 0x7ff, 0x1}) 00:44:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:44:34 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:44:34 executing program 6: set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) 00:44:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:44:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f465", 0x33, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000012c00)) [ 455.433288] loop5: detected capacity change from 0 to 8336 [ 455.442276] loop2: detected capacity change from 0 to 8336 [ 455.446414] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 455.451336] loop3: detected capacity change from 0 to 4 [ 455.453609] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 455.474621] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 00:44:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) 00:44:34 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x329, 0x0, 0x20}) 00:44:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f465", 0x33, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}], 0x0, &(0x7f0000012c00)) 00:44:34 executing program 6: set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) 00:44:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 455.592745] loop5: detected capacity change from 0 to 8 00:44:34 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) [ 455.637300] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) [ 455.644293] loop2: detected capacity change from 0 to 8336 00:44:35 executing program 6: set_tid_address(&(0x7f0000000000)) [ 455.670508] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:35 executing program 7: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180)=0x1, 0xd, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x1000, 0xff, 0x1fe7, 0x4, 0x0, 0x5}) [ 455.738253] loop3: detected capacity change from 0 to 8 [ 455.749106] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (2 blocks) 00:44:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:44:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) 00:44:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f465", 0x33, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:43 executing program 6: set_tid_address(0x0) 00:44:43 executing program 7: pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="d9a4a66cbdb2bb63dd31461939fbde412b296e2b18e75e0ec426db10fa76", 0x1e}, {&(0x7f0000000140)="8ecb0d6ef52518c8453a5ad4a9850e8e1ffd8d835a6243172be00892ea23d8ea115dc56b6d00398b10ef5ee85879c013dd8c07cfd02e2a2dc76e08478ae483ebd36d42992722a3ffb09cfd1fd25727926a1bdd47bd6752c52fba8e603e8f31de9fae117f4e611ad9807da2a2731474eb8cbdde670577782049071bdd17522823170dfa9201ca2f1da4887c7dca06aa2abca6ad5d317b85b546573a69256e29", 0x9f}], 0x2, 0x3ff, 0x7, 0x12) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r6 = fcntl$getown(r2, 0x9) syz_open_procfs(r6, &(0x7f0000000000)='smaps_rollup\x00') 00:44:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:44:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) 00:44:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0}], 0x0, &(0x7f0000012c00)) [ 464.566745] loop2: detected capacity change from 0 to 8336 [ 464.575678] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 464.581721] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 464.591449] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 464.592854] loop5: detected capacity change from 0 to 8 [ 464.602721] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 464.608201] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) 00:44:43 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180)=0x1, 0xd, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x1000, 0xff, 0x1fe7, 0x4, 0x0, 0x5}) [ 464.619462] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 464.624278] loop3: detected capacity change from 0 to 4 00:44:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 464.655168] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 464.662102] loop2: detected capacity change from 0 to 8336 [ 464.670993] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 464.671881] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 464.678091] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:44:44 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180)=0x1, 0xd, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x1000, 0xff, 0x1fe7, 0x4, 0x0, 0x5}) 00:44:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) 00:44:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0}], 0x0, &(0x7f0000012c00)) 00:44:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 464.789868] loop5: detected capacity change from 0 to 8 [ 464.796169] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) [ 464.834942] loop3: detected capacity change from 0 to 4 [ 464.854692] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 00:44:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, 0x0, 0x0) 00:44:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180)=0x1, 0xd, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x1000, 0xff, 0x1fe7, 0x4, 0x0, 0x5}) 00:44:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:44:54 executing program 7: semget(0x2, 0x2, 0x1) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:44:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) 00:44:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0}], 0x0, &(0x7f0000012c00)) [ 475.104804] loop3: detected capacity change from 0 to 4 [ 475.105987] loop2: detected capacity change from 0 to 8336 [ 475.106734] loop5: detected capacity change from 0 to 8 [ 475.114164] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) [ 475.115077] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 475.115811] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:44:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) 00:44:54 executing program 7: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)={0x800000, 0x27}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000100)) [ 475.245958] loop3: detected capacity change from 0 to 8 [ 475.252092] loop2: detected capacity change from 0 to 8336 [ 475.253176] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 475.259581] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 475.292251] loop5: detected capacity change from 0 to 4 00:44:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:44:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 475.310848] loop6: detected capacity change from 0 to 8336 [ 475.317059] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 475.322778] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 475.355282] loop2: detected capacity change from 0 to 8336 [ 475.363506] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 475.396980] loop3: detected capacity change from 0 to 8 [ 475.417527] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 00:45:04 executing program 6: pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="d9a4a66cbdb2bb63dd31461939fbde412b296e2b18e75e0ec426db10fa76", 0x1e}, {&(0x7f0000000140)="8ecb0d6ef52518c8453a5ad4a9850e8e1ffd8d835a6243172be00892ea23d8ea115dc56b6d00398b10ef5ee85879c013dd8c07cfd02e2a2dc76e08478ae483ebd36d42992722a3ffb09cfd1fd25727926a1bdd47bd6752c52fba8e603e8f31de9fae117f4e611ad9807da2a2731474eb8cbdde670577782049071bdd17522823170dfa9201ca2f1da4887c7dca06aa2abca6ad5d317b85b546573a69256e29", 0x9f}], 0x2, 0x3ff, 0x7, 0x12) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r6 = fcntl$getown(r2, 0x9) syz_open_procfs(r6, &(0x7f0000000000)='smaps_rollup\x00') 00:45:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0}], 0x0, &(0x7f0000012c00)) 00:45:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) 00:45:04 executing program 7: writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000140)="e577be1306409ac00ce785312285891447cde6b91878c7c6b88b948171d79c4f4a470eaaeb92e012502d7df1276660136bbd33d15336bfa6e6c4bd5d28792b4316d98c393b193bd9bb2093f257a1d1708eb21ef0fd039b8aa427c3b9ae621a01f26e5a6a942b302ee227ee11ee6d9b2bdf3e310a6034d752dad199fe806ae56220b0ddc45a3c5bd9301883f8c127336cb36e27024b9ccdf894e6d40bc65bfaa8b126abb6c383572a632c9a36f478f667415b7bb4535686fa596f63336fbf6085c4aa3e87e0b26fefccc95093ab43a6d6", 0xd0}, {&(0x7f0000000000)="2d2917b66e773c57efb52c64da0acd176be7c3e092b9ddc175dd7812db0161384a746b142f8874b953e63e5c7f3d3c80e3f69fe040ea55b652ce7558659eb345abd8930925a1be255654b7", 0x4b}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="7d24a2c28869d8113474458d1962cd0ddd805afe0dbc85602f9644a2db9c4b4265fba240e284d66f275bb7f5018515123221205d3facb55cdeaadce25dada41b717da486c562d99075ac912f4bab6b73883e42bc64e4f438fbf093e9ce573c2594faf487a131c49e76a2395249d68647a67e3d", 0x73}, {&(0x7f00000012c0)="1f97f79113fe546c24d66ea9cffe3192e5f636d0419780fc9b2c52bea413deb7c88062957928caace39e5098a8526d4535b031a71fb4b94d8664f2960cb4afda6f5f9bd46aef04490e816cbe85feaf10d5a9ef3ad11fbf8d9449420a4e5d8a5f1999ac8332f8d7bb026394c1561cdac5a734573b23fc4b67ae846e7f54895d1a7194", 0x82}, {&(0x7f0000000080)="72ecc4a585b3be009ba7b2bfefcb0ca138f92146f0d7a7e9a93a95ebce8e7b4948c3e01b90be73fc8c", 0x29}, {&(0x7f0000001380)="40b868a45193572b6be1594b602610db8d879fcbf6cf066493369b1d3ddd65f6241c51b78a4c7c6210eb6118f20c69276626cb23e0a0eb8bba7c3e2087527836edd504b44f302585c83254b124", 0x4d}, {&(0x7f0000001400)="920a26ed84976cdba36e2acc6ee322c81d7064f1fb072dd340747a115d79abb5d553d9f5fcb9cfe3f399ae342dfb8edffbd99d8efcdb57830935fc338b4859e896750896adaab39365d71b18ae4ec0ea4e04a39a1e65ce86a0e65029a52631d9db16776e69d48505797ef430d8918255d4eca2816a27923f4027cedad4ae2a14e33b3e35c0dcddb607fc8f509c90e7bd8d900f7dfee115169ce183ade3ef3c746a66ca8c880aaef22543d99255349538e53fd69574f6fc0b1f0af9328427d55f37d7a4b2c8701caea69a", 0xca}], 0x8) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:45:04 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:45:04 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, 0x0, 0x0) 00:45:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:45:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 485.037157] loop2: detected capacity change from 0 to 8336 [ 485.038376] loop3: detected capacity change from 0 to 8 [ 485.043505] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 485.045242] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 485.073605] loop5: detected capacity change from 0 to 4 [ 485.095138] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 00:45:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000012c00)) 00:45:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 485.121603] netlink: 'syz-executor.6': attribute type 338 has an invalid length. 00:45:04 executing program 7: getrlimit(0xf, &(0x7f0000000000)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000006780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/104, 0x68}, {&(0x7f0000002480)=""/212, 0xd4}], 0x9, &(0x7f0000002640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002740)=""/136, 0x88}, {&(0x7f0000002800)=""/153, 0x99}, {&(0x7f00000028c0)=""/199, 0xc7}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/73, 0x49}], 0x5, &(0x7f0000003ac0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003b40)=@abs, 0x6e, &(0x7f0000003bc0)}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000003c80)=""/18, 0x12}, {&(0x7f0000003cc0)=""/218, 0xda}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/23, 0x17}, {&(0x7f0000004e00)=""/4, 0x4}], 0x5, &(0x7f0000004ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000004f40), 0x6e, &(0x7f0000005100)=[{&(0x7f0000004fc0)=""/57, 0x39}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/110, 0x6e}], 0x3, &(0x7f0000005140)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000051c0), 0x6e, &(0x7f0000005380)=[{&(0x7f0000005240)=""/91, 0x5b}, {&(0x7f00000052c0)=""/40, 0x28}, {&(0x7f0000005300)=""/88, 0x58}], 0x3}}, {{&(0x7f00000053c0)=@abs, 0x6e, &(0x7f0000006540)=[{&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/90, 0x5a}, {&(0x7f00000064c0)=""/106, 0x6a}], 0x3, &(0x7f0000006580)}}], 0x7, 0x10002, &(0x7f00000067c0)={r0, r1+10000000}) prlimit64(r2, 0x8, &(0x7f0000006800)={0x3c, 0x3ff}, &(0x7f0000006840)) 00:45:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 485.140629] netlink: 'syz-executor.6': attribute type 338 has an invalid length. 00:45:04 executing program 5: pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="d9a4a66cbdb2bb63dd31461939fbde412b296e2b18e75e0ec426db10fa76", 0x1e}, {&(0x7f0000000140)="8ecb0d6ef52518c8453a5ad4a9850e8e1ffd8d835a6243172be00892ea23d8ea115dc56b6d00398b10ef5ee85879c013dd8c07cfd02e2a2dc76e08478ae483ebd36d42992722a3ffb09cfd1fd25727926a1bdd47bd6752c52fba8e603e8f31de9fae117f4e611ad9807da2a2731474eb8cbdde670577782049071bdd17522823170dfa9201ca2f1da4887c7dca06aa2abca6ad5d317b85b546573a69256e29", 0x9f}], 0x2, 0x3ff, 0x7, 0x12) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x38}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r6 = fcntl$getown(r2, 0x9) syz_open_procfs(r6, &(0x7f0000000000)='smaps_rollup\x00') [ 485.155918] netlink: 'syz-executor.6': attribute type 338 has an invalid length. [ 485.176071] syz-executor.3: attempt to access beyond end of device [ 485.176071] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 485.179181] EXT4-fs (loop3): unable to read superblock [ 485.186181] loop2: detected capacity change from 0 to 8336 [ 485.196548] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:45:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:45:04 executing program 7: creat(&(0x7f0000000080)='./file0\x00', 0x3) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x1}) clone(0x10000000, &(0x7f0000000140)="6a35560dc6871e365e3547b309d724b41c1d5dfeb8dc37629ca6921892cd286b3be716e649430f34bba4845cbf91bab8eaf56e40b4a8e1cd657112be9af87fd693cb0bbc35a7d50b0d40e7b962f7a5c5a92c34dfbea95263bd1148dd9cdfa0bcb782d9dfae6db64e7c9c87a003852633f24c5fd46964b1834d93f98bc947d112aa1b5eca196f5b13c807eee17beaa154c8bd49634a076c51049c6e55dd55f962a6a39a15668c0d5b69a2027a504e21089ea1a1c819c4b5b793c0614e4bfdfb196450ce907dd3840ca88fcda0fcdc13a1bfd11c19772a606ac79f0a221b87eadcf6006f39876dbb35c5375fb146f6a8ba7ddbe6269cac768cb940684d2761241ab700f88adff8e4ba57356ecf2488f62e9119287b509f19736bf46e2cf2e06d98aa18287d09b10fbc8a7206c9ef3680f1db5796bc81e83ea083bdb2964e2290d70062b5e71681fa2871356370c2e96a92e6b0baeaf1c2cb7668f2bb4394ce50e10817269d1995e680a795eaae61b68730a733eac3a382024af64cd47a8fc5a0153d9fcb6c98f9ecbd9fe712a153158d20bb5665a388327032d31a431a6361f3e1fded00b49426720663f46349414add56b6bd1fb3198f10e118779a62b2ffa9018ccf9cdbad2f2d27e70219442e629feaa4edf5c3d93322e044b4b7dd4c54eb02072e8274509a326ff921a2c28c815236f30131ff12568e044ea913a53ca0e997c8df1c8fc3a5f17603b986c2af2260a662a6987be5467a42ad1c1bd2755c73424530125dabe3d53528b823539564aedac8a378c85e69c81c07597cbd3dead67d21faf8b2e27111974b4354043e6bf77bb9ee602a1dede8f322d6f321da686fd5c83cbd80710ff929acafa5c41ab8836cfe6615de7a51f7822739ad7d7c8921c218be193407b3b7bdef7ba8930c497e8b0bace080157ac6522fb1a5ad9ad3ec21ebc7139a4a5e3e7e72bad4a51108279c0e31cdbf5ee7893017acd10028e10695d88f9dcd20d0dd8d7ea0189de7d8339b4eeba4053f5eb37abae18ee28bff754a0502b70e333547eae7339532c8eda9b4c05091cd7cbdeb370c68777f1885e3f8da8e16978c1fb2f8a6512464f45da888386aa83653785c84376508d2bfab3cc4f73137154e695223d17abc17ae88fd3214614989880b4d9dd432da3fda8041a5da38dcff36199f8e54670bc2b3e6a553590721955f58fdcad7b4917b656285ae7cb279402202a7402890a518aad19700eef0b80e1f8b83641d1adc98a587512d8527e31e90890e81f42d039cb3fc7bfd1aae7b9b1c46533a7ba111f7b59c217eeec193f60110a23887932168960466d3d1a5b1045d15d4a7702dfd687461ea2fb334cee754446831c6025a32b6af12aec8c3534150231ad4d9531ba76388ee703b1a583dff2c1b5261cd83e1f8192031a06ba63f41a3671a052b4df994bbcfa6a2c00526f3eec34f2b70b2b8caf5db99b6f94130279c01cb7041b3d6639d5e3558d545556581a0448750aa36345f95e0b1ecf41149704997d78858096c9a8b046197d69a24ba7b47bf77f467c02db734a60b38ef56c51eee37670d47639d7d6e337697e43a50ce01845e76409dc509e855142d5e869c44555c44631a741d14dc31004e63f1f4c0ab1d406e72fc53621ad1fdef418858a515db71eb41878a7a9cf812615d0d2edd9f7dcfa65062ad18db6d4febb1e4ea03c50e7bb4fcd106d92e108f252314573f805715f21721f7cde995c91248384bc78f6b737fd6bcd7722a6de2f75af407e1094f82e727f1e114f91c1b9a6eb7c57e4a03077b1db4e43a0bf9b306f19d8021d9d4d9d15e01bb57ded76f7f630e7d1fdbfcfc70da99d08ab42953c76200052a806c88df9baf9739ad20fcdb85b318fb5b2615333536aaa99be369fb2746905b31ca6dbb20f6164e4b55f364525710f187b036f70deda42591c2bda3c40e09bdc53f5ccb01a40c25b6d8dcaceb5d97d405678c3036ebd98901198c297bc7d8bf16d0195b12a37250293e7a8ad66f3f9295def77f49f23ef83c52adfc265b28e6f97de6349f272cddd3a419a8c0b50bf9b5530f4a0cb3e85b948de68f0db38b2a2c55b4935fcd6807c81ec89e45ae97bc5c9b34ad989f7225531079e8a3d147cdbcbd6e1033d237d58dd9e87e14a048425cab617a9dc4136002bab0129c7e5afd06de246f11221bb80cb1abb8630772279207d14245c0ecea0b12a656d4a876aee5de562f268aac7f53787c9517851bda03d3873042249d0774c77939dab1cf6a5d28a9f72b4e56dc490689a83ccbadaa605c18664fdcc6bcf00c5a1958411b5f1df762eec102c93edc8a04edca6110d42e06f2332f9f03417d8b1e31126cfddb5b5611c3659581ba3bed0e9d73ec1170979e2922c8ac2e77b1c01514ae91ea86510cd35f4076aa729f478a9c53eb79161e618a2d983ca49a11493cfee210840c7d13ca4fe8d1bdd1b1a8ba4415aaf8e18770b9ce087ce24538c96d2c8f3a6f43d99d0aa6aaeb018df65000ba71fb775da82da8af98bd4cd4ce9f3a458b437ee8bf2c52b2dc4adceece51a561f687821f0b8192204017fb49c89bd7ceccba46f37ea8fae9633c8ed580d525ee8f1f6f061a595e2debfefdd6ec3570d6891f67252986baae21243897248f62e8f0a0301a6e65a3c6ac108862d5fd0d7b46bded877e3a2d77680b33a494608cbe28d661f65c19673c88928d7e67305167eed08b9041b6e68ee2c6d9b1627a66a3e52a685901718a47f9103e1c9da4e835e30348423b045a4919defb7acca524686cbf8371368704e04ce59c3b355ceb4eab5ca93e557a2c8bd2a5625a73edf6275b7ae589740a44003bc25bbeea3ed2360cee6a0eb1a0cccb727bcd0b84b254439bcfcc0521d11d5399e8e43ddfa44d261599e270da8f6247d6c49b2079e747fafb963c333bcf775e65c5a6707cb4e0b31582b2af75bf15f1eea91ec46890391c7d6377a38eb2559289d661e1e5f9bdc8c0d6ed2cc3886a910023d48aafd5b38577d261c3d18b00577334843a51d5a2fe664a9d36f892d4b5e8c7c8951480b67083b8e57f8f507c723754f53fb73ab660679f8546d4b2498ec73411e0f6e4c569ed09aa8f63c8e629b280ce4d78dcb34154b495c681aa68b59550ec8823274d250191aea99f546baa26df9bec8727bf7daa881ea0689976c5e2152378c53a4ab6b0bc30d74548ad5c2bd6e7e0e6911f0893595541e085cda996bc7c96abf8db45231d5f01addac29578a1f27fcb99c702d485551d12f4305dca435b84856a40a0128faf01d164bcfb847b5fac69b5e52a0b80a3ba47061e5f302296571836f9f65d0d63391f2e8e1e6ed1ee568ed5bcc956eda650409959007e8a635731e6b42fc43733965a6c38024e4df7a22aea1b3ec8f5ba21ef233ddda14f23528cf7369886e96aa9b88bb315cde4109130eb4f822bc9ab63278a39e0afc5297615dc294580d6a59fa032e0348dc50bfe1667bb4f89542ed4151e77084dea17f3dddac4a4e185cf042b257114c61eb3c28630a293e2ee182de3cdcbd3b55a84304c13e6e7540b7e7abad0d6ff5770938ba817a138863b4c728d2cd690230487495b4d340433fbb257b26acdc7bad4d9193b942ebf496b609a060824db73731cbf24f00234c257f78ca516d47d43667f90e171b9ecfcbbcd047bfef08ea0e7d6d29a60dd41a5f00917c58b065a218be08095ea6d06e5c71c14d9ecf901993cdc7209e218589822f2c8215decf3e963c843fb7f0dcac8a6a80d25bcb30fc6e96d718972e517d50529f6f06782a3a248bf9f076caa4b1a3898df69ce7ca2beeca978216a07cde6a26c3a167d1dc3b710a60f70d3a5ea1b6d0368280ac4e057614fbbd4c9ec3221ea1800601675ea3dd22569c87fd92bef7fbcc79700db59dc8fb3c7433ca1254cc76ea87d60400227aa993b6b02744d86d952532d035f9d3469508a706d818e4230cab03a74558811f252ff260f8e89b9c9c134021b206318a75dfc4088ba2f50f71500ee71b24abb0f60a3e7e36eacbce0f760251bdbb79367de44cb2c2769a92d92134d295b1b6587c8bc64ba68709bfb32ea9d93359c169d228c797130912444c9caef9c8172a28cbba80cd1e5ecdeee4005bc52bbb63744e84ead3c1f1f5977a77971e2b7388a2596d7276f9df09778c070fc0fc6b2c539a0d8d6006307597e72b80df8eceb73ad42374ede345dbb8df3acd3707e9b4d1b67d8f6240269214e045dd5600c122d4f0379a5ef08b528dc0c08239ef3173a6024b160fe186014592874524a15a83dec20e4b393bfcdeff72b9632b741efc85121ae189448f4242b79f2860d37ec623f6867f12bbc0ae27104e0cfb27da37329e52fdaeab3700f88cded597330e781cc69e32de31c9d1e6924f9ceb94467a43f3facb6cdcac2b83b5bb130fc1b332827f3875c6c65ada4f59f203f23ba7e1fecd1230999bf9b6c4d52e4556a5aef71f0b75e21a83179fc84decfd21377f5e6be4bdf980e05a744d57be51b91cffe1db6d5c9bf67291cda277c23786170582060f8303704b142e1a19085fc0369e83ea5ba35c3430748ce75924ba407f98627501f4c1a6637cd80ae55140ac06367ff165e635703eeca10c95b2a1a8970d3fb9ac18dec8b06debb51d3fc6fa5419660f9ff2c1e0a4a3298ac389243cfedd494e765424fba60a56f5c3242144f7af8006f609181bd7e63622794a1fd4aee8f4db2fa3c31de5ddef5fa7164f6459dba759892adafb415a3efcb5064ed34cd0c763594ad20ce0968658d11a1590ebc6c123e7baaaf2b1a519c0a8e89b58f994f9c79b163f4defba7de6fa6da9594accb7071ecf732972278652e82550075cd7396cfedf8e7dbd882711285cd41845e3204466133c307bbc1883b35a101f7496266fbfba0f6e7d0d24a6d3ac94dd37dd5dfe81c5ceb9f754c3d148b2d1832a07f85613233a7f3d42b8c983f82e725799c12e2f82c1dff5315bcc0b31166c5779aace8650c9f76234742b743cd0cd1c1faf99172e8fd897c9d567bc2cf0c355806cf00d1d52d8111a3b00a64468b30ba6081d71eb32183181c32630906b292ebc813674757b58426a0b267846902095c1bdf512ca02b399386bb01029502ea5cd71a9a49f2acc7152afd1840a2af03dd0bf8971a4740df9cf960912343599bfe85bd33ed933ff81f3e7d15fd1597ed7cfc8e04e0a38eb1e8de19e250758d12381ff456a1c7e2e6073101321bdcc9305c4f4000b31adb0378f6eb950b538786eb027244f318008eca73fce4ed669d1c2a71895983570d5b9475c8ea8d79ed07529dc2b10c26f5aa3be29a90f9e098732112703dbf53dcd86dd1af6b6712955f1a5f5b5ec2913a22a798ea37a5cea236c4945081b22474c993fd6ebedbbc2f7c2ae25bf1c2a9edaecb5d3ee601bfd3751d96ac8a35951934c9e0194356094d84b6e2b0a123381a585199ca877713c716faeade72cb9e5aa44e376a0e919ef272dc58b6a0de182b32184fd78efe723b4381bcd119c667fdf7faaed735ab83719cd771f25ed96902a1840b5593d33793d493fef41ec46f50be5b826612b7fa60857cc9af89401182ec90ded98b4746bb2bccadb78704517cf889f7fd51970911963cd385d4add3e9e56cde83fd37646244f2fe40edeea3431bdf667d8b6ea3f6376bc6ea3bbc7735080372e46ec4220e9ad3c30faea83ebe1823a0101ce5f95666e7b8e15d35a62eb45adee33538a996f3921fa5bd918598f5e430d420d9a6c5eb992a904b22a80b449bdd6ba988298fac520aca784ead49", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001140)="141af173f5a3f8debddd88ed5f567859c53e2ec621c9c5a9cd41386e6d0d597d99ded93eb0a6d2437f6b157deb90efaedb9d70b46dd5e92888dca1a8cf6eca9a5e0aa7944a50bca3eff3e80e9babb93c7c36b32cfd59481111faec1bbdb76f5e9986ca7e9ca7663b757af3775e0ee9ea7cb903bda15c1adb2a6c4b16724ce0dc204a311803e7480079b1189122870f3df4460ceea1356a9f1ceeb385decd6fa741900061c9af312e812d9b635a5d7c7aa105907233facbcadf4a291ee61c5535e4523546b9c819b0758b") 00:45:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f465", 0x33, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 485.262167] loop2: detected capacity change from 0 to 8336 [ 485.267793] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 485.270095] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:45:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000012c00)) [ 485.314067] loop6: detected capacity change from 0 to 8336 [ 485.329856] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 485.332648] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 485.347649] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 485.358112] syz-executor.3: attempt to access beyond end of device [ 485.358112] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 485.383733] EXT4-fs (loop3): unable to read superblock 00:45:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:45:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, 0x0, 0x0) 00:45:13 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400}) 00:45:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) 00:45:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:45:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:45:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, &(0x7f0000012c00)) 00:45:13 executing program 5: getrlimit(0xf, &(0x7f0000000000)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000006780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000002580)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/104, 0x68}, {&(0x7f0000002480)=""/212, 0xd4}], 0x9, &(0x7f0000002640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002740)=""/136, 0x88}, {&(0x7f0000002800)=""/153, 0x99}, {&(0x7f00000028c0)=""/199, 0xc7}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/73, 0x49}], 0x5, &(0x7f0000003ac0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000003b40)=@abs, 0x6e, &(0x7f0000003bc0)}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000004e40)=[{&(0x7f0000003c80)=""/18, 0x12}, {&(0x7f0000003cc0)=""/218, 0xda}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/23, 0x17}, {&(0x7f0000004e00)=""/4, 0x4}], 0x5, &(0x7f0000004ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000004f40), 0x6e, &(0x7f0000005100)=[{&(0x7f0000004fc0)=""/57, 0x39}, {&(0x7f0000005000)=""/105, 0x69}, {&(0x7f0000005080)=""/110, 0x6e}], 0x3, &(0x7f0000005140)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000051c0), 0x6e, &(0x7f0000005380)=[{&(0x7f0000005240)=""/91, 0x5b}, {&(0x7f00000052c0)=""/40, 0x28}, {&(0x7f0000005300)=""/88, 0x58}], 0x3}}, {{&(0x7f00000053c0)=@abs, 0x6e, &(0x7f0000006540)=[{&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/90, 0x5a}, {&(0x7f00000064c0)=""/106, 0x6a}], 0x3, &(0x7f0000006580)}}], 0x7, 0x10002, &(0x7f00000067c0)={r0, r1+10000000}) prlimit64(r2, 0x8, &(0x7f0000006800)={0x3c, 0x3ff}, &(0x7f0000006840)) [ 494.644412] loop6: detected capacity change from 0 to 8336 [ 494.649905] syz-executor.3: attempt to access beyond end of device [ 494.649905] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 494.652416] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 494.653497] EXT4-fs (loop3): unable to read superblock [ 494.674232] loop2: detected capacity change from 0 to 8336 [ 494.683963] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:45:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, 0x0) 00:45:14 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x329, 0x0, 0x20}) 00:45:14 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x329, 0x0, 0x20}) [ 494.754908] loop3: detected capacity change from 0 to 8 00:45:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, 0x0) 00:45:14 executing program 7: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000340)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000380)={0x1051, 0x8, 0x1, 0x80, 0x7, 0x8}) clone3(&(0x7f0000000240)={0x80000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x33}, &(0x7f0000000140)=""/15, 0xf, &(0x7f0000000180)=""/107, &(0x7f0000000200)=[0x0], 0x1}, 0x58) capset(&(0x7f00000002c0)={0x19980330, r0}, &(0x7f0000000440)={0x9, 0x10000, 0x7fffffff, 0x6, 0x8, 0x2}) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) capset(&(0x7f00000003c0)={0x20071026, r1}, &(0x7f0000000400)={0x6, 0x83, 0x552, 0xff5, 0x8000, 0x40}) gettid() 00:45:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, 0x0) 00:45:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) [ 494.840726] loop2: detected capacity change from 0 to 8336 [ 494.898366] loop3: detected capacity change from 0 to 8 00:45:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, 0x0) [ 494.978141] loop2: detected capacity change from 0 to 8336 00:45:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:45:23 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x329, 0x0, 0x20}) 00:45:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x329, 0x0, 0x20}) 00:45:23 executing program 4: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000340)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000380)={0x1051, 0x8, 0x1, 0x80, 0x7, 0x8}) clone3(&(0x7f0000000240)={0x80000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x33}, &(0x7f0000000140)=""/15, 0xf, &(0x7f0000000180)=""/107, &(0x7f0000000200)=[0x0], 0x1}, 0x58) capset(&(0x7f00000002c0)={0x19980330, r0}, &(0x7f0000000440)={0x9, 0x10000, 0x7fffffff, 0x6, 0x8, 0x2}) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) capset(&(0x7f00000003c0)={0x20071026, r1}, &(0x7f0000000400)={0x6, 0x83, 0x552, 0xff5, 0x8000, 0x40}) gettid() 00:45:23 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x3}) 00:45:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, 0x0) 00:45:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, 0x0) 00:45:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 504.319793] loop3: detected capacity change from 0 to 8 00:45:23 executing program 4: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000340)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000380)={0x1051, 0x8, 0x1, 0x80, 0x7, 0x8}) clone3(&(0x7f0000000240)={0x80000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x33}, &(0x7f0000000140)=""/15, 0xf, &(0x7f0000000180)=""/107, &(0x7f0000000200)=[0x0], 0x1}, 0x58) capset(&(0x7f00000002c0)={0x19980330, r0}, &(0x7f0000000440)={0x9, 0x10000, 0x7fffffff, 0x6, 0x8, 0x2}) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) capset(&(0x7f00000003c0)={0x20071026, r1}, &(0x7f0000000400)={0x6, 0x83, 0x552, 0xff5, 0x8000, 0x40}) gettid() [ 504.348373] loop2: detected capacity change from 0 to 8336 00:45:23 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syncfs(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x8001, 0x2, 0x329, 0x0, 0x20}) 00:45:23 executing program 7: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x1c, 0xfff, 0xfe, 0x1, 0x1fc, 0x10001}) 00:45:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, 0x0) 00:45:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, 0x0) [ 504.657877] loop5: detected capacity change from 0 to 8 [ 504.682901] loop2: detected capacity change from 0 to 8336 00:45:34 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x30000002}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x1000, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x1, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0x2014}) r4 = gettid() r5 = gettid() tgkill(r4, r5, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) capset(&(0x7f00000001c0)={0x20080522, r5}, &(0x7f0000000140)={0x2, 0x8, 0x8001, 0x10000, 0x80000000, 0x9}) 00:45:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:45:34 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x94, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xdc30}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000000}, 0x44005) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:45:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x800}], 0x0, &(0x7f0000012c00)) 00:45:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, 0x0) 00:45:34 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:45:34 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) capset(&(0x7f0000000340)={0x20071026, r0}, &(0x7f0000000380)={0x2, 0x40, 0xffff, 0x4, 0x800, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) capset(&(0x7f00000003c0)={0x19980330, r0}, &(0x7f0000000400)={0x9, 0x1, 0x1f5, 0x7, 0x80000000}) clone(0x800, &(0x7f0000000140)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)="97916c3011fe359169926cd510a91c5a4dd2b23641c623de05fbc0baa0b402d0ca54ae847fd7606cd7c856dff015f5362c5405dae373c7bdba35fd0bee2c78a2d335d0d86a5629bef55210c55c08f355604d421cc5fb5261ce6a499913b1ccbbb3f653166d3137d56da4b83ee2c287338bd42523ebbb12fb90361aecbec687d27ce8ac8f485603e3a9fdea87de916fac3da8a1398cee9875e2813dd7ae05e3ba3d6e10d5fa9db57548db41bd4f1022610ef3bd9c975e04a4f88f6f9909ab6c73e25fc65cbd2b8aa55d6e71100529c03d8875329e0fe79b9984437965a39fef5d2687c250") 00:45:34 executing program 7: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0x1, 0x3a, 0x6, 0xff, 0xffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setregs(0xf, r2, 0x80000000, &(0x7f0000000140)="f475ae489928a6fc7fb591928be89a0cf204e9bc78d655bdde024e483e199a8353993a8a45c80dcc580ba0b6833c73cc6a3783236e3b6061bb0eaecca83e9cca4ca8aef0aa34d0dd0792dbe9473def2c321c893d32ae8ddcc5325e0b3e80061f58c081726c2d45c8593a811f673c96086a080ff88a98653575edb5a4b00c5f5a8fcf4d8b65a6548d1375adeb54e883ca1b18d93e3fdec4a5cab44bad6c4f31c02f6ec083fc4ff6da03") [ 514.747545] netlink: 'syz-executor.0': attribute type 338 has an invalid length. 00:45:34 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) [ 514.790220] loop2: detected capacity change from 0 to 8336 [ 514.790452] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 514.795336] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 514.800707] loop5: detected capacity change from 0 to 8 [ 514.813208] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (2 blocks) 00:45:34 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0cc328c3af"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r1) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) 00:45:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:45:34 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:45:34 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:45:34 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) readahead(0xffffffffffffffff, 0x7ff, 0x0) 00:45:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:45:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:45:34 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x101, 0x5, 0x0, 0x4, 0xf012, 0x9}) capset(&(0x7f0000000240)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000280)={0x3, 0x0, 0x1, 0x8, 0xf4, 0x1000}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = gettid() r2 = gettid() tgkill(r1, r2, 0x0) capset(&(0x7f00000001c0)={0x19971634, r2}, &(0x7f0000000200)={0x8eab, 0x4, 0x3, 0x2b, 0x9, 0x10000}) capset(&(0x7f0000000140)={0x20080522, r0}, &(0x7f0000000180)={0x4, 0x4, 0x10000, 0x80000000, 0x6, 0x8}) [ 515.101546] loop0: detected capacity change from 0 to 8336 [ 515.120539] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 515.121292] EXT4-fs (loop0): group descriptors corrupted! 00:45:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (fail_nth: 1) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:45:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 1) 00:45:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:45:43 executing program 7: capset(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x3}) capset(&(0x7f0000000000), &(0x7f0000000040)={0x9, 0x7469, 0x3f, 0x8, 0x5, 0x7}) 00:45:43 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:45:43 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) 00:45:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 1) 00:45:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 1) 00:45:43 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x3, 0x7f, 0x8, 0x1, 0x7, 0x101}) [ 524.632905] FAULT_INJECTION: forcing a failure. [ 524.632905] name failslab, interval 1, probability 0, space 0, times 0 [ 524.634029] CPU: 0 UID: 0 PID: 5719 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 524.634046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 524.634053] Call Trace: [ 524.634057] [ 524.634062] dump_stack_lvl+0xfa/0x120 [ 524.634080] should_fail_ex+0x4d7/0x5e0 [ 524.634099] ? iovec_from_user+0xfe/0x130 [ 524.634117] should_failslab+0xc2/0x120 [ 524.634131] __kmalloc_noprof+0xb4/0x4b0 [ 524.634149] ? perf_tp_event+0x807/0xe70 [ 524.634167] iovec_from_user+0xfe/0x130 [ 524.634186] __import_iovec+0x88/0x4c0 [ 524.634207] import_iovec+0x86/0xb0 [ 524.634227] vfs_writev+0x124/0xcd0 [ 524.634247] ? proc_task_getattr+0x1e2/0x230 [ 524.634267] ? __pfx_vfs_writev+0x10/0x10 [ 524.634284] ? ksys_write+0x121/0x240 [ 524.634296] ? lock_acquire+0x15e/0x2f0 [ 524.634310] ? __fget_files+0x34/0x3b0 [ 524.634328] ? find_held_lock+0x2b/0x80 [ 524.634345] ? __fget_files+0x203/0x3b0 [ 524.634362] ? lock_release+0xc8/0x290 [ 524.634377] ? __fget_files+0x20d/0x3b0 [ 524.634399] do_pwritev+0x1ab/0x280 [ 524.634416] ? __pfx_do_pwritev+0x10/0x10 [ 524.634434] ? ksys_write+0x1a3/0x240 [ 524.634444] ? __pfx_ksys_write+0x10/0x10 [ 524.634461] __x64_sys_pwritev2+0xef/0x160 [ 524.634475] do_syscall_64+0xbf/0x360 [ 524.634489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.634502] RIP: 0033:0x7f6986303b19 [ 524.634511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.634522] RSP: 002b:00007f6983879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 524.634534] RAX: ffffffffffffffda RBX: 00007f6986416f60 RCX: 00007f6986303b19 [ 524.634542] RDX: 0000000000000016 RSI: 0000000020000500 RDI: 0000000000000003 [ 524.634550] RBP: 00007f69838791d0 R08: 0000000000000000 R09: 0000000000000000 [ 524.634557] R10: 0000000000001008 R11: 0000000000000246 R12: 0000000000000001 [ 524.634564] R13: 00007ffff4112bff R14: 00007f6983879300 R15: 0000000000022000 [ 524.634579] [ 524.662687] FAULT_INJECTION: forcing a failure. [ 524.662687] name failslab, interval 1, probability 0, space 0, times 0 [ 524.665838] CPU: 1 UID: 0 PID: 5721 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 524.665869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 524.665882] Call Trace: [ 524.665890] [ 524.665898] dump_stack_lvl+0xfa/0x120 [ 524.665932] should_fail_ex+0x4d7/0x5e0 [ 524.665973] should_failslab+0xc2/0x120 [ 524.666000] __kmalloc_cache_noprof+0x73/0x470 [ 524.666034] ? task_active_pid_ns+0xa9/0xd0 [ 524.666067] ? alloc_name+0x41/0x110 [ 524.666104] ? alloc_name+0x41/0x110 [ 524.666133] alloc_name+0x41/0x110 [ 524.666163] __x64_sys_memfd_create+0x130/0x280 [ 524.666196] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 524.666236] do_syscall_64+0xbf/0x360 [ 524.666263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.666286] RIP: 0033:0x7f21745c3b19 [ 524.666304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.666324] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 524.666346] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 524.666361] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 524.666374] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 524.666388] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 524.666401] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 524.666429] 00:45:44 executing program 4: set_tid_address(0x0) (fail_nth: 1) [ 524.707471] FAULT_INJECTION: forcing a failure. [ 524.707471] name failslab, interval 1, probability 0, space 0, times 0 [ 524.708388] CPU: 0 UID: 0 PID: 5723 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 524.708404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 524.708412] Call Trace: [ 524.708417] [ 524.708422] dump_stack_lvl+0xfa/0x120 [ 524.708441] should_fail_ex+0x4d7/0x5e0 [ 524.708465] should_failslab+0xc2/0x120 [ 524.708479] __kmalloc_cache_noprof+0x73/0x470 [ 524.708497] ? task_active_pid_ns+0xa9/0xd0 [ 524.708515] ? alloc_name+0x41/0x110 [ 524.708534] ? alloc_name+0x41/0x110 [ 524.708549] alloc_name+0x41/0x110 [ 524.708566] __x64_sys_memfd_create+0x130/0x280 [ 524.708583] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 524.708605] do_syscall_64+0xbf/0x360 [ 524.708620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.708633] RIP: 0033:0x7f95cf2b9b19 [ 524.708642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.708654] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 524.708665] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 524.708673] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 524.708680] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 524.708688] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 524.708694] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 524.708709] 00:45:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 2) [ 524.741905] FAULT_INJECTION: forcing a failure. [ 524.741905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.742887] CPU: 0 UID: 0 PID: 5724 Comm: syz-executor.5 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 524.742903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 524.742910] Call Trace: [ 524.742913] [ 524.742918] dump_stack_lvl+0xfa/0x120 [ 524.742935] should_fail_ex+0x4d7/0x5e0 [ 524.742955] _copy_from_user+0x30/0xd0 [ 524.742974] move_addr_to_kernel.part.0+0x40/0x120 [ 524.742989] __sys_connect+0xd4/0x1a0 [ 524.743004] ? __pfx___sys_connect+0x10/0x10 [ 524.743018] ? perf_trace_preemptirq_template+0x259/0x430 [ 524.743041] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 524.743059] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 524.743079] ? ksys_write+0x1a3/0x240 [ 524.743090] ? __pfx_ksys_write+0x10/0x10 [ 524.743104] __x64_sys_connect+0x73/0xb0 [ 524.743119] do_syscall_64+0xbf/0x360 [ 524.743133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.743146] RIP: 0033:0x7f0b72e5ab19 [ 524.743155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.743166] RSP: 002b:00007f0b703d0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 524.743178] RAX: ffffffffffffffda RBX: 00007f0b72f6df60 RCX: 00007f0b72e5ab19 [ 524.743186] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000004 [ 524.743193] RBP: 00007f0b703d01d0 R08: 0000000000000000 R09: 0000000000000000 [ 524.743200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.743207] R13: 00007fff19fe23cf R14: 00007f0b703d0300 R15: 0000000000022000 [ 524.743222] [ 524.794697] loop6: detected capacity change from 0 to 8336 00:45:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 2) [ 524.800334] FAULT_INJECTION: forcing a failure. [ 524.800334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.802075] CPU: 1 UID: 0 PID: 5729 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 524.802105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 524.802118] Call Trace: [ 524.802125] [ 524.802134] dump_stack_lvl+0xfa/0x120 [ 524.802164] should_fail_ex+0x4d7/0x5e0 [ 524.802200] _copy_to_user+0x32/0xd0 [ 524.802235] simple_read_from_buffer+0xe0/0x180 [ 524.802270] proc_fail_nth_read+0x189/0x270 [ 524.802307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.802343] ? security_file_permission+0x22/0x90 [ 524.802374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.802408] vfs_read+0x1eb/0xbe0 [ 524.802448] ? __pfx_vfs_read+0x10/0x10 [ 524.802489] ? lock_release+0xc8/0x290 [ 524.802518] ? __fget_files+0x20d/0x3b0 [ 524.802560] ksys_read+0x121/0x240 [ 524.802579] ? __pfx_ksys_read+0x10/0x10 [ 524.802607] do_syscall_64+0xbf/0x360 [ 524.802633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.802655] RIP: 0033:0x7f02a3f9669c [ 524.802672] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 524.802693] RSP: 002b:00007f02a1559170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.802714] RAX: ffffffffffffffda RBX: 0000000000000081 RCX: 00007f02a3f9669c [ 524.802729] RDX: 000000000000000f RSI: 00007f02a15591e0 RDI: 0000000000000003 [ 524.802742] RBP: 00007f02a15591d0 R08: 0000000000000000 R09: 0000000000000000 [ 524.802754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.802767] R13: 00007fffd7919c5f R14: 00007f02a1559300 R15: 0000000000022000 [ 524.802796] 00:45:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (fail_nth: 2) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:45:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) capset(&(0x7f0000000340)={0x20071026, r1}, &(0x7f0000000380)={0x200, 0x4, 0x401, 0x2, 0xef, 0x8}) [ 524.867190] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 524.874396] EXT4-fs (loop6): get root inode failed [ 524.875363] EXT4-fs (loop6): mount failed 00:45:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 2) 00:45:44 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x40}) 00:45:44 executing program 4: set_tid_address(0x0) 00:45:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 3) [ 525.036577] loop0: detected capacity change from 0 to 8 [ 525.057709] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 525.092091] FAULT_INJECTION: forcing a failure. [ 525.092091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.093981] CPU: 1 UID: 0 PID: 5750 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 525.094011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 525.094024] Call Trace: [ 525.094032] [ 525.094041] dump_stack_lvl+0xfa/0x120 [ 525.094071] should_fail_ex+0x4d7/0x5e0 [ 525.094106] strncpy_from_user+0x3b/0x2f0 [ 525.094134] alloc_name+0x78/0x110 [ 525.094166] __x64_sys_memfd_create+0x130/0x280 [ 525.094199] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 525.094240] do_syscall_64+0xbf/0x360 [ 525.094265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.094288] RIP: 0033:0x7f21745c3b19 [ 525.094305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.094326] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 525.094347] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 525.094362] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 525.094375] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 525.094389] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 525.094402] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 525.094430] 00:45:44 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, 0x1}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x8013e, 0x105, 0x400, 0xffffffe0, 0xfffffffe, 0x6}) ptrace$peek(0x2, 0x0, &(0x7f0000000000)) capset(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x2, 0x0, 0x2e284f52, 0x81, 0x0, 0x6000000}) 00:45:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:45:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 3) 00:45:44 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='-]/-.(%!(\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) set_tid_address(0x0) 00:45:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 4) 00:45:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:45:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 3) 00:45:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) [ 525.552291] FAULT_INJECTION: forcing a failure. [ 525.552291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.554032] CPU: 1 UID: 0 PID: 5759 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 525.554061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 525.554074] Call Trace: [ 525.554081] [ 525.554089] dump_stack_lvl+0xfa/0x120 [ 525.554120] should_fail_ex+0x4d7/0x5e0 [ 525.554155] strncpy_from_user+0x3b/0x2f0 [ 525.554183] alloc_name+0x78/0x110 [ 525.554214] __x64_sys_memfd_create+0x130/0x280 [ 525.554247] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 525.554288] do_syscall_64+0xbf/0x360 [ 525.554313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.554336] RIP: 0033:0x7f95cf2b9b19 [ 525.554353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.554373] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 525.554394] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 525.554409] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 525.554422] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 525.554436] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 525.554449] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 525.554483] [ 525.554577] FAULT_INJECTION: forcing a failure. [ 525.554577] name failslab, interval 1, probability 0, space 0, times 0 [ 525.566409] CPU: 0 UID: 0 PID: 5758 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 525.566426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 525.566434] Call Trace: [ 525.566439] [ 525.566444] dump_stack_lvl+0xfa/0x120 [ 525.566468] should_fail_ex+0x4d7/0x5e0 [ 525.566489] ? jbd2__journal_start+0x193/0x6b0 [ 525.566504] should_failslab+0xc2/0x120 [ 525.566519] kmem_cache_alloc_noprof+0x5f/0x470 [ 525.566537] ? lock_is_held_type+0x9e/0x120 [ 525.566553] jbd2__journal_start+0x193/0x6b0 [ 525.566570] __ext4_journal_start_sb+0x325/0x5d0 [ 525.566582] ? ext4_dirty_inode+0xa5/0x130 [ 525.566598] ext4_dirty_inode+0xa5/0x130 [ 525.566610] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 525.566623] __mark_inode_dirty+0x1b7/0xd00 [ 525.566640] generic_update_time+0xcb/0xf0 [ 525.566654] file_modified+0x1f0/0x230 [ 525.566668] ext4_buffered_write_iter+0xf4/0x430 [ 525.566688] ext4_file_write_iter+0x9df/0x1990 [ 525.566708] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 525.566726] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 525.566748] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 525.566766] ? __kasan_kmalloc+0x7f/0x90 [ 525.566782] ? __lock_acquire+0xc65/0x1b70 [ 525.566798] do_iter_readv_writev+0x5a6/0x870 [ 525.566819] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 525.566842] ? lock_is_held_type+0x9e/0x120 [ 525.566855] vfs_writev+0x2d4/0xcd0 [ 525.566875] ? __pfx_vfs_writev+0x10/0x10 [ 525.566891] ? ksys_write+0x121/0x240 [ 525.566905] ? __fget_files+0x34/0x3b0 [ 525.566923] ? find_held_lock+0x2b/0x80 [ 525.566939] ? __fget_files+0x203/0x3b0 [ 525.566956] ? lock_release+0xc8/0x290 [ 525.566971] ? __fget_files+0x20d/0x3b0 [ 525.566993] do_pwritev+0x1ab/0x280 [ 525.567011] ? __pfx_do_pwritev+0x10/0x10 [ 525.567029] ? ksys_write+0x1a3/0x240 [ 525.567040] ? __pfx_ksys_write+0x10/0x10 [ 525.567053] __x64_sys_pwritev2+0xef/0x160 [ 525.567066] do_syscall_64+0xbf/0x360 [ 525.567081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.567094] RIP: 0033:0x7f6986303b19 [ 525.567104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.567115] RSP: 002b:00007f6983879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 525.567127] RAX: ffffffffffffffda RBX: 00007f6986416f60 RCX: 00007f6986303b19 [ 525.567135] RDX: 0000000000000016 RSI: 0000000020000500 RDI: 0000000000000003 [ 525.567142] RBP: 00007f69838791d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.567149] R10: 0000000000001008 R11: 0000000000000246 R12: 0000000000000001 [ 525.567156] R13: 00007ffff4112bff R14: 00007f6983879300 R15: 0000000000022000 [ 525.567172] [ 525.589547] FAULT_INJECTION: forcing a failure. [ 525.589547] name failslab, interval 1, probability 0, space 0, times 0 [ 525.590567] CPU: 0 UID: 0 PID: 5761 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 525.590583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 525.590590] Call Trace: [ 525.590594] [ 525.590598] dump_stack_lvl+0xfa/0x120 [ 525.590612] should_fail_ex+0x4d7/0x5e0 [ 525.590630] should_failslab+0xc2/0x120 [ 525.590643] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 525.590662] ? shmem_alloc_inode+0x27/0x50 [ 525.590680] shmem_alloc_inode+0x27/0x50 [ 525.590693] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 525.590706] alloc_inode+0x67/0x250 [ 525.590720] new_inode+0x1e/0x160 [ 525.590735] __shmem_get_inode+0x17c/0xe80 [ 525.590754] __shmem_file_setup+0x107/0x370 [ 525.590772] alloc_file+0x11c/0x500 [ 525.590790] __x64_sys_memfd_create+0x193/0x280 [ 525.590808] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 525.590825] ? handle_softirqs+0x50c/0x770 [ 525.590847] do_syscall_64+0xbf/0x360 [ 525.590861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.590872] RIP: 0033:0x7f21745c3b19 [ 525.590881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.590893] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 525.590904] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 525.590912] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 525.590919] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 525.590926] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 525.590933] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 525.590948] 00:45:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 4) 00:45:45 executing program 7: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000140)={0x0, 0x6, 0x8, 0x1f, 0xc5, 0x80}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) [ 525.735171] FAULT_INJECTION: forcing a failure. [ 525.735171] name failslab, interval 1, probability 0, space 0, times 0 [ 525.736999] CPU: 1 UID: 0 PID: 5773 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 525.737028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 525.737040] Call Trace: [ 525.737048] [ 525.737055] dump_stack_lvl+0xfa/0x120 [ 525.737085] should_fail_ex+0x4d7/0x5e0 [ 525.737119] should_failslab+0xc2/0x120 [ 525.737143] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 525.737177] ? shmem_alloc_inode+0x27/0x50 [ 525.737207] shmem_alloc_inode+0x27/0x50 [ 525.737230] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 525.737253] alloc_inode+0x67/0x250 [ 525.737279] new_inode+0x1e/0x160 [ 525.737305] __shmem_get_inode+0x17c/0xe80 [ 525.737338] __shmem_file_setup+0x107/0x370 [ 525.737370] alloc_file+0x11c/0x500 [ 525.737401] __x64_sys_memfd_create+0x193/0x280 [ 525.737432] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 525.737479] do_syscall_64+0xbf/0x360 [ 525.737503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.737526] RIP: 0033:0x7f95cf2b9b19 [ 525.737542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.737562] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 525.737583] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 525.737597] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 525.737610] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 525.737623] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 525.737635] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 525.737662] 00:45:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:45:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 5) 00:45:54 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) set_tid_address(0x0) set_tid_address(0xffffffffffffffff) set_tid_address(&(0x7f0000000040)) 00:45:54 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 00:45:54 executing program 7: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)) 00:45:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 5) 00:45:54 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 4) 00:45:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 535.291276] loop6: detected capacity change from 0 to 8336 [ 535.302958] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 535.307058] EXT4-fs (loop6): get root inode failed [ 535.307613] EXT4-fs (loop6): mount failed [ 535.341014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.343981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:45:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 6) [ 535.370353] loop0: detected capacity change from 0 to 8 [ 535.425565] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:45:54 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x2, 0x2, 0x0, 0x80000004, 0x3, 0xdd0f}) [ 535.461581] FAULT_INJECTION: forcing a failure. [ 535.461581] name failslab, interval 1, probability 0, space 0, times 0 [ 535.463292] CPU: 1 UID: 0 PID: 5805 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 535.463321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.463334] Call Trace: [ 535.463341] [ 535.463349] dump_stack_lvl+0xfa/0x120 [ 535.463380] should_fail_ex+0x4d7/0x5e0 [ 535.463415] ? security_inode_alloc+0x3e/0x130 [ 535.463458] should_failslab+0xc2/0x120 [ 535.463482] kmem_cache_alloc_noprof+0x5f/0x470 [ 535.463515] ? lockdep_init_map_type+0x4b/0x240 [ 535.463546] security_inode_alloc+0x3e/0x130 [ 535.463572] inode_init_always_gfp+0xc94/0xff0 [ 535.463611] alloc_inode+0x8d/0x250 [ 535.463637] new_inode+0x1e/0x160 [ 535.463664] __shmem_get_inode+0x17c/0xe80 [ 535.463699] __shmem_file_setup+0x107/0x370 [ 535.463732] alloc_file+0x11c/0x500 [ 535.463763] __x64_sys_memfd_create+0x193/0x280 [ 535.463796] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 535.463837] do_syscall_64+0xbf/0x360 [ 535.463862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.463885] RIP: 0033:0x7f21745c3b19 [ 535.463902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.463923] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 535.463944] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 535.463959] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 535.463972] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 535.463985] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 535.463998] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 535.464026] 00:45:54 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) 00:45:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 6) 00:45:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 7) 00:45:54 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x3, 0x101, 0x1}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0x7}, 'port1\x00', 0x80, 0x800, 0x0, 0x9, 0x4, 0x1, 0x9, 0x0, 0x7, 0x4}) [ 535.638542] FAULT_INJECTION: forcing a failure. [ 535.638542] name failslab, interval 1, probability 0, space 0, times 0 [ 535.639537] CPU: 0 UID: 0 PID: 5813 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 535.639555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.639562] Call Trace: [ 535.639570] [ 535.639575] dump_stack_lvl+0xfa/0x120 [ 535.639596] should_fail_ex+0x4d7/0x5e0 [ 535.639616] ? security_inode_alloc+0x3e/0x130 [ 535.639631] should_failslab+0xc2/0x120 [ 535.639646] kmem_cache_alloc_noprof+0x5f/0x470 [ 535.639666] ? lockdep_init_map_type+0x4b/0x240 [ 535.639685] security_inode_alloc+0x3e/0x130 [ 535.639699] inode_init_always_gfp+0xc94/0xff0 [ 535.639724] alloc_inode+0x8d/0x250 [ 535.639739] new_inode+0x1e/0x160 [ 535.639754] __shmem_get_inode+0x17c/0xe80 [ 535.639775] __shmem_file_setup+0x107/0x370 [ 535.639795] alloc_file+0x11c/0x500 [ 535.639814] __x64_sys_memfd_create+0x193/0x280 [ 535.639833] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 535.639856] do_syscall_64+0xbf/0x360 [ 535.639871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.639885] RIP: 0033:0x7f95cf2b9b19 [ 535.639895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.639907] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 535.639920] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 535.639928] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 535.639936] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 535.639944] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 535.639951] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 535.639967] 00:45:55 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) 00:45:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 7) [ 535.735341] loop6: detected capacity change from 0 to 8336 [ 535.775711] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 535.798731] EXT4-fs (loop6): get root inode failed [ 535.799637] EXT4-fs (loop6): mount failed [ 535.840434] loop0: detected capacity change from 0 to 8 [ 535.860038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.862730] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 535.872336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:46:04 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) 00:46:04 executing program 7: capset(0xfffffffffffffffe, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20}) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x8, 0x1000, 0x200, 0x0, 0xfe, 0x8}) 00:46:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 8) 00:46:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 8) 00:46:04 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) 00:46:04 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 5) 00:46:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:46:04 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x3, 0x101, 0x1}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0x7}, 'port1\x00', 0x80, 0x800, 0x0, 0x9, 0x4, 0x1, 0x9, 0x0, 0x7, 0x4}) 00:46:04 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0xeb, 0x4, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000005, 0x50, r0, 0xea178000) set_tid_address(0x0) [ 545.403015] FAULT_INJECTION: forcing a failure. [ 545.403015] name failslab, interval 1, probability 0, space 0, times 0 [ 545.405031] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 545.405064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.405078] Call Trace: [ 545.405087] [ 545.405096] dump_stack_lvl+0xfa/0x120 [ 545.405129] should_fail_ex+0x4d7/0x5e0 [ 545.405168] should_failslab+0xc2/0x120 [ 545.405195] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 545.405231] ? find_held_lock+0x2b/0x80 [ 545.405266] ? __d_alloc+0x31/0xa10 [ 545.405292] ? lockdep_init_map_type+0x4b/0x240 [ 545.405323] __d_alloc+0x31/0xa10 [ 545.405346] ? mpol_shared_policy_init+0x24f/0x390 [ 545.405373] d_alloc_pseudo+0x1d/0xc0 [ 545.405404] alloc_file_pseudo+0xbe/0x220 [ 545.405436] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 545.405474] ? __shmem_get_inode+0x682/0xe80 [ 545.405513] __shmem_file_setup+0x1a7/0x370 [ 545.405550] alloc_file+0x11c/0x500 [ 545.405584] __x64_sys_memfd_create+0x193/0x280 [ 545.405620] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 545.405666] do_syscall_64+0xbf/0x360 [ 545.405694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.405719] RIP: 0033:0x7f95cf2b9b19 [ 545.405738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 545.405763] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 545.405788] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 545.405804] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 545.405819] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 545.405834] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 545.405848] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 545.405879] [ 545.408278] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 545.409365] FAULT_INJECTION: forcing a failure. [ 545.409365] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 545.411580] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 545.411871] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) 00:46:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="006b82f35412eb70436a0000"]) set_tid_address(0x0) [ 545.411903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.411917] Call Trace: [ 545.411925] [ 545.411934] dump_stack_lvl+0xfa/0x120 [ 545.411961] should_fail_ex+0x4d7/0x5e0 [ 545.411998] should_fail_alloc_page+0xe0/0x110 [ 545.412026] prepare_alloc_pages+0x1af/0x500 [ 545.412056] ? __is_insn_slot_addr+0x140/0x290 [ 545.412098] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 545.412135] ? unwind_get_return_address+0x59/0xa0 [ 545.412171] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.412216] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 545.412269] ? __lock_acquire+0x694/0x1b70 [ 545.412296] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 545.412327] ? policy_nodemask+0xeb/0x4e0 [ 545.412363] alloc_pages_mpol+0xed/0x340 [ 545.412396] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 545.412430] ? filemap_get_entry+0x1b1/0x3b0 [ 545.412462] ? lock_release+0xc8/0x290 [ 545.412491] folio_alloc_noprof+0x22/0x290 [ 545.412529] filemap_alloc_folio_noprof+0x376/0x420 [ 545.412560] ? __lock_acquire+0x694/0x1b70 [ 545.412590] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 545.412623] ? __lock_acquire+0x694/0x1b70 [ 545.412657] __filemap_get_folio+0x384/0x960 [ 545.412687] ext4_da_write_begin+0x389/0xaa0 [ 545.412725] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 545.412755] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 545.412787] ? reacquire_held_locks+0xd1/0x200 [ 545.412818] generic_perform_write+0x3a4/0x820 [ 545.412856] ? lock_release+0xc8/0x290 [ 545.412888] ? __pfx_generic_perform_write+0x10/0x10 [ 545.412920] ? __mark_inode_dirty+0x53b/0xd00 [ 545.412951] ? generic_update_time+0xcb/0xf0 00:46:04 executing program 7: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) [ 545.412975] ? mnt_put_write_access_file+0x45/0xe0 [ 545.413016] ext4_buffered_write_iter+0x11a/0x430 [ 545.413058] ext4_file_write_iter+0x9df/0x1990 [ 545.413099] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 545.413135] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 545.413180] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 545.413215] ? __kasan_kmalloc+0x7f/0x90 [ 545.413246] ? __lock_acquire+0xc65/0x1b70 [ 545.413277] do_iter_readv_writev+0x5a6/0x870 [ 545.413315] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 545.413360] ? lock_is_held_type+0x9e/0x120 [ 545.413388] vfs_writev+0x2d4/0xcd0 [ 545.413429] ? __pfx_vfs_writev+0x10/0x10 [ 545.413464] ? ksys_write+0x121/0x240 [ 545.413492] ? __fget_files+0x34/0x3b0 [ 545.413527] ? find_held_lock+0x2b/0x80 [ 545.413562] ? __fget_files+0x203/0x3b0 [ 545.413597] ? lock_release+0xc8/0x290 [ 545.413628] ? __fget_files+0x20d/0x3b0 [ 545.413674] do_pwritev+0x1ab/0x280 [ 545.413711] ? __pfx_do_pwritev+0x10/0x10 [ 545.413747] ? ksys_write+0x1a3/0x240 [ 545.413768] ? __pfx_ksys_write+0x10/0x10 [ 545.413795] __x64_sys_pwritev2+0xef/0x160 [ 545.413824] do_syscall_64+0xbf/0x360 [ 545.413852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.413876] RIP: 0033:0x7f6986303b19 [ 545.413895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 545.413917] RSP: 002b:00007f6983879188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 545.413940] RAX: ffffffffffffffda RBX: 00007f6986416f60 RCX: 00007f6986303b19 [ 545.413956] RDX: 0000000000000016 RSI: 0000000020000500 RDI: 0000000000000003 [ 545.413970] RBP: 00007f69838791d0 R08: 0000000000000000 R09: 0000000000000000 [ 545.413985] R10: 0000000000001008 R11: 0000000000000246 R12: 0000000000000001 [ 545.413999] R13: 00007ffff4112bff R14: 00007f6983879300 R15: 0000000000022000 [ 545.414032] [ 545.416161] FAULT_INJECTION: forcing a failure. [ 545.416161] name failslab, interval 1, probability 0, space 0, times 0 [ 545.497449] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 545.497492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 545.497506] Call Trace: [ 545.497518] [ 545.497530] dump_stack_lvl+0xfa/0x120 [ 545.497564] should_fail_ex+0x4d7/0x5e0 [ 545.497603] should_failslab+0xc2/0x120 [ 545.497631] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 545.497668] ? find_held_lock+0x2b/0x80 [ 545.497703] ? __d_alloc+0x31/0xa10 00:46:04 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x3, 0x101, 0x1}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0x7}, 'port1\x00', 0x80, 0x800, 0x0, 0x9, 0x4, 0x1, 0x9, 0x0, 0x7, 0x4}) [ 545.497729] ? lockdep_init_map_type+0x4b/0x240 [ 545.497760] __d_alloc+0x31/0xa10 [ 545.497783] ? mpol_shared_policy_init+0x24f/0x390 [ 545.497811] d_alloc_pseudo+0x1d/0xc0 [ 545.497841] alloc_file_pseudo+0xbe/0x220 [ 545.497875] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 545.497906] ? __shmem_get_inode+0x682/0xe80 [ 545.497946] __shmem_file_setup+0x1a7/0x370 [ 545.497983] alloc_file+0x11c/0x500 [ 545.498017] __x64_sys_memfd_create+0x193/0x280 [ 545.498053] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 545.498098] do_syscall_64+0xbf/0x360 [ 545.498127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.498153] RIP: 0033:0x7f21745c3b19 [ 545.498173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 545.498196] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 545.498219] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 545.498235] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 545.498250] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 545.498264] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 545.498279] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 545.498310] [ 545.565685] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:46:04 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() r2 = getpid() migrate_pages(r2, 0x1ff, &(0x7f0000000080)=0x7, &(0x7f0000000140)=0x7) tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3ff, 0x3, 0x3, 0x2, 0x7, 0x2}) 00:46:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 9) 00:46:05 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 6) [ 545.722855] loop0: detected capacity change from 0 to 8 [ 545.729413] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:46:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 7) 00:46:14 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 00:46:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:46:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 9) 00:46:14 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x200, 0x600000, 0x5, 0x5, 0xd0ca, 0xb95b}) 00:46:14 executing program 4: set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000140)) set_tid_address(&(0x7f0000000100)) set_tid_address(&(0x7f0000000180)) 00:46:14 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x3, 0x101, 0x1}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x0, 0x7}, 'port1\x00', 0x80, 0x800, 0x0, 0x9, 0x4, 0x1, 0x9, 0x0, 0x7, 0x4}) 00:46:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 10) [ 555.446428] FAULT_INJECTION: forcing a failure. [ 555.446428] name failslab, interval 1, probability 0, space 0, times 0 [ 555.448192] CPU: 0 UID: 0 PID: 5885 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 555.448223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.448238] Call Trace: [ 555.448246] [ 555.448254] dump_stack_lvl+0xfa/0x120 [ 555.448284] should_fail_ex+0x4d7/0x5e0 [ 555.448320] ? alloc_empty_file+0x58/0x1e0 [ 555.448346] should_failslab+0xc2/0x120 [ 555.448369] kmem_cache_alloc_noprof+0x5f/0x470 [ 555.448401] ? d_instantiate+0x79/0xa0 [ 555.448425] ? lock_release+0xc8/0x290 [ 555.448462] alloc_empty_file+0x58/0x1e0 [ 555.448504] alloc_file_pseudo+0x12b/0x220 [ 555.448549] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 555.448597] __shmem_file_setup+0x1a7/0x370 [ 555.448631] alloc_file+0x11c/0x500 [ 555.448663] __x64_sys_memfd_create+0x193/0x280 [ 555.448695] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 555.448735] do_syscall_64+0xbf/0x360 [ 555.448761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.448783] RIP: 0033:0x7f95cf2b9b19 [ 555.448800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.448822] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 555.448845] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 555.448860] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 555.448873] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 555.448886] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 555.448899] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 555.448927] [ 555.492731] loop6: detected capacity change from 0 to 8336 [ 555.560606] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 555.578726] EXT4-fs (loop6): get root inode failed [ 555.579797] EXT4-fs (loop6): mount failed 00:46:27 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 00:46:27 executing program 7: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/65) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000140)=""/167) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000052c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001680)=""/81, 0x51}], 0x1}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/103, 0x67}, {&(0x7f0000002940)=""/244, 0xf4}], 0x4, &(0x7f0000002a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002c00)=""/23, 0x17}, {&(0x7f0000002c40)=""/98, 0x62}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x3, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003dc0)=""/42, 0x2a}, {&(0x7f0000003e00)=""/36, 0x24}, {&(0x7f0000003e40)=""/226, 0xe2}, {&(0x7f0000003f40)=""/183, 0xb7}, {&(0x7f0000004000)=""/118, 0x76}, {&(0x7f0000004080)=""/68, 0x44}], 0x6, &(0x7f0000004180)}}, {{&(0x7f00000041c0), 0x6e, &(0x7f0000005240)=[{&(0x7f0000004240)=""/4096, 0x1000}], 0x1, &(0x7f0000005280)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x62, 0x0) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x0) capset(&(0x7f00000000c0)={0x20080522, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x61}) 00:46:27 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) (fail_nth: 8) 00:46:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 10) 00:46:27 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) 00:46:27 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000040)) 00:46:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:46:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 11) 00:46:27 executing program 7: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xfffd, 0x8001, 0x10000000}) 00:46:27 executing program 4: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x40, 0x783200) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, r2, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x7ff}) set_tid_address(0x0) [ 568.223950] FAULT_INJECTION: forcing a failure. [ 568.223950] name failslab, interval 1, probability 0, space 0, times 0 [ 568.225794] CPU: 1 UID: 0 PID: 5918 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 568.225826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.225839] Call Trace: [ 568.225847] [ 568.225856] dump_stack_lvl+0xfa/0x120 [ 568.225888] should_fail_ex+0x4d7/0x5e0 [ 568.225924] ? alloc_empty_file+0x58/0x1e0 [ 568.225952] should_failslab+0xc2/0x120 [ 568.225977] kmem_cache_alloc_noprof+0x5f/0x470 [ 568.226011] ? d_instantiate+0x79/0xa0 [ 568.226036] ? lock_release+0xc8/0x290 [ 568.226066] alloc_empty_file+0x58/0x1e0 [ 568.226096] alloc_file_pseudo+0x12b/0x220 [ 568.226126] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 568.226164] __shmem_file_setup+0x1a7/0x370 [ 568.226201] alloc_file+0x11c/0x500 [ 568.226235] __x64_sys_memfd_create+0x193/0x280 [ 568.226269] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 568.226313] do_syscall_64+0xbf/0x360 [ 568.226340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.226365] RIP: 0033:0x7f21745c3b19 [ 568.226382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.226404] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 568.226427] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 568.226443] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 568.226464] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 568.226478] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 568.226492] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 568.226522] [ 568.255684] loop0: detected capacity change from 0 to 8 [ 568.297497] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:46:27 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:46:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 12) 00:46:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 11) 00:46:27 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) [ 568.415256] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 568.421563] FAULT_INJECTION: forcing a failure. [ 568.421563] name failslab, interval 1, probability 0, space 0, times 0 [ 568.422781] CPU: 0 UID: 0 PID: 5928 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 568.422800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.422808] Call Trace: [ 568.422813] [ 568.422818] dump_stack_lvl+0xfa/0x120 [ 568.422839] should_fail_ex+0x4d7/0x5e0 [ 568.422864] ? security_file_alloc+0x35/0x130 [ 568.422882] should_failslab+0xc2/0x120 [ 568.422898] kmem_cache_alloc_noprof+0x5f/0x470 [ 568.422919] ? __create_object+0x59/0x80 [ 568.422940] security_file_alloc+0x35/0x130 [ 568.422956] init_file+0x95/0x4c0 [ 568.422974] alloc_empty_file+0x76/0x1e0 [ 568.422990] alloc_file_pseudo+0x12b/0x220 [ 568.423007] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 568.423027] __shmem_file_setup+0x1a7/0x370 [ 568.423050] alloc_file+0x11c/0x500 [ 568.423068] __x64_sys_memfd_create+0x193/0x280 [ 568.423087] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 568.423111] do_syscall_64+0xbf/0x360 [ 568.423126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.423140] RIP: 0033:0x7f95cf2b9b19 [ 568.423150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.423163] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 568.423176] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f95cf2b9b19 [ 568.423184] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 00007f95cf3130fb [ 568.423192] RBP: 0000000000000001 R08: 0000000000000800 R09: ffffffffffffffff [ 568.423200] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 568.423208] R13: 0000000020000100 R14: 0000000000001000 R15: 0000000020012c00 [ 568.423224] 00:46:27 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x20, 0x6, 0x20}) [ 568.487875] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:46:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 13) [ 568.522434] loop6: detected capacity change from 0 to 8336 00:46:27 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 568.606122] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 568.615153] EXT4-fs (loop6): get root inode failed [ 568.616076] EXT4-fs (loop6): mount failed [ 568.630975] loop0: detected capacity change from 0 to 8 [ 568.655583] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:46:36 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:46:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 14) 00:46:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:46:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x674, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf90, 0x77}}}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@mic={0x8c, 0x10, {0x54f, "0e654fda285b", @short="1858713fa134c2af"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x4, 0x20, 0x25, 0x8}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "91384a22b9366234d1f556dac76ae47b54dc1fa8d7180ace6bbd91745a077511ca979cd202cf7deb28a15f03404e097c6b188fd673687693d5bb04169b362ecd4bd1627a49346569d24af4ec4fdaf81a2a7ded80c9e377790e4b2284fb1faa84fed2f1a461fd1f69c7f49b3167682efc3179a39bac54e6728a7ec3181670a23e7568b611893e25b60620de2511a1e31d6c49e3e82d4f45c3fdb408387434cc895ec2d7d0dee73156c614733ac4951a9bc9dc2c6500e3e7f6254e9a986beef3ddf3b615c84632924f6d41c290aa1cc836383e944068ab367b631d8e8389ca84314b42c7bf082238a68078cae53f9ac9e3a925c4cbf2f0"}], @NL80211_ATTR_IE={0x6e, 0x2a, [@random={0x2, 0x41, "ac700e09e1293155a3d4786f2525992b66768bc35dea346cf8e775473af18ad1816d7176074969ec50cf98e281e116696d64549d00349006d840eca1780377f179"}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x6, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x407, 0x9, 0x8b}}]}, @NL80211_ATTR_IE={0x30b, 0x2a, [@challenge={0x10, 0x1, 0xef}, @fast_bss_trans={0x37, 0xa4, {0x6, 0x4, "fdfb328d21209f82e862446f95dbf85e", "b5dc7097d2bd69255e0e88eaa30cc2fc575eff01a52cda2780885c9ee0229524", "d5e5d53acda6ce0ea9d6cd8026fe35b3f9bbe8eaad048b32006ad90a6f87e8d6", [{0x2, 0x15, "75e0a1721f39b8fd1b1b22a289f1bb12ad5efab753"}, {0x4, 0x24, "964f33cdc586c9e746ea9daeff2f45b16f7b1e1fd37fb4203defba3a081851e0fd2c29d8"}, {0x4, 0xb, "fd37ccfe6c7ab68e9e18fc"}, {0x2, 0x6, "288f744f3b6b"}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x9d, 0x4}}, @perr={0x84, 0xef, {0x2, 0xf, [@ext={{}, @device_a, 0xcf0, @broadcast, 0x1}, @not_ext={{}, @device_a, 0x3, "", 0x3a}, @not_ext={{}, @device_a, 0x4c68, "", 0x38}, @not_ext={{}, @device_a, 0x200, "", 0x26}, @ext={{}, @device_b, 0x22, @device_b, 0xb}, @not_ext={{}, @device_a, 0xff, "", 0x11}, @ext={{}, @device_a, 0x80000000, @device_b, 0x20}, @ext={{}, @device_a, 0x800, @device_a, 0x1c}, @not_ext={{}, @broadcast, 0x2, "", 0x26}, @ext={{}, @device_a, 0x401, @device_a, 0xe}, @ext={{}, @device_a, 0x7, @device_b, 0x26}, @not_ext={{}, @broadcast, 0x2, "", 0x3d}, @not_ext={{}, @device_a, 0x7, "", 0x17}, @ext={{}, @device_a, 0x80000000, @broadcast, 0x1c}, @not_ext={{}, @device_b, 0x20, "", 0x12}]}}, @perr={0x84, 0xbc, {0x1, 0xc, [@not_ext={{}, @device_a, 0x9, "", 0x2b}, @not_ext={{}, @device_b, 0x7, "", 0x34}, @ext={{}, @device_b, 0x5, @broadcast, 0x3}, @ext={{}, @device_a, 0x0, @broadcast, 0x3f}, @ext={{}, @broadcast, 0x5, @broadcast, 0x2e}, @not_ext={{}, @device_a, 0x2, "", 0x2f}, @ext={{}, @broadcast, 0x9, @device_a, 0x18}, @not_ext={{}, @device_b, 0xfffffffe, "", 0x1}, @not_ext={{}, @device_b, 0x3, "", 0xf}, @ext={{}, @device_a, 0x4, @broadcast, 0x3}, @not_ext={{}, @broadcast, 0x20, "", 0x1b}, @not_ext={{}, @broadcast, 0x4, "", 0x13}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @preq={0x82, 0x78, @ext={{0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, @broadcast, 0x0, @broadcast, 0xffffffff, 0x100, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0x80}, {{0x0, 0x0, 0x1}, @device_b, 0xffff}, {{}, @device_a, 0x80}, {{0x1, 0x0, 0x1}, @device_a, 0x3ff}, {{0x1, 0x0, 0x1}, @device_b, 0x100}, {{0x1}, @broadcast, 0x1}, {{0x1}, @broadcast, 0x8001}, {{0x0, 0x0, 0x1}, @device_b, 0xa}]}}, @prep={0x83, 0x25, @ext={{}, 0x8, 0x1, @device_b, 0x4, @device_b, 0x9, 0xfffffff8, @device_b, 0x8}}]}, @NL80211_ATTR_IE={0x28, 0x2a, [@erp={0x2a, 0x1}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x40, @device_b, 0x0, "", 0x4, 0x409, @broadcast, 0x2a}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x576}, @NL80211_ATTR_FILS_ERP_RRK={0x9a, 0xfc, "377ce7ef77341f845e24e6a6b4f577b1f73b0afeb98efb138e356b23169b796aa84bae8cd21d84040d56a3ac044aae9bb211292b6496cb2e03349490683346b8fb47e422117593fb2aa7a7c25814daa174f03c48c30d8973ecab725c78269f0cdd58a564c23f3b6750080ca20efa0e8f34ab4c22ab21bacd1dedba7ac8830decb04952c2ff20e27f81d592f29adf35c4ac82e92633f5"}, @NL80211_ATTR_FILS_ERP_RRK={0xb0, 0xfc, "c85ec0ec31e31e118811a099d4ca4b4d1a05d5f521062448d5a7133c1f061e808f7e2c1f0a7d54965253338f641ef709acd8912fc05fa77df6c6eb78dc481e7d2beb643c8fa5dfed5cdee7e37f3ef92c38b40f4d025895a7ab13dbf9e010923df0f49aa4209e8e1651440eddb312655ac76e57da8011cbd333487b4158e19ca6b1553194ea1bad56fbea31c9b25a720a6ca7337bcf2c59404615764a7e4785e1ef41bf15c0fa03b8b1d3b0fa"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xacc}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "158c295525cceff2cb"}]]}, 0x674}, 0x1, 0x0, 0x0, 0x2000000}, 0x20004000) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:46:36 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) 00:46:36 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:46:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 12) 00:46:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f000000f680)={&(0x7f000000f5c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f000000f640)={&(0x7f000000f600)={0x38, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x64b, 0x14}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8fde}]}, 0x38}}, 0x24040080) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0xa3b, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) set_tid_address(0x0) [ 577.386537] FAULT_INJECTION: forcing a failure. [ 577.386537] name failslab, interval 1, probability 0, space 0, times 0 [ 577.387508] CPU: 0 UID: 0 PID: 5961 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 577.387524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 577.387531] Call Trace: [ 577.387536] [ 577.387540] dump_stack_lvl+0xfa/0x120 [ 577.387560] should_fail_ex+0x4d7/0x5e0 [ 577.387580] ? security_file_alloc+0x35/0x130 [ 577.387596] should_failslab+0xc2/0x120 [ 577.387612] kmem_cache_alloc_noprof+0x5f/0x470 [ 577.387630] ? __create_object+0x59/0x80 [ 577.387649] security_file_alloc+0x35/0x130 [ 577.387664] init_file+0x95/0x4c0 [ 577.387679] alloc_empty_file+0x76/0x1e0 [ 577.387694] alloc_file_pseudo+0x12b/0x220 [ 577.387710] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 577.387729] __shmem_file_setup+0x1a7/0x370 [ 577.387748] alloc_file+0x11c/0x500 [ 577.387765] __x64_sys_memfd_create+0x193/0x280 [ 577.387783] ? __pfx___x64_sys_memfd_create+0x10/0x10 [ 577.387804] do_syscall_64+0xbf/0x360 [ 577.387830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.387842] RIP: 0033:0x7f21745c3b19 [ 577.387852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 577.387864] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 577.387875] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f21745c3b19 [ 577.387883] RDX: 0000000000412008 RSI: 0000000000000000 RDI: 00007f217461d0fb [ 577.387890] RBP: 0000000000000003 R08: 0000000000209004 R09: ffffffffffffffff [ 577.387898] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 577.387905] R13: 0000000020000100 R14: 0000000000412008 R15: 0000000020012c00 [ 577.387920] [ 577.409845] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 577.411906] FAULT_INJECTION: forcing a failure. [ 577.411906] name failslab, interval 1, probability 0, space 0, times 0 [ 577.413807] CPU: 1 UID: 0 PID: 5963 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 577.413840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 577.413854] Call Trace: [ 577.413862] [ 577.413872] dump_stack_lvl+0xfa/0x120 [ 577.413906] should_fail_ex+0x4d7/0x5e0 [ 577.413944] ? getname_flags.part.0+0x48/0x540 [ 577.413977] should_failslab+0xc2/0x120 [ 577.414004] kmem_cache_alloc_noprof+0x5f/0x470 [ 577.414050] getname_flags.part.0+0x48/0x540 [ 577.414084] getname_flags+0x95/0xe0 [ 577.414120] do_sys_openat2+0x9f/0x1b0 [ 577.414152] ? __pfx_do_sys_openat2+0x10/0x10 [ 577.414196] __x64_sys_openat+0x142/0x200 [ 577.414228] ? __pfx___x64_sys_openat+0x10/0x10 [ 577.414272] do_syscall_64+0xbf/0x360 [ 577.414301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.414326] RIP: 0033:0x7f95cf26ca04 [ 577.414345] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 577.414368] RSP: 002b:00007f95cc82eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 577.414392] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf26ca04 [ 577.414409] RDX: 0000000000000002 RSI: 00007f95cc82f000 RDI: 00000000ffffff9c [ 577.414424] RBP: 00007f95cc82f000 R08: 0000000000000000 R09: ffffffffffffffff [ 577.414439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 577.414461] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 577.414492] [ 577.444939] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:46:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 13) 00:46:36 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 00:46:36 executing program 2: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) [ 577.519657] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:46:36 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 577.539967] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:46:36 executing program 5: r0 = timerfd_create(0x8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x8001, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 577.567286] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:46:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 15) 00:46:36 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f0000000040)={0x70, 0x10000b, 0x20000, {r0}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x301002, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) set_tid_address(0x0) 00:46:36 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xfffffffb, 0x0, 0xffffffff, 0x6ee5, 0x5cf5, 0x2}) [ 577.623297] loop0: detected capacity change from 0 to 8 [ 577.629498] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 577.651322] loop6: detected capacity change from 0 to 8336 [ 577.677509] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 577.688012] EXT4-fs (loop6): get root inode failed [ 577.689291] EXT4-fs (loop6): mount failed [ 577.773742] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 577.780736] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:46:48 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x80000000, 0x100001}) 00:46:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 14) 00:46:48 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:46:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 16) 00:46:48 executing program 2: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:46:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12cf, 0x5, &(0x7f0000000400)=[{&(0x7f0000000080)="1c9c28ad9855c59be438d23f237eb33c5af74b3f3678a0c10d15fbafd3a55c1893fd026e7334702272c5d0892aef29339f7dcde21b4136e47c67444616cf1fe7d8a4bdb53306ffc5c1d7832067dbc563362e86b65b8d5eebddac460effd342d6279a5c29ec6024609c662b1e7027cc1d0301d3b9e2cbacd2daa497942a16a054d5b137fec29fab95ba2652f64eaf277b74f4016096a4a20505af802191524266340d810fc3f28ee4dc464c0c5d", 0xad, 0x100}, {&(0x7f0000000140)="9f3044f0aa65d9ce559734021cae5da549b9777d16057b402f3cf61356f23b5d9beb611918da9943eb120285df3f16aaa067625a13b29ee1666f09633f6cddf39196c2f9b6743347c9272f1e035c890bcd4d6b0eeccfd0513af950bcabfb41fca38ea6ec00946203cffdf49f7a3c21af7a709abb339be5c9a364335056862666d1edc50990817dd309994ab2aadf46e89f4a2110b86d80a4d9a309b637ce7cd5861b2ff1b95eebec625d67f3aa7def8d3e954e14ebec1d8d85cf0526e0075336f6e1be6ecd1dd5e13c9dc1e79c7e0d2fbe1d4ecea36d379d04c8343e5c86c680c9b1404616d069843df159d7eba9375d76732747b02f12795a", 0xf9, 0x1f}, {&(0x7f0000000240)="a267fec09c5c6da35abcdca02d929921fa2fefe22a23f80381", 0x19, 0x7}, {&(0x7f0000000280)="37a499ba656ca7807b52cd93d7b68369dc586200358b485bbe0f0cd74dc96f524f778fb24e7e963d47384be39b7ef718bb81dd44b0aa9a7c7cc7eb340722f14f76468d071c81d185d6a976549d3d93d93c7dcd83bffceb902226eea20004b761c4f8131b44bdaa53e83f6041", 0x6c, 0x8}, {&(0x7f0000000300)="8cd3da9f988c6ff153e1195e75f300245ac25b51f6403264d02442716a540230dcdd9e29bc55b333e0f68f4e4cab49c3be9179a519cc0795533bc45869a78ef8f70dff15db1b8ecab8c043133a859315ba3d5784dc6df2f4908cc5458b89c3677eac2ee8731fdf8d47369549531f6e56b003554f814fc0431616651c8f80ce866fe8697a71a52d75be6cda6573c692c41af8ca77ceb5b8659045f22d8c93899ae7698ce81b757cb2643879bc89195d79f45378f27d693f1fd0c9dbad4b999b83ed13", 0xc2, 0x3}], 0x2000000, &(0x7f0000000480)={[{@uni_xlate}, {@utf8no}, {@shortname_mixed}], [{@subj_type={'subj_type', 0x3d, '$([]\xc6'}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_user}, {@fsname={'fsname', 0x3d, '-'}}, {@euid_lt}]}) set_tid_address(0x0) set_tid_address(&(0x7f0000000540)) set_tid_address(&(0x7f0000000500)) 00:46:48 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x7ffff000}], 0x16, 0x1008, 0x0, 0x0) 00:46:48 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'wg2\x00', {0x2}, 0xfffb}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) creat(&(0x7f0000000200)='./file0\x00', 0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)=0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000090600020000000000000000030000060900020080000000000000001c0008800c00078008000840000000400c000780060005404e200000bf4862a2dd1d9e4332db7cab6b22f8b201a78bf1e46292d6d121d2985316a461a657cb30b7f51f5918c7587476d9c65d97d44f3f3b51e141dacf726863fe6c4f37fa16ea056170d6316b94351cdcf766baecac918de3789cca183d6b2c8a7025395be83c079250945a7fc78a09aeb1178310ec78605bec779525e661c3c9a4f7233c417e4970e2adf83b59286dfa3ad7c85944f148c5ccef95fa558541c2eda4122b40b5e13c5b8e78ed525cae528eaab07dc15e77033793ecffe4709fa06cc3d7777ad429ba93b385eeabebeaf6ce23adbac92e785d83a00b0f39"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x20004004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 588.981798] FAULT_INJECTION: forcing a failure. [ 588.981798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.983507] CPU: 0 UID: 0 PID: 6008 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 588.983531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 588.983541] Call Trace: [ 588.983548] [ 588.983555] dump_stack_lvl+0xfa/0x120 [ 588.983580] should_fail_ex+0x4d7/0x5e0 [ 588.983610] should_fail_alloc_page+0xe0/0x110 [ 588.983632] prepare_alloc_pages+0x1af/0x500 [ 588.983658] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 588.983687] ? perf_swevent_event+0x63/0x3f0 [ 588.983714] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 588.983734] ? perf_swevent_event+0x63/0x3f0 [ 588.983759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 588.983788] ? __lock_acquire+0x694/0x1b70 [ 588.983812] ? __pfx_perf_tp_event+0x10/0x10 [ 588.983834] ? perf_tp_event+0x807/0xe70 [ 588.983856] ? lock_is_held_type+0x9e/0x120 [ 588.983876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 588.983900] ? policy_nodemask+0xeb/0x4e0 [ 588.983948] alloc_pages_mpol+0xed/0x340 [ 588.983972] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 588.983995] ? filemap_get_entry+0x1bb/0x3b0 [ 588.984012] ? __pfx_filemap_get_entry+0x10/0x10 [ 588.984035] folio_alloc_mpol_noprof+0x38/0x2a0 [ 588.984064] shmem_alloc_folio+0x11b/0x140 [ 588.984089] shmem_get_folio_gfp.constprop.0+0x4ea/0x13a0 [ 588.984123] ? perf_trace_run_bpf_submit+0xef/0x180 [ 588.984149] ? __pfx_shmem_get_folio_gfp.constprop.0+0x10/0x10 [ 588.984180] ? _raw_read_unlock+0x1e/0x40 [ 588.984212] shmem_write_begin+0x147/0x2e0 [ 588.984240] ? __pfx_shmem_write_begin+0x10/0x10 [ 588.984267] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 588.984290] ? __pfx_timestamp_truncate+0x10/0x10 [ 588.984313] generic_perform_write+0x3a4/0x820 [ 588.984347] ? __pfx_generic_perform_write+0x10/0x10 [ 588.984374] ? inode_needs_update_time.part.0+0x170/0x270 [ 588.984400] shmem_file_write_iter+0x111/0x140 [ 588.984424] vfs_write+0xbe9/0x10c0 [ 588.984442] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 588.984470] ? __fget_files+0x34/0x3b0 [ 588.984496] ? __pfx_vfs_write+0x10/0x10 [ 588.984529] __x64_sys_pwrite64+0x1f1/0x260 [ 588.984548] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 588.984573] do_syscall_64+0xbf/0x360 [ 588.984595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.984613] RIP: 0033:0x7f2174576ab7 [ 588.984627] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 588.984645] RSP: 002b:00007f2171b38f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 588.984662] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576ab7 [ 588.984674] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 588.984685] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 588.984695] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 588.984706] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 588.984729] [ 589.006796] FAULT_INJECTION: forcing a failure. [ 589.006796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.010420] loop4: detected capacity change from 0 to 9 [ 589.010637] CPU: 1 UID: 0 PID: 6015 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 589.010670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.010683] Call Trace: [ 589.010692] [ 589.010701] dump_stack_lvl+0xfa/0x120 [ 589.010733] should_fail_ex+0x4d7/0x5e0 [ 589.010771] strncpy_from_user+0x3b/0x2f0 [ 589.010800] getname_flags.part.0+0x8d/0x540 [ 589.010835] getname_flags+0x95/0xe0 [ 589.010870] do_sys_openat2+0x9f/0x1b0 [ 589.010900] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.010942] __x64_sys_openat+0x142/0x200 [ 589.010973] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.011016] do_syscall_64+0xbf/0x360 [ 589.011044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.011068] RIP: 0033:0x7f95cf26ca04 [ 589.011086] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 589.011108] RSP: 002b:00007f95cc82eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 589.011131] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf26ca04 [ 589.011147] RDX: 0000000000000002 RSI: 00007f95cc82f000 RDI: 00000000ffffff9c [ 589.011162] RBP: 00007f95cc82f000 R08: 0000000000000000 R09: ffffffffffffffff 00:46:48 executing program 2: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) [ 589.011176] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 589.011190] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 589.011220] 00:46:48 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0xff}) [ 589.069666] loop6: detected capacity change from 0 to 8336 [ 589.113989] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 589.116823] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 589.139420] loop4: detected capacity change from 0 to 9 [ 589.149116] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 00:46:48 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:46:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 17) 00:46:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 15) 00:46:48 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0x6, 0x21d9, 0x6d, 0x3, 0xfff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000140), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000001c0)=""/143, 0x8f}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/50, 0x32}], 0x5, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}, 0x10002) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000015c0)={r1, r4, 0xffffffffffffffff}, 0xc) [ 589.283939] FAULT_INJECTION: forcing a failure. [ 589.283939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.285270] CPU: 0 UID: 0 PID: 6030 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 589.285290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.285300] Call Trace: [ 589.285305] [ 589.285311] dump_stack_lvl+0xfa/0x120 [ 589.285335] should_fail_ex+0x4d7/0x5e0 [ 589.285358] ? page_copy_sane+0xce/0x2b0 [ 589.285382] copy_folio_from_iter_atomic+0x3d3/0x1820 [ 589.285417] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 589.285443] ? shmem_write_begin+0x15e/0x2e0 [ 589.285473] ? __pfx_shmem_write_begin+0x10/0x10 [ 589.285497] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 589.285517] ? __pfx_timestamp_truncate+0x10/0x10 [ 589.285536] generic_perform_write+0x1e9/0x820 [ 589.285566] ? __pfx_generic_perform_write+0x10/0x10 [ 589.285589] ? inode_needs_update_time.part.0+0x170/0x270 [ 589.285611] shmem_file_write_iter+0x111/0x140 [ 589.285632] vfs_write+0xbe9/0x10c0 [ 589.285647] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 589.285667] ? __fget_files+0x34/0x3b0 [ 589.285690] ? __pfx_vfs_write+0x10/0x10 [ 589.285717] __x64_sys_pwrite64+0x1f1/0x260 [ 589.285733] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 589.285754] do_syscall_64+0xbf/0x360 [ 589.285773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.285789] RIP: 0033:0x7f2174576ab7 [ 589.285801] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 589.285816] RSP: 002b:00007f2171b38f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 589.285831] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576ab7 [ 589.285841] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 589.285851] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 589.285860] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 589.285869] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 589.285889] [ 589.329414] loop6: detected capacity change from 0 to 8336 [ 589.345241] FAULT_INJECTION: forcing a failure. [ 589.345241] name failslab, interval 1, probability 0, space 0, times 0 [ 589.346348] CPU: 0 UID: 0 PID: 6033 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 589.346369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.346378] Call Trace: [ 589.346383] [ 589.346389] dump_stack_lvl+0xfa/0x120 [ 589.346411] should_fail_ex+0x4d7/0x5e0 [ 589.346436] ? alloc_empty_file+0x58/0x1e0 [ 589.346459] should_failslab+0xc2/0x120 [ 589.346477] kmem_cache_alloc_noprof+0x5f/0x470 [ 589.346498] ? __is_insn_slot_addr+0x140/0x290 [ 589.346524] ? kernel_text_address+0x5b/0xc0 [ 589.346543] alloc_empty_file+0x58/0x1e0 [ 589.346562] path_openat+0xe0/0x2880 [ 589.346581] ? __lock_acquire+0x694/0x1b70 [ 589.346598] ? __pfx_path_openat+0x10/0x10 [ 589.346617] do_filp_open+0x1e8/0x450 [ 589.346630] ? __pfx_do_filp_open+0x10/0x10 [ 589.346650] ? find_held_lock+0x2b/0x80 [ 589.346671] ? alloc_fd+0x2c1/0x560 [ 589.346693] ? lock_release+0xc8/0x290 [ 589.346711] ? _raw_spin_unlock+0x1e/0x40 [ 589.346734] ? alloc_fd+0x2c1/0x560 [ 589.346760] do_sys_openat2+0x104/0x1b0 [ 589.346779] ? __pfx_do_sys_openat2+0x10/0x10 [ 589.346801] ? perf_trace_preemptirq_template+0x259/0x430 [ 589.346829] __x64_sys_openat+0x142/0x200 [ 589.346848] ? __pfx___x64_sys_openat+0x10/0x10 [ 589.346874] do_syscall_64+0xbf/0x360 [ 589.346892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.346908] RIP: 0033:0x7f95cf26ca04 [ 589.346919] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 589.346933] RSP: 002b:00007f95cc82eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 589.346948] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf26ca04 [ 589.346958] RDX: 0000000000000002 RSI: 00007f95cc82f000 RDI: 00000000ffffff9c [ 589.346967] RBP: 00007f95cc82f000 R08: 0000000000000000 R09: ffffffffffffffff [ 589.346976] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 589.346984] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 589.347002] [ 589.371516] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 589.377058] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 589.380584] EXT4-fs (loop6): get root inode failed [ 589.381077] EXT4-fs (loop6): mount failed [ 589.395697] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:47:01 executing program 2: r0 = creat(0x0, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:47:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x2, 0x1008, 0x0, 0x0) 00:47:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) clone3(&(0x7f0000000280)={0x108000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0xe}, &(0x7f0000000100)=""/154, 0x9a, &(0x7f00000001c0)=""/111, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000003c0)={&(0x7f0000000300)=""/136, 0x88}) 00:47:01 executing program 4: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001000)={{r0, 0xcc5d, 0xfffffffffffffff8, 0x37, 0x1, 0x9, 0xffffffff00000001, 0x9422, 0x4, 0x1000, 0x71, 0x3f, 0xffff, 0x3}}) set_tid_address(0x0) 00:47:01 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:47:01 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:47:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 16) 00:47:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 18) 00:47:01 executing program 4: ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) set_tid_address(0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) close_range(r0, r0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) set_tid_address(&(0x7f0000000100)) 00:47:01 executing program 2: r0 = creat(0x0, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 601.947110] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 601.949294] FAULT_INJECTION: forcing a failure. [ 601.949294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.951123] CPU: 1 UID: 0 PID: 6064 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 601.951154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 601.951167] Call Trace: [ 601.951176] [ 601.951184] dump_stack_lvl+0xfa/0x120 [ 601.951216] should_fail_ex+0x4d7/0x5e0 [ 601.951248] ? page_copy_sane+0xce/0x2b0 [ 601.951283] copy_folio_from_iter_atomic+0x3d3/0x1820 [ 601.951338] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 601.951375] ? shmem_write_begin+0x15e/0x2e0 [ 601.951413] ? __pfx_shmem_write_begin+0x10/0x10 [ 601.951455] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 601.951485] ? __pfx_timestamp_truncate+0x10/0x10 [ 601.951514] generic_perform_write+0x1e9/0x820 [ 601.951559] ? __pfx_generic_perform_write+0x10/0x10 [ 601.951595] ? inode_needs_update_time.part.0+0x170/0x270 [ 601.951629] shmem_file_write_iter+0x111/0x140 [ 601.951661] vfs_write+0xbe9/0x10c0 [ 601.951683] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 601.951713] ? __fget_files+0x34/0x3b0 [ 601.951747] ? __pfx_vfs_write+0x10/0x10 [ 601.951790] __x64_sys_pwrite64+0x1f1/0x260 [ 601.951815] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 601.951848] do_syscall_64+0xbf/0x360 [ 601.951876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.951900] RIP: 0033:0x7f2174576ab7 [ 601.951918] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 601.951940] RSP: 002b:00007f2171b38f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 601.951962] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576ab7 [ 601.951978] RDX: 0000000000000009 RSI: 0000000020010300 RDI: 0000000000000004 [ 601.951993] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 601.952007] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 601.952021] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 601.952089] [ 601.994044] loop0: detected capacity change from 0 to 8 [ 602.006858] loop6: detected capacity change from 0 to 8336 [ 602.011440] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 602.012938] EXT4-fs (loop6): get root inode failed [ 602.013357] EXT4-fs (loop6): mount failed [ 602.015624] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:47:01 executing program 2: r0 = creat(0x0, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:47:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 17) [ 602.095912] FAULT_INJECTION: forcing a failure. 00:47:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 19) 00:47:01 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 602.095912] name failslab, interval 1, probability 0, space 0, times 0 [ 602.097120] CPU: 0 UID: 0 PID: 6078 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 602.097136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.097143] Call Trace: [ 602.097148] [ 602.097153] dump_stack_lvl+0xfa/0x120 [ 602.097171] should_fail_ex+0x4d7/0x5e0 [ 602.097191] ? getname_flags.part.0+0x48/0x540 [ 602.097206] should_failslab+0xc2/0x120 [ 602.097221] kmem_cache_alloc_noprof+0x5f/0x470 [ 602.097243] getname_flags.part.0+0x48/0x540 [ 602.097259] getname_flags+0x95/0xe0 [ 602.097277] do_sys_openat2+0x9f/0x1b0 [ 602.097292] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.097310] ? perf_trace_preemptirq_template+0x259/0x430 [ 602.097333] __x64_sys_openat+0x142/0x200 [ 602.097348] ? __pfx___x64_sys_openat+0x10/0x10 [ 602.097369] do_syscall_64+0xbf/0x360 [ 602.097384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.097397] RIP: 0033:0x7f2174576a04 [ 602.097406] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 602.097418] RSP: 002b:00007f2171b38ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 602.097430] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576a04 [ 602.097438] RDX: 0000000000000002 RSI: 00007f2171b39000 RDI: 00000000ffffff9c [ 602.097449] RBP: 00007f2171b39000 R08: 0000000000000000 R09: ffffffffffffffff [ 602.097457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 602.097463] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 602.097478] 00:47:01 executing program 7: ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x6) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) [ 602.234908] FAULT_INJECTION: forcing a failure. [ 602.234908] name failslab, interval 1, probability 0, space 0, times 0 [ 602.235881] CPU: 0 UID: 0 PID: 6086 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 602.235902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.235910] Call Trace: [ 602.235914] [ 602.235919] dump_stack_lvl+0xfa/0x120 [ 602.235937] should_fail_ex+0x4d7/0x5e0 [ 602.235957] ? security_file_alloc+0x35/0x130 [ 602.235972] should_failslab+0xc2/0x120 [ 602.235986] kmem_cache_alloc_noprof+0x5f/0x470 [ 602.236004] ? __create_object+0x59/0x80 [ 602.236022] security_file_alloc+0x35/0x130 [ 602.236038] init_file+0x95/0x4c0 [ 602.236060] alloc_empty_file+0x76/0x1e0 [ 602.236075] path_openat+0xe0/0x2880 [ 602.236091] ? __lock_acquire+0x694/0x1b70 [ 602.236105] ? __pfx_path_openat+0x10/0x10 [ 602.236120] do_filp_open+0x1e8/0x450 [ 602.236131] ? __pfx_do_filp_open+0x10/0x10 [ 602.236147] ? find_held_lock+0x2b/0x80 [ 602.236163] ? alloc_fd+0x2c1/0x560 [ 602.236181] ? lock_release+0xc8/0x290 [ 602.236195] ? _raw_spin_unlock+0x1e/0x40 [ 602.236213] ? alloc_fd+0x2c1/0x560 [ 602.236234] do_sys_openat2+0x104/0x1b0 [ 602.236250] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.236267] ? perf_trace_preemptirq_template+0x259/0x430 [ 602.236290] __x64_sys_openat+0x142/0x200 [ 602.236305] ? __pfx___x64_sys_openat+0x10/0x10 [ 602.236327] do_syscall_64+0xbf/0x360 [ 602.236341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.236354] RIP: 0033:0x7f95cf26ca04 [ 602.236363] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 602.236375] RSP: 002b:00007f95cc82eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 602.236387] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf26ca04 [ 602.236395] RDX: 0000000000000002 RSI: 00007f95cc82f000 RDI: 00000000ffffff9c [ 602.236402] RBP: 00007f95cc82f000 R08: 0000000000000000 R09: ffffffffffffffff [ 602.236410] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 602.236416] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 602.236431] 00:47:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:47:11 executing program 1: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:11 executing program 4: r0 = getpgid(0x0) waitid(0x0, r0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/160, 0xa0}], 0x4, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}], 0x1, 0x10040, &(0x7f0000000700)) sched_setattr(r1, &(0x7f0000000740)={0x38, 0x3, 0x10000040, 0x2d7a, 0x6, 0x8001, 0x154, 0xffffffffffffff00, 0x9, 0x4}, 0x0) 00:47:11 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:47:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 18) 00:47:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 20) 00:47:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x3, 0x1008, 0x0, 0x0) 00:47:11 executing program 7: bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8010, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=unix,cachetag=--)*-/ ]%&{}!,cache=mmap,version=9p2000.L,afid=0x0000000000000001,version=9p2000.u,noextend,mmap,debug=0x0000000000000006,appraise,mask=^MAY_READ,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',defcontext=staff_u,uid<', @ANYRESDEC=0xee01, @ANYBLOB="d965fd2a24a839fb522dd62dd42b"]) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xfff, 0x6, &(0x7f0000000840)=[{&(0x7f0000000440)="ba36488d2011432d2c17282c138a29b82ce491ff8fae6c140abc9d81ea5f77ec38792a210c303e32bdfd7e173f1c94fbe61cc46f8d1823c2cd1914b6d36f57b59ebd09ee6e55bf85a78c013d75579a2525579b623025e61887fcd2bde3f4daefa26ff13f4078a31c2721e2a2925ea447ba03d776660bafa3891b3890da53953771d5e410f37db8034af88499a69f51aec2a39c4225991a70c2cb2c12a6f6a2abbb32f348c9cd023b2bbcfcb8436f3612797c5d129e9b00c54580fef4ea1fcd00bb2f5443c247fdb541267efea726e0d47a93ba0f49d450be05d03485befcab6a31b826d6bef59f35d20b8531ede4cde6649f6ceafa", 0xf5, 0x5}, {&(0x7f0000000540)="a969f47c086bf34b9fc8c867b9540a678a90487dd1ce46572f217a05d5172ec38f0cfd85d4f5e6f79189b306e0bb578a29c33d9cf9bceef56ef2829be4f3dcc5a88c1e4b96f8a339da2fd01a7c1cbd02e26a0f5ea93f1ff148f89fae5e9fb753a02fc1f2193b8733fbcd456a257f3ee5b612ed3e0bfec04fa729859cd81d153324a747deb05ddcb6506d1a0194799cbc94c93f8ec4fbad4dcd4d9da8f98fca48cf7e5e01a02fc2ffc3edc687b42ea1a65d9cede632c42b47d70de96b16b289a0223b8894692f518054ee21ecc80e0b4eb85d0e52037a7af6b889218560d9e94106746743d82a218659484589", 0xec, 0x858}, {&(0x7f0000000640)="30d8a8ea2b737c20fe671f99a4ea0a86bf486660b349af7a2e", 0x19, 0x400}, {&(0x7f0000000680)="ae019cb526a05ef03268249a069de19358fa8f4474134085a3f1953d19e6a3c6dd203e27b7fe53b036ad16998a4d246ca070342b9575207ee0a9c9678f4010a001cb4e43bb66b239dcd460ca94f1cd3f028c26ccc687cbcbddcae8edd7ab3a17e168e24f26c30028452efe25b8351fcc7fe55c439a56355450b9a22efb74cc6ace732fe71aa830702cec7edd4bcd", 0x8e, 0xb64b}, {&(0x7f0000000740)="69a484593c91f325a9054d8386ec859a378b8f5524036cbf7b2a108df8551cffc782439841a6b88b0392ab07019fe6a14e957f28e88b6d73708d6c7de4738fe0582229e7746c462074b808548a03130ee17f49afa962f9a6aa25562f78d842d756ac1e6668995ee36625f8c9ad6f18950bd7fb51a5f087d6acb6dddca59f0516123d9f2ec1ac2a67a8b89414a899fe814f5bc7f63fbd62bb7c5511323c2f4094", 0xa0, 0xffffffffb0235e0c}, {&(0x7f0000000800)="1061c9e8d525d1d2828bb069ca330798c5ce3cc924513299db49fc617c92fce3", 0x20, 0xf805}], 0x1000, &(0x7f0000000900)={[{@huge_always}, {@huge_never}, {@huge_never}, {@uid={'uid', 0x3d, 0xee00}}, {@huge_within_size}, {@huge_advise}], [{@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r1}}, {@measure}, {@obj_role={'obj_role', 0x3d, '9p\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_role={'obj_role', 0x3d, '+,'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x9001, 0xfffffffc, 0x7fff, 0x100, 0x4, 0x7fff}) [ 611.917226] loop7: detected capacity change from 0 to 66398 [ 611.920180] loop0: detected capacity change from 0 to 8 00:47:11 executing program 1: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) [ 611.940551] loop7: detected capacity change from 0 to 66398 [ 611.946917] loop6: detected capacity change from 0 to 8336 [ 611.959728] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 611.960254] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 611.971764] EXT4-fs (loop6): get root inode failed [ 611.972224] EXT4-fs (loop6): mount failed 00:47:11 executing program 7: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x51}) 00:47:11 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x0, 0x7, 0x2, 0x1000, 0x40, 0xf5}) set_tid_address(0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000080)) 00:47:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 21) 00:47:11 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 19) 00:47:11 executing program 1: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) [ 612.147131] FAULT_INJECTION: forcing a failure. [ 612.147131] name failslab, interval 1, probability 0, space 0, times 0 [ 612.148152] CPU: 0 UID: 0 PID: 6127 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 612.148169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.148177] Call Trace: [ 612.148182] [ 612.148187] dump_stack_lvl+0xfa/0x120 [ 612.148207] should_fail_ex+0x4d7/0x5e0 [ 612.148228] ? __kernfs_new_node+0xd3/0x870 [ 612.148241] should_failslab+0xc2/0x120 [ 612.148257] kmem_cache_alloc_noprof+0x5f/0x470 [ 612.148277] ? __pfx_avc_has_perm+0x10/0x10 [ 612.148298] __kernfs_new_node+0xd3/0x870 [ 612.148314] ? __pfx___kernfs_new_node+0x10/0x10 [ 612.148330] ? lock_acquire+0x15e/0x2f0 [ 612.148344] ? kernfs_root+0x23/0x2a0 [ 612.148357] ? find_held_lock+0x2b/0x80 [ 612.148375] ? kernfs_root+0xee/0x2a0 [ 612.148388] ? lock_release+0xc8/0x290 [ 612.148400] ? lock_is_held_type+0x9e/0x120 [ 612.148416] kernfs_new_node+0x13c/0x1e0 [ 612.148434] kernfs_create_dir_ns+0x4d/0x1a0 [ 612.148458] internal_create_group+0xa7f/0xeb0 [ 612.148475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.148493] ? __pfx_internal_create_group+0x10/0x10 [ 612.148507] ? blk_validate_limits+0xbf9/0x14d0 [ 612.148525] ? lock_is_held_type+0x9e/0x120 [ 612.148539] loop_configure+0xc56/0x16e0 [ 612.148572] ? __pfx_loop_configure+0x10/0x10 [ 612.148598] ? lock_acquire+0x15e/0x2f0 [ 612.148612] ? avc_has_extended_perms+0x107/0xf20 [ 612.148629] ? find_held_lock+0x2b/0x80 [ 612.148647] ? avc_has_extended_perms+0x23b/0xf20 [ 612.148666] lo_ioctl+0x76e/0x2070 [ 612.148684] ? avc_has_extended_perms+0x378/0xf20 [ 612.148702] ? perf_tp_event+0x807/0xe70 [ 612.148724] ? __pfx_lo_ioctl+0x10/0x10 [ 612.148741] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 612.148761] ? __pfx_perf_tp_event+0x10/0x10 [ 612.148779] ? perf_trace_preemptirq_template+0x259/0x430 [ 612.148804] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 612.148824] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 612.148844] ? lock_release+0xc8/0x290 [ 612.148859] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 612.148891] ? debug_mutex_unlock+0x60/0x270 [ 612.148909] ? __fget_files+0x34/0x3b0 [ 612.148928] ? find_held_lock+0x2b/0x80 [ 612.148946] ? __fget_files+0x203/0x3b0 [ 612.148965] ? __pfx_lo_ioctl+0x10/0x10 [ 612.148983] blkdev_ioctl+0x27c/0x6c0 [ 612.148999] ? __pfx_blkdev_ioctl+0x10/0x10 [ 612.149015] ? selinux_file_ioctl+0xb9/0x280 [ 612.149029] ? __pfx_blkdev_ioctl+0x10/0x10 [ 612.149046] __x64_sys_ioctl+0x18f/0x210 [ 612.149065] do_syscall_64+0xbf/0x360 [ 612.149080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.149094] RIP: 0033:0x7f95cf2b98d7 [ 612.149104] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 612.149117] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.149129] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 612.149138] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 612.149145] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 612.149153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 612.149160] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 612.149176] [ 612.173855] loop0: detected capacity change from 0 to 8 [ 612.201011] FAULT_INJECTION: forcing a failure. [ 612.201011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.202002] CPU: 0 UID: 0 PID: 6132 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 612.202019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 612.202027] Call Trace: [ 612.202032] [ 612.202037] dump_stack_lvl+0xfa/0x120 [ 612.202054] should_fail_ex+0x4d7/0x5e0 [ 612.202075] strncpy_from_user+0x3b/0x2f0 [ 612.202091] getname_flags.part.0+0x8d/0x540 [ 612.202109] getname_flags+0x95/0xe0 [ 612.202129] do_sys_openat2+0x9f/0x1b0 [ 612.202146] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.202165] ? perf_trace_preemptirq_template+0x259/0x430 [ 612.202188] __x64_sys_openat+0x142/0x200 [ 612.202205] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.202228] do_syscall_64+0xbf/0x360 [ 612.202243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.202255] RIP: 0033:0x7f2174576a04 [ 612.202265] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 612.202277] RSP: 002b:00007f2171b38ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 612.202289] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576a04 [ 612.202298] RDX: 0000000000000002 RSI: 00007f2171b39000 RDI: 00000000ffffff9c [ 612.202306] RBP: 00007f2171b39000 R08: 0000000000000000 R09: ffffffffffffffff [ 612.202314] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 612.202321] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 612.202337] 00:47:11 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 612.258303] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:47:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 22) 00:47:21 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:47:21 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x200}) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0x1ae9, 0x7fffffff, 0xff, 0x2, 0x7}) 00:47:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x4, 0x1008, 0x0, 0x0) 00:47:21 executing program 5: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0xb4, &(0x7f00000000c0)=0x1) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:47:21 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 20) 00:47:21 executing program 1: r0 = creat(0x0, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 622.271840] FAULT_INJECTION: forcing a failure. [ 622.271840] name failslab, interval 1, probability 0, space 0, times 0 [ 622.272889] CPU: 0 UID: 0 PID: 6146 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 622.272905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.272912] Call Trace: [ 622.272916] [ 622.272920] dump_stack_lvl+0xfa/0x120 [ 622.272939] should_fail_ex+0x4d7/0x5e0 [ 622.272959] ? alloc_empty_file+0x58/0x1e0 [ 622.272974] should_failslab+0xc2/0x120 [ 622.272988] kmem_cache_alloc_noprof+0x5f/0x470 [ 622.273005] ? __is_insn_slot_addr+0x140/0x290 [ 622.273025] ? kernel_text_address+0x5b/0xc0 [ 622.273040] alloc_empty_file+0x58/0x1e0 [ 622.273055] path_openat+0xe0/0x2880 [ 622.273071] ? __lock_acquire+0x694/0x1b70 [ 622.273085] ? __pfx_path_openat+0x10/0x10 [ 622.273100] do_filp_open+0x1e8/0x450 [ 622.273111] ? __pfx_do_filp_open+0x10/0x10 [ 622.273127] ? find_held_lock+0x2b/0x80 [ 622.273143] ? alloc_fd+0x2c1/0x560 [ 622.273162] ? lock_release+0xc8/0x290 [ 622.273176] ? _raw_spin_unlock+0x1e/0x40 [ 622.273194] ? alloc_fd+0x2c1/0x560 [ 622.273216] do_sys_openat2+0x104/0x1b0 [ 622.273231] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.273249] ? perf_trace_preemptirq_template+0x259/0x430 [ 622.273272] __x64_sys_openat+0x142/0x200 [ 622.273287] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.273308] do_syscall_64+0xbf/0x360 [ 622.273322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.273335] RIP: 0033:0x7f2174576a04 [ 622.273345] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 622.273356] RSP: 002b:00007f2171b38ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 622.273367] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576a04 [ 622.273375] RDX: 0000000000000002 RSI: 00007f2171b39000 RDI: 00000000ffffff9c [ 622.273383] RBP: 00007f2171b39000 R08: 0000000000000000 R09: ffffffffffffffff [ 622.273390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 622.273397] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 622.273411] 00:47:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 21) [ 622.362112] loop0: detected capacity change from 0 to 8 [ 622.364247] FAULT_INJECTION: forcing a failure. [ 622.364247] name failslab, interval 1, probability 0, space 0, times 0 [ 622.365280] CPU: 0 UID: 0 PID: 6160 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 622.365297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.365304] Call Trace: [ 622.365308] [ 622.365312] dump_stack_lvl+0xfa/0x120 [ 622.365331] should_fail_ex+0x4d7/0x5e0 [ 622.365351] ? alloc_empty_file+0x58/0x1e0 [ 622.365366] should_failslab+0xc2/0x120 [ 622.365379] kmem_cache_alloc_noprof+0x5f/0x470 [ 622.365397] ? __is_insn_slot_addr+0x140/0x290 [ 622.365416] ? kernel_text_address+0x5b/0xc0 [ 622.365432] alloc_empty_file+0x58/0x1e0 [ 622.365451] path_openat+0xe0/0x2880 [ 622.365467] ? __lock_acquire+0x694/0x1b70 [ 622.365481] ? __pfx_path_openat+0x10/0x10 [ 622.365496] do_filp_open+0x1e8/0x450 [ 622.365506] ? __pfx_do_filp_open+0x10/0x10 [ 622.365523] ? find_held_lock+0x2b/0x80 [ 622.365539] ? alloc_fd+0x2c1/0x560 [ 622.365556] ? lock_release+0xc8/0x290 [ 622.365571] ? _raw_spin_unlock+0x1e/0x40 [ 622.365588] ? alloc_fd+0x2c1/0x560 [ 622.365610] do_sys_openat2+0x104/0x1b0 [ 622.365625] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.365643] ? perf_trace_preemptirq_template+0x259/0x430 [ 622.365665] __x64_sys_openat+0x142/0x200 [ 622.365680] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.365702] do_syscall_64+0xbf/0x360 [ 622.365716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.365729] RIP: 0033:0x7f2174576a04 [ 622.365738] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 622.365750] RSP: 002b:00007f2171b38ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 622.365761] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576a04 [ 622.365770] RDX: 0000000000000002 RSI: 00007f2171b39000 RDI: 00000000ffffff9c [ 622.365777] RBP: 00007f2171b39000 R08: 0000000000000000 R09: ffffffffffffffff [ 622.365784] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 622.365791] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 622.365805] [ 622.381428] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:47:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0xc3, [0x4, 0xfffffffffffffff4, 0x1, 0x401, 0x9, 0x3866b7ef], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=""/195}, &(0x7f00000001c0)=0x78) set_tid_address(0x0) 00:47:21 executing program 1: r0 = creat(0x0, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:47:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) readahead(r1, 0x5cf, 0x2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000480)=""/204, 0xcc}], 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x1}, {}, 0x74, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="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", 0x14a, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000081010000000000000cfc000000822934ea4d0076e666f66044f2fefd2d95f25ed738be3617c803ee015ddc95d2b0db1f27f6b649c5c1e1ce593116dde55525b242a0d6f11547af6dac2868329093ebe5030a61151437abdba41a044a1b58dca6a2459a05aa470c7ffbe1191139410de95d1a3a3cab294d2f842afc541a23ffca5c8ee05a3e9bd0a0b17c11a8fd19db52dc41b903d6eda414e71c5dd949dd2ccc3d21c20ada4f8a6f15987308fe457e2b06d11239bc55559d01374d89adf76da0d437600735988ecb1e24dbe67e66c39ec446cc3f0be021f5d620e51155903fb414fb82f01e974b48623e3f26684198ed11c5c1efbdd623c49d6e9e5864fe827800000053e2caccc372e4524038974e7a62bdf99af23d34597e17761e9363b359f431db611c1590c35d08caac3b9452e42f992c5b99689ed1f8c5982a788f96511765bdc935cfa630b72bfd38874659dfe6e42dc62083ffef769742ced01b5330df6670d1e3363ecb9f0c6dcd0e43c32998a30eb7c218b321644b51300000002725cff3d365a1fb0c07299d160f3b0ac8d659687749cd1c6848bc67134f204b47c938b0cd4a88629678a32a261e241900"/445], 0x1bd}) 00:47:21 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:21 executing program 1: r0 = creat(0x0, 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:47:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 23) 00:47:21 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) r2 = clone3(&(0x7f0000000380)={0x104900000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3e}, &(0x7f0000000140)=""/225, 0xe1, &(0x7f0000000240)=""/198, &(0x7f0000000340)=[r1, r0], 0x2}, 0x58) process_vm_writev(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/231, 0xe7}], 0x1, &(0x7f0000000980)=[{&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f00000007c0)=""/58, 0x3a}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/94, 0x5e}], 0x6, 0x0) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000080)={0x4000010, 0x0, 0x0, 0x1, 0x3, 0x1}) r3 = gettid() r4 = gettid() tgkill(r3, r4, 0x0) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000001a00)={&(0x7f0000000a00)=""/4096, 0x1000}) 00:47:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 22) 00:47:21 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000040)) 00:47:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 622.615286] FAULT_INJECTION: forcing a failure. [ 622.615286] name failslab, interval 1, probability 0, space 0, times 0 [ 622.616262] CPU: 0 UID: 0 PID: 6174 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 622.616278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.616285] Call Trace: [ 622.616289] [ 622.616293] dump_stack_lvl+0xfa/0x120 [ 622.616312] should_fail_ex+0x4d7/0x5e0 [ 622.616331] ? security_file_alloc+0x35/0x130 [ 622.616347] should_failslab+0xc2/0x120 [ 622.616360] kmem_cache_alloc_noprof+0x5f/0x470 [ 622.616378] ? __create_object+0x59/0x80 [ 622.616396] security_file_alloc+0x35/0x130 [ 622.616412] init_file+0x95/0x4c0 [ 622.616426] alloc_empty_file+0x76/0x1e0 [ 622.616441] path_openat+0xe0/0x2880 [ 622.616461] ? __lock_acquire+0x694/0x1b70 [ 622.616475] ? __pfx_path_openat+0x10/0x10 [ 622.616491] do_filp_open+0x1e8/0x450 [ 622.616501] ? __pfx_do_filp_open+0x10/0x10 [ 622.616517] ? find_held_lock+0x2b/0x80 [ 622.616533] ? alloc_fd+0x2c1/0x560 [ 622.616551] ? lock_release+0xc8/0x290 [ 622.616565] ? _raw_spin_unlock+0x1e/0x40 [ 622.616583] ? alloc_fd+0x2c1/0x560 [ 622.616604] do_sys_openat2+0x104/0x1b0 [ 622.616619] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.616637] ? perf_trace_preemptirq_template+0x259/0x430 [ 622.616659] __x64_sys_openat+0x142/0x200 [ 622.616674] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.616696] do_syscall_64+0xbf/0x360 [ 622.616710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.616723] RIP: 0033:0x7f2174576a04 [ 622.616732] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 622.616743] RSP: 002b:00007f2171b38ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 622.616755] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f2174576a04 [ 622.616763] RDX: 0000000000000002 RSI: 00007f2171b39000 RDI: 00000000ffffff9c [ 622.616770] RBP: 00007f2171b39000 R08: 0000000000000000 R09: ffffffffffffffff [ 622.616778] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 622.616785] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 622.616799] [ 622.654029] loop0: detected capacity change from 0 to 8 [ 622.675719] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:47:22 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:22 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:47:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 23) 00:47:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 24) 00:47:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:47:22 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x20000, 0x0, 0xfffffffd}) 00:47:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) [ 623.117869] loop6: detected capacity change from 0 to 8336 [ 623.128193] FAULT_INJECTION: forcing a failure. [ 623.128193] name failslab, interval 1, probability 0, space 0, times 0 [ 623.129135] CPU: 0 UID: 0 PID: 6196 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 623.129151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 623.129157] Call Trace: [ 623.129162] [ 623.129166] dump_stack_lvl+0xfa/0x120 [ 623.129185] should_fail_ex+0x4d7/0x5e0 [ 623.129205] ? __kernfs_new_node+0xd3/0x870 [ 623.129217] should_failslab+0xc2/0x120 [ 623.129231] kmem_cache_alloc_noprof+0x5f/0x470 [ 623.129253] __kernfs_new_node+0xd3/0x870 [ 623.129268] ? __pfx___kernfs_new_node+0x10/0x10 [ 623.129282] ? lock_acquire+0x15e/0x2f0 [ 623.129296] ? kernfs_root+0x23/0x2a0 [ 623.129308] ? find_held_lock+0x2b/0x80 [ 623.129324] ? kernfs_root+0xee/0x2a0 [ 623.129336] ? lock_release+0xc8/0x290 [ 623.129347] ? lock_is_held_type+0x9e/0x120 [ 623.129363] kernfs_new_node+0x13c/0x1e0 [ 623.129380] __kernfs_create_file+0x55/0x360 [ 623.129399] sysfs_add_file_mode_ns+0x21c/0x440 [ 623.129413] ? __pfx_dev_attr_store+0x10/0x10 [ 623.129434] internal_create_group+0x571/0xeb0 [ 623.129455] ? __pfx_internal_create_group+0x10/0x10 [ 623.129469] ? blk_validate_limits+0xbf9/0x14d0 [ 623.129485] ? lock_is_held_type+0x9e/0x120 [ 623.129498] loop_configure+0xc56/0x16e0 [ 623.129529] ? __pfx_loop_configure+0x10/0x10 [ 623.129553] ? lock_acquire+0x15e/0x2f0 [ 623.129566] ? avc_has_extended_perms+0x107/0xf20 [ 623.129583] ? find_held_lock+0x2b/0x80 [ 623.129599] ? avc_has_extended_perms+0x23b/0xf20 [ 623.129617] lo_ioctl+0x76e/0x2070 [ 623.129633] ? avc_has_extended_perms+0x378/0xf20 [ 623.129651] ? perf_tp_event+0x807/0xe70 [ 623.129667] ? __pfx_lo_ioctl+0x10/0x10 [ 623.129683] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 623.129701] ? __pfx_perf_tp_event+0x10/0x10 [ 623.129718] ? perf_trace_preemptirq_template+0x259/0x430 [ 623.129741] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 623.129760] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 623.129778] ? lock_release+0xc8/0x290 [ 623.129792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 623.129822] ? debug_mutex_unlock+0x60/0x270 [ 623.129838] ? __fget_files+0x34/0x3b0 [ 623.129856] ? find_held_lock+0x2b/0x80 [ 623.129872] ? __fget_files+0x203/0x3b0 [ 623.129890] ? __pfx_lo_ioctl+0x10/0x10 [ 623.129906] blkdev_ioctl+0x27c/0x6c0 [ 623.129922] ? __pfx_blkdev_ioctl+0x10/0x10 [ 623.129936] ? selinux_file_ioctl+0xb9/0x280 [ 623.129949] ? __pfx_blkdev_ioctl+0x10/0x10 [ 623.129964] __x64_sys_ioctl+0x18f/0x210 [ 623.129982] do_syscall_64+0xbf/0x360 [ 623.129996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.130009] RIP: 0033:0x7f95cf2b98d7 [ 623.130018] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 623.130029] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.130041] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 623.130049] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 623.130056] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 623.130063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 623.130070] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 623.130085] [ 623.165586] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 623.172030] EXT4-fs (loop6): get root inode failed [ 623.172571] EXT4-fs (loop6): mount failed [ 623.177386] loop0: detected capacity change from 0 to 8 00:47:22 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000000)) [ 623.219862] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:47:31 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x6, 0x1008, 0x0, 0x0) 00:47:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x401}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r1, 0x0) 00:47:31 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 24) 00:47:31 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000), &(0x7f0000000040)={0x80, 0x2, 0x80000001, 0x7ff, 0x1, 0x8}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)={0x80, 0x8, 0x101, 0x5, 0xfbad, 0x493}) 00:47:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 25) 00:47:31 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) 00:47:31 executing program 4: r0 = getpid() waitid(0x1, r0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) set_tid_address(0x0) [ 632.235948] FAULT_INJECTION: forcing a failure. [ 632.235948] name failslab, interval 1, probability 0, space 0, times 0 [ 632.237015] CPU: 0 UID: 0 PID: 6227 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 632.237033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.237041] Call Trace: [ 632.237046] [ 632.237051] dump_stack_lvl+0xfa/0x120 [ 632.237073] should_fail_ex+0x4d7/0x5e0 [ 632.237096] ? __kernfs_new_node+0xd3/0x870 [ 632.237114] should_failslab+0xc2/0x120 [ 632.237130] kmem_cache_alloc_noprof+0x5f/0x470 [ 632.237151] ? __pfx_avc_has_perm+0x10/0x10 [ 632.237175] __kernfs_new_node+0xd3/0x870 [ 632.237191] ? __pfx___kernfs_new_node+0x10/0x10 [ 632.237208] ? lock_acquire+0x15e/0x2f0 [ 632.237224] ? kernfs_root+0x23/0x2a0 [ 632.237238] ? find_held_lock+0x2b/0x80 [ 632.237260] ? kernfs_root+0xee/0x2a0 [ 632.237273] ? lock_release+0xc8/0x290 [ 632.237286] ? lock_is_held_type+0x9e/0x120 [ 632.237304] kernfs_new_node+0x13c/0x1e0 [ 632.237323] kernfs_create_dir_ns+0x4d/0x1a0 [ 632.237342] internal_create_group+0xa7f/0xeb0 [ 632.237361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.237380] ? __pfx_internal_create_group+0x10/0x10 [ 632.237395] ? blk_validate_limits+0xbf9/0x14d0 [ 632.237415] ? lock_is_held_type+0x9e/0x120 [ 632.237430] loop_configure+0xc56/0x16e0 [ 632.237468] ? __pfx_loop_configure+0x10/0x10 [ 632.237495] ? lock_acquire+0x15e/0x2f0 [ 632.237509] ? avc_has_extended_perms+0x107/0xf20 [ 632.237526] ? find_held_lock+0x2b/0x80 [ 632.237545] ? avc_has_extended_perms+0x23b/0xf20 [ 632.237565] lo_ioctl+0x76e/0x2070 [ 632.237583] ? avc_has_extended_perms+0x378/0xf20 [ 632.237602] ? perf_tp_event+0x807/0xe70 [ 632.237622] ? __pfx_lo_ioctl+0x10/0x10 [ 632.237641] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 632.237661] ? __pfx_perf_tp_event+0x10/0x10 [ 632.237680] ? perf_trace_preemptirq_template+0x259/0x430 [ 632.237706] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 632.237728] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 632.237741] FAULT_INJECTION: forcing a failure. [ 632.237741] name failslab, interval 1, probability 0, space 0, times 0 [ 632.237749] ? lock_release+0xc8/0x290 [ 632.237766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 632.237800] ? debug_mutex_unlock+0x60/0x270 [ 632.237819] ? __fget_files+0x34/0x3b0 [ 632.237842] ? find_held_lock+0x2b/0x80 [ 632.237860] ? __fget_files+0x203/0x3b0 [ 632.237881] ? __pfx_lo_ioctl+0x10/0x10 [ 632.237900] blkdev_ioctl+0x27c/0x6c0 [ 632.237920] ? __pfx_blkdev_ioctl+0x10/0x10 [ 632.237936] ? selinux_file_ioctl+0xb9/0x280 [ 632.237953] ? __pfx_blkdev_ioctl+0x10/0x10 [ 632.237970] __x64_sys_ioctl+0x18f/0x210 [ 632.237992] do_syscall_64+0xbf/0x360 [ 632.238008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.238023] RIP: 0033:0x7f21745c38d7 [ 632.238033] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.238046] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.238059] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 632.238069] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 632.238077] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 632.238085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 632.238093] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 632.238110] [ 632.238160] loop6: detected capacity change from 0 to 8336 [ 632.239489] CPU: 1 UID: 0 PID: 6226 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 632.239521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.239534] Call Trace: [ 632.239542] [ 632.239551] dump_stack_lvl+0xfa/0x120 [ 632.239585] should_fail_ex+0x4d7/0x5e0 [ 632.239620] ? __kernfs_new_node+0xd3/0x870 [ 632.239649] should_failslab+0xc2/0x120 [ 632.239673] kmem_cache_alloc_noprof+0x5f/0x470 [ 632.239715] __kernfs_new_node+0xd3/0x870 [ 632.239747] ? __pfx___kernfs_new_node+0x10/0x10 [ 632.239775] ? lock_acquire+0x15e/0x2f0 [ 632.239802] ? kernfs_root+0x23/0x2a0 [ 632.239827] ? find_held_lock+0x2b/0x80 [ 632.239858] ? kernfs_root+0xee/0x2a0 [ 632.239883] ? lock_release+0xc8/0x290 [ 632.239907] ? lock_is_held_type+0x9e/0x120 [ 632.239934] kernfs_new_node+0x13c/0x1e0 [ 632.239971] __kernfs_create_file+0x55/0x360 [ 632.240012] sysfs_add_file_mode_ns+0x21c/0x440 [ 632.240038] ? __pfx_dev_attr_store+0x10/0x10 [ 632.240081] internal_create_group+0x571/0xeb0 [ 632.240114] ? __pfx_internal_create_group+0x10/0x10 [ 632.240141] ? blk_validate_limits+0xbf9/0x14d0 [ 632.240174] ? lock_is_held_type+0x9e/0x120 [ 632.240198] loop_configure+0xc56/0x16e0 [ 632.240260] ? __pfx_loop_configure+0x10/0x10 [ 632.240313] ? lock_acquire+0x15e/0x2f0 [ 632.240356] ? avc_has_extended_perms+0x107/0xf20 [ 632.240392] ? find_held_lock+0x2b/0x80 [ 632.240425] ? avc_has_extended_perms+0x23b/0xf20 [ 632.240470] lo_ioctl+0x76e/0x2070 [ 632.240504] ? avc_has_extended_perms+0x378/0xf20 [ 632.240540] ? __pfx_lo_ioctl+0x10/0x10 [ 632.240576] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 632.240614] ? lock_acquire+0x15e/0x2f0 [ 632.240642] ? __virt_addr_valid+0x1c6/0x5d0 [ 632.240677] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 632.240719] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 632.240759] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 632.240794] ? lock_release+0xc8/0x290 [ 632.240826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 632.240881] ? debug_mutex_unlock+0x60/0x270 [ 632.240917] ? __fget_files+0x34/0x3b0 [ 632.240950] ? find_held_lock+0x2b/0x80 [ 632.240987] ? __fget_files+0x203/0x3b0 [ 632.241020] ? __pfx_lo_ioctl+0x10/0x10 [ 632.241054] blkdev_ioctl+0x27c/0x6c0 [ 632.241083] ? __pfx_blkdev_ioctl+0x10/0x10 [ 632.241110] ? selinux_file_ioctl+0xb9/0x280 [ 632.241141] ? __pfx_blkdev_ioctl+0x10/0x10 [ 632.241169] __x64_sys_ioctl+0x18f/0x210 [ 632.241201] do_syscall_64+0xbf/0x360 [ 632.241234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.241256] RIP: 0033:0x7f95cf2b98d7 [ 632.241274] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.241300] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.241323] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 632.241337] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 632.241350] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 632.241364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 632.241380] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 632.241411] [ 632.255598] loop0: detected capacity change from 0 to 8 [ 632.309011] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 632.346671] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 632.389799] EXT4-fs (loop6): get root inode failed [ 632.390212] EXT4-fs (loop6): mount failed 00:47:31 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) 00:47:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40890) set_tid_address(0x0) 00:47:31 executing program 5: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x0) capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x4, 0x9, 0x1, 0xfffffffc, 0x6, 0x7}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r5 = clone3(&(0x7f0000000380)={0x102200, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x2a}, &(0x7f0000000200)=""/146, 0x92, &(0x7f00000002c0)=""/91, &(0x7f0000000340)=[r0, 0x0, r1, r0, r1, r1], 0x6}, 0x58) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ptrace$setregs(0xf, r5, 0x1000, &(0x7f0000000400)="65832c9390636563f08b5936e823df3b05ea0893582f28f909da4511fba087099e0ce44d371331a6b68245fd5863078b66a122fb09c27b204a532f1ff69191ff26edec294759e0ac497cb6ab11ef912d7309ec311d321687c2c1469ca7c7df0cc208355e2077c4886ef1eb782b0c7d1d74ceff") close_range(r9, r6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x20, 0x9, 0x53, 0x0, 0x9, 0xb41, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x2}, 0x800, 0x6e6, 0x1, 0x5, 0x800, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x1}, r7, 0xd, r8, 0x10) 00:47:31 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) 00:47:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 26) [ 632.461869] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:47:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 25) [ 632.487845] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 632.504639] loop0: detected capacity change from 0 to 8 00:47:31 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) [ 632.517348] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 632.523537] loop6: detected capacity change from 0 to 8336 [ 632.541076] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:47:31 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x3, 0x8001, 0x5, 0x10001, 0x7fffffff, 0x3f}) capset(&(0x7f0000000300)={0x20071026, 0xffffffffffffffff}, &(0x7f00000003c0)={0x9, 0x8, 0x81, 0x10000, 0xfd48, 0x10000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x874e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000240)={0x19980330, r0}, &(0x7f0000000280)={0x9, 0xff, 0x7ce5, 0x9, 0x4, 0xfffffffc}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup2(r4, 0xffffffffffffffff) io_submit(0x0, 0x3, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000000)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)) io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f0000000400)="1e5de380824dad6aac6365543ab0d45f897428ea15e7b74a2414129c748b0ab95322f16be38de4dd47f5c016103570a272affd321376ee7fb7b15fbcf0d279baeeb0a06c5b40a4ad76362de40ea768b0c859be701ebd64a2b2ec27171a0147699ddc9c1992c1ab1092a975ecaa1747a4784ffb72808abc7e6998475e4560222bee00d8734442350d6cc4982a02506abca88c3c603d46a7fb1b419fc61fd8ade626d3ff35615cac8d41ea572f", 0xac, 0x7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000500)="6faa50", 0x3, 0x8, 0x0, 0x0, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000580)="9500f96d71a8e435de8ed4daba43717939d036f7c01b371c29872e44b893e73d23f0a215b245f3a88dfeb40e5656a3e53bdcd2d57b954d6e637e", 0x3a, 0x7, 0x0, 0x1, r6}]) r7 = dup2(r3, r2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000200)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0xc0189436, 0x0) capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)={0x7, 0x10000, 0x5, 0x18, 0xfffffff9, 0x9}) [ 632.548497] EXT4-fs (loop6): get root inode failed [ 632.548920] EXT4-fs (loop6): mount failed [ 632.670998] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:47:41 executing program 4: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/55, 0x37) set_tid_address(0x0) 00:47:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 26) 00:47:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 27) 00:47:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40890) set_tid_address(0x0) 00:47:41 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) 00:47:41 executing program 7: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}) 00:47:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xffff, 0x7, 0x3, 0x1, 0x61, 0x8, 0x6}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:47:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x7, 0x1008, 0x0, 0x0) 00:47:41 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) 00:47:41 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)={0x8, 0x7, 0x9, 0x7ff, 0x400, 0x4}) tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x4, 0xe72, 0x8, 0xfffffc01, 0x9, 0x3}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x10000, 0x3, 0x79c, 0x9, 0x5, 0x610a}) [ 642.262024] FAULT_INJECTION: forcing a failure. [ 642.262024] name failslab, interval 1, probability 0, space 0, times 0 [ 642.264310] CPU: 1 UID: 0 PID: 6276 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 642.264345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 642.264360] Call Trace: [ 642.264368] [ 642.264378] dump_stack_lvl+0xfa/0x120 [ 642.264426] should_fail_ex+0x4d7/0x5e0 [ 642.264473] ? __kernfs_new_node+0xd3/0x870 [ 642.264500] should_failslab+0xc2/0x120 [ 642.264528] kmem_cache_alloc_noprof+0x5f/0x470 [ 642.264576] __kernfs_new_node+0xd3/0x870 [ 642.264609] ? __pfx___kernfs_new_node+0x10/0x10 [ 642.264642] ? lock_acquire+0x15e/0x2f0 [ 642.264670] ? kernfs_root+0x23/0x2a0 [ 642.264697] ? find_held_lock+0x2b/0x80 [ 642.264733] ? kernfs_root+0xee/0x2a0 [ 642.264760] ? lock_release+0xc8/0x290 [ 642.264785] ? lock_is_held_type+0x9e/0x120 [ 642.264817] kernfs_new_node+0x13c/0x1e0 [ 642.264855] __kernfs_create_file+0x55/0x360 [ 642.264898] sysfs_add_file_mode_ns+0x21c/0x440 [ 642.264928] ? __pfx_dev_attr_store+0x10/0x10 [ 642.264971] internal_create_group+0x571/0xeb0 [ 642.265010] ? __pfx_internal_create_group+0x10/0x10 [ 642.265040] ? blk_validate_limits+0xbf9/0x14d0 [ 642.265075] ? lock_is_held_type+0x9e/0x120 [ 642.265104] loop_configure+0xc56/0x16e0 [ 642.265169] ? __pfx_loop_configure+0x10/0x10 [ 642.265225] ? lock_acquire+0x15e/0x2f0 [ 642.265252] ? avc_has_extended_perms+0x107/0xf20 [ 642.265289] ? find_held_lock+0x2b/0x80 [ 642.265325] ? avc_has_extended_perms+0x23b/0xf20 [ 642.265366] lo_ioctl+0x76e/0x2070 [ 642.265401] ? avc_has_extended_perms+0x378/0xf20 [ 642.265443] ? __pfx_lo_ioctl+0x10/0x10 [ 642.265478] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 642.265524] ? lock_acquire+0x15e/0x2f0 [ 642.265551] ? __virt_addr_valid+0x1c6/0x5d0 [ 642.265591] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 642.265636] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 642.265677] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 642.265718] ? lock_release+0xc8/0x290 [ 642.265749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.265815] ? debug_mutex_unlock+0x60/0x270 [ 642.265851] ? __fget_files+0x34/0x3b0 [ 642.265890] ? find_held_lock+0x2b/0x80 [ 642.265926] ? __fget_files+0x203/0x3b0 [ 642.265966] ? __pfx_lo_ioctl+0x10/0x10 [ 642.266003] blkdev_ioctl+0x27c/0x6c0 [ 642.266035] ? __pfx_blkdev_ioctl+0x10/0x10 [ 642.266067] ? selinux_file_ioctl+0xb9/0x280 [ 642.266096] ? __pfx_blkdev_ioctl+0x10/0x10 [ 642.266130] __x64_sys_ioctl+0x18f/0x210 [ 642.266168] do_syscall_64+0xbf/0x360 [ 642.266199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.266225] RIP: 0033:0x7f95cf2b98d7 [ 642.266245] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.266269] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.266295] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 642.266313] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 642.266328] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 642.266344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 642.266359] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 642.266393] [ 642.334758] FAULT_INJECTION: forcing a failure. [ 642.334758] name failslab, interval 1, probability 0, space 0, times 0 [ 642.335707] CPU: 0 UID: 0 PID: 6280 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 642.335723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 642.335729] Call Trace: [ 642.335734] [ 642.335741] dump_stack_lvl+0xfa/0x120 [ 642.335757] should_fail_ex+0x4d7/0x5e0 [ 642.335776] ? __kernfs_new_node+0xd3/0x870 [ 642.335789] should_failslab+0xc2/0x120 [ 642.335802] kmem_cache_alloc_noprof+0x5f/0x470 [ 642.335823] __kernfs_new_node+0xd3/0x870 [ 642.335838] ? __pfx___kernfs_new_node+0x10/0x10 [ 642.335853] ? lock_acquire+0x15e/0x2f0 [ 642.335866] ? kernfs_root+0x23/0x2a0 [ 642.335878] ? find_held_lock+0x2b/0x80 [ 642.335894] ? kernfs_root+0xee/0x2a0 [ 642.335906] ? lock_release+0xc8/0x290 [ 642.335918] ? lock_is_held_type+0x9e/0x120 [ 642.335932] kernfs_new_node+0x13c/0x1e0 [ 642.335949] __kernfs_create_file+0x55/0x360 [ 642.335968] sysfs_add_file_mode_ns+0x21c/0x440 [ 642.335982] ? __pfx_dev_attr_store+0x10/0x10 [ 642.336002] internal_create_group+0x571/0xeb0 [ 642.336019] ? __pfx_internal_create_group+0x10/0x10 [ 642.336033] ? blk_validate_limits+0xbf9/0x14d0 [ 642.336049] ? lock_is_held_type+0x9e/0x120 [ 642.336061] loop_configure+0xc56/0x16e0 [ 642.336091] ? __pfx_loop_configure+0x10/0x10 [ 642.336115] ? lock_acquire+0x15e/0x2f0 [ 642.336128] ? avc_has_extended_perms+0x107/0xf20 [ 642.336145] ? find_held_lock+0x2b/0x80 [ 642.336161] ? avc_has_extended_perms+0x23b/0xf20 [ 642.336179] lo_ioctl+0x76e/0x2070 [ 642.336195] ? avc_has_extended_perms+0x378/0xf20 [ 642.336212] ? perf_tp_event+0x807/0xe70 [ 642.336229] ? __pfx_lo_ioctl+0x10/0x10 [ 642.336245] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 642.336263] ? __pfx_perf_tp_event+0x10/0x10 [ 642.336280] ? perf_trace_preemptirq_template+0x259/0x430 [ 642.336301] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 642.336320] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 642.336338] ? lock_release+0xc8/0x290 [ 642.336352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.336382] ? debug_mutex_unlock+0x60/0x270 [ 642.336398] ? __fget_files+0x34/0x3b0 [ 642.336424] ? find_held_lock+0x2b/0x80 [ 642.336441] ? __fget_files+0x203/0x3b0 [ 642.336462] ? __pfx_lo_ioctl+0x10/0x10 [ 642.336478] blkdev_ioctl+0x27c/0x6c0 [ 642.336493] ? __pfx_blkdev_ioctl+0x10/0x10 [ 642.336507] ? selinux_file_ioctl+0xb9/0x280 [ 642.336521] ? __pfx_blkdev_ioctl+0x10/0x10 [ 642.336536] __x64_sys_ioctl+0x18f/0x210 [ 642.336554] do_syscall_64+0xbf/0x360 [ 642.336568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.336580] RIP: 0033:0x7f21745c38d7 [ 642.336589] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.336601] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.336612] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 642.336620] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 642.336627] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 642.336634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 642.336641] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 642.336656] [ 642.366804] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.396652] loop0: detected capacity change from 0 to 8 [ 642.422489] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 642.423071] loop6: detected capacity change from 0 to 8336 00:47:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) dup2(0xffffffffffffffff, r0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:47:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40890) set_tid_address(0x0) 00:47:41 executing program 1: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x0) capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x4, 0x9, 0x1, 0xfffffffc, 0x6, 0x7}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r5 = clone3(&(0x7f0000000380)={0x102200, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x2a}, &(0x7f0000000200)=""/146, 0x92, &(0x7f00000002c0)=""/91, &(0x7f0000000340)=[r0, 0x0, r1, r0, r1, r1], 0x6}, 0x58) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ptrace$setregs(0xf, r5, 0x1000, &(0x7f0000000400)="65832c9390636563f08b5936e823df3b05ea0893582f28f909da4511fba087099e0ce44d371331a6b68245fd5863078b66a122fb09c27b204a532f1ff69191ff26edec294759e0ac497cb6ab11ef912d7309ec311d321687c2c1469ca7c7df0cc208355e2077c4886ef1eb782b0c7d1d74ceff") close_range(r9, r6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x20, 0x9, 0x53, 0x0, 0x9, 0xb41, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x2}, 0x800, 0x6e6, 0x1, 0x5, 0x800, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x1}, r7, 0xd, r8, 0x10) [ 642.501629] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 642.510794] EXT4-fs (loop6): get root inode failed [ 642.511225] EXT4-fs (loop6): mount failed [ 642.548647] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.555574] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 642.563070] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 642.586527] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 642.601150] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 642.724625] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:47:53 executing program 4: semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/131) set_tid_address(0x0) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f00000000c0)=""/29) 00:47:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 27) 00:47:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xffff, 0x7, 0x3, 0x1, 0x61, 0x8, 0x6}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:47:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x40}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:47:53 executing program 2: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x0) capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x4, 0x9, 0x1, 0xfffffffc, 0x6, 0x7}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r5 = clone3(&(0x7f0000000380)={0x102200, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x2a}, &(0x7f0000000200)=""/146, 0x92, &(0x7f00000002c0)=""/91, &(0x7f0000000340)=[r0, 0x0, r1, r0, r1, r1], 0x6}, 0x58) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ptrace$setregs(0xf, r5, 0x1000, &(0x7f0000000400)="65832c9390636563f08b5936e823df3b05ea0893582f28f909da4511fba087099e0ce44d371331a6b68245fd5863078b66a122fb09c27b204a532f1ff69191ff26edec294759e0ac497cb6ab11ef912d7309ec311d321687c2c1469ca7c7df0cc208355e2077c4886ef1eb782b0c7d1d74ceff") close_range(r9, r6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x20, 0x9, 0x53, 0x0, 0x9, 0xb41, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x2}, 0x800, 0x6e6, 0x1, 0x5, 0x800, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x1}, r7, 0xd, r8, 0x10) 00:47:53 executing program 7: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10069112}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:47:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x8, 0x1008, 0x0, 0x0) 00:47:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 28) [ 653.913426] loop6: detected capacity change from 0 to 8336 [ 653.926159] loop0: detected capacity change from 0 to 8 [ 653.940215] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 653.946559] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 653.955271] EXT4-fs (loop6): get root inode failed [ 653.957051] EXT4-fs (loop6): mount failed 00:47:53 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) 00:47:53 executing program 7: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000140)={0xfffffff9, 0x80, 0x7, 0xb1f, 0x101, 0x80000000}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x8, 0x101, 0x3f, 0x8, 0x3, 0xe03}) [ 654.281989] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:48:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fdatasync(0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xfa092db82072567c, 0x0, 0x12}, 0x18) readv(r1, &(0x7f0000000040), 0x0) 00:48:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 28) [ 664.007435] FAULT_INJECTION: forcing a failure. [ 664.007435] name failslab, interval 1, probability 0, space 0, times 0 [ 664.008419] CPU: 0 UID: 0 PID: 6353 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 664.008436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 664.008443] Call Trace: [ 664.008450] [ 664.008455] dump_stack_lvl+0xfa/0x120 [ 664.008475] should_fail_ex+0x4d7/0x5e0 [ 664.008495] ? __kernfs_new_node+0xd3/0x870 [ 664.008508] should_failslab+0xc2/0x120 [ 664.008523] kmem_cache_alloc_noprof+0x5f/0x470 [ 664.008544] __kernfs_new_node+0xd3/0x870 [ 664.008559] ? __pfx___kernfs_new_node+0x10/0x10 [ 664.008574] ? lock_acquire+0x15e/0x2f0 [ 664.008587] ? kernfs_root+0x23/0x2a0 [ 664.008599] ? find_held_lock+0x2b/0x80 [ 664.008627] ? kernfs_root+0xee/0x2a0 [ 664.008638] ? lock_release+0xc8/0x290 [ 664.008650] ? lock_is_held_type+0x9e/0x120 [ 664.008665] kernfs_new_node+0x13c/0x1e0 [ 664.008682] __kernfs_create_file+0x55/0x360 [ 664.008701] sysfs_add_file_mode_ns+0x21c/0x440 [ 664.008715] ? __pfx_dev_attr_store+0x10/0x10 [ 664.008735] internal_create_group+0x571/0xeb0 [ 664.008752] ? __pfx_internal_create_group+0x10/0x10 [ 664.008766] ? blk_validate_limits+0xbf9/0x14d0 [ 664.008782] ? lock_is_held_type+0x9e/0x120 [ 664.008795] loop_configure+0xc56/0x16e0 [ 664.008825] ? __pfx_loop_configure+0x10/0x10 [ 664.008850] ? lock_acquire+0x15e/0x2f0 [ 664.008862] ? avc_has_extended_perms+0x107/0xf20 [ 664.008879] ? find_held_lock+0x2b/0x80 [ 664.008895] ? avc_has_extended_perms+0x23b/0xf20 [ 664.008913] lo_ioctl+0x76e/0x2070 [ 664.008929] ? avc_has_extended_perms+0x378/0xf20 [ 664.008946] ? perf_tp_event+0x807/0xe70 [ 664.008963] ? __pfx_lo_ioctl+0x10/0x10 [ 664.008979] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 664.008997] ? __pfx_perf_tp_event+0x10/0x10 [ 664.009014] ? perf_trace_preemptirq_template+0x259/0x430 [ 664.009036] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 664.009055] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 664.009073] ? lock_release+0xc8/0x290 [ 664.009087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.009118] ? debug_mutex_unlock+0x60/0x270 [ 664.009134] ? __fget_files+0x34/0x3b0 [ 664.009153] ? find_held_lock+0x2b/0x80 [ 664.009169] ? __fget_files+0x203/0x3b0 [ 664.009187] ? __pfx_lo_ioctl+0x10/0x10 [ 664.009203] blkdev_ioctl+0x27c/0x6c0 [ 664.009218] ? __pfx_blkdev_ioctl+0x10/0x10 [ 664.009232] ? selinux_file_ioctl+0xb9/0x280 [ 664.009246] ? __pfx_blkdev_ioctl+0x10/0x10 [ 664.009261] __x64_sys_ioctl+0x18f/0x210 [ 664.009278] do_syscall_64+0xbf/0x360 [ 664.009292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.009305] RIP: 0033:0x7f95cf2b98d7 [ 664.009315] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 664.009326] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.009338] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 664.009346] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 664.009352] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 664.009360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 664.009366] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 664.009382] 00:48:03 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x9, 0x1008, 0x0, 0x0) 00:48:03 executing program 2: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) r2 = gettid() r3 = gettid() tgkill(r2, r3, 0x0) capget(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x4, 0x9, 0x1, 0xfffffffc, 0x6, 0x7}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r5 = clone3(&(0x7f0000000380)={0x102200, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x2a}, &(0x7f0000000200)=""/146, 0x92, &(0x7f00000002c0)=""/91, &(0x7f0000000340)=[r0, 0x0, r1, r0, r1, r1], 0x6}, 0x58) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ptrace$setregs(0xf, r5, 0x1000, &(0x7f0000000400)="65832c9390636563f08b5936e823df3b05ea0893582f28f909da4511fba087099e0ce44d371331a6b68245fd5863078b66a122fb09c27b204a532f1ff69191ff26edec294759e0ac497cb6ab11ef912d7309ec311d321687c2c1469ca7c7df0cc208355e2077c4886ef1eb782b0c7d1d74ceff") close_range(r9, r6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xde, 0x20, 0x9, 0x53, 0x0, 0x9, 0xb41, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x2}, 0x800, 0x6e6, 0x1, 0x5, 0x800, 0x2, 0xffff, 0x0, 0x2, 0x0, 0x1}, r7, 0xd, r8, 0x10) 00:48:03 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) 00:48:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010327bd7000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="f81227a40eee4c2aa966d724fc7965dc1f107fd4b2458a43ad01820591f6d817ddc6473e2f164e1d50a2445a228a1e562f2a3f7bccdd4b4e144e3a06e83760430467105bec70ff249aa417633dafb3f0ebc02408c466a5f084c58db4e88e7dd4b3"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x72}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000001700)={0x1344, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2cd, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac, {0x2, 0x80}}, 0xffff, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x8, 0x0, 0x3, 0x20}}, @val={0x6, 0x2, 0x3}, @void, @val={0x25, 0x3, {0x1, 0xb3, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x1f, 0x40, 0x2}}, [{0xdd, 0xd4, "818aecd65f736bad31d8597fe9497bdc557cde0419130632849d92b59f7f5dabe63a51ca16be56cdd99abe9ebdac5277d8bf0c5b383a6800f060635fa5e8589b4c2c0af0caaf8f6795ec1f2a8e22a51d5ed377b411eedf2bdd93bcf2730c15db0110213fc0a88ff3b76ca5c1dc01bdf61f7b008313844b64535b6879feb9f6b00e213753c0b60cf01caa58eb02e424443d5ec42c106a1c3c6a483981150b6adf543498b2345ae53655109248ba963d75e1cb9002ebef3e4dbd5dbbd83589f5ee687dc0edcf638fa066a4dbc7e18a655e7765b42c"}, {0xdd, 0xac, "0c98cc429a36c89009e482b6911d21bbd65cfe97de301982511d7a0366278e4cf4def8c54a0edd9cf2177c2ebe7fcc684908e2a60b534880a97984190c8f238d3bd34bd89218d5445aea85bff729a9a644540b258f4990ebbd6a27d5a73780e996a4d5b73fb2ce1138bb491334a403e67cf88ca283fba1c904fcaa01486edf013eecd5b0c791169b092f13b429621c221d1b436b4e173be1f22dfa2e6e4e83ec0679381c910586b05459fa02"}, {0xdd, 0x27, "5d50a78cc2daea1cf27a70f135664c7f887efe541dda401d69b657ca9c2321c967c205a7c5889c"}, {0xdd, 0x52, "06d1c779346b9ea8e59072fa1c15ff8e920e884deafade201942abf3e544c20b7cc9bd4f094f8b85c205c11422984f8fe64d88cf64c2e4b6dc1b6db1fc939ffbbde3be33ddb1e3d5e0cd66ee50c230548360"}, {0xdd, 0x73, "80801fc0840219fc7117db70cb0310e98515f6ec795c5353ac06995c4b574dd983512cd70bde3d45996783d1297f0450ea497627b5427096602f81fdf77199d9ec2626af5f09a63efdf69c53b879be8e6e5d064b29b51273a6614a8fe88160bcda8c321746549a110df3f0860e18ce3d684fa7"}]}}, @NL80211_ATTR_IE={0x28, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x9, 0x9}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x1, 0xb, @broadcast, 0x0, 0x81, 0x20}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x79, 0x7f, [@cf={0x4, 0x6, {0x6, 0x0, 0x2, 0x3}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @mesh_chsw={0x76, 0x6, {0x20, 0x42, 0x34, 0x4}}, @rann={0x7e, 0x15, {{0x1, 0x62}, 0x7f, 0x20, @broadcast, 0x80000000, 0x3, 0xfff}}, @perr={0x84, 0x35, {0xd3, 0x3, [@not_ext={{}, @device_a, 0x9, "", 0x33}, @ext={{}, @device_a, 0x0, @device_b, 0x2}, @ext={{}, @broadcast, 0xffffffff, @device_b, 0xd}]}}, @supported_rates={0x1, 0x1, [{0x24}]}]}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x21, 0x7f, [@rann={0x7e, 0x15, {{0x1, 0x51}, 0x5b, 0x1f, @device_a, 0x5, 0x80000000, 0x9}}, @dsss={0x3, 0x1, 0xb1}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_BEACON_TAIL={0x5d, 0xf, [@prep={0x83, 0x25, @ext={{}, 0xfc, 0x5, @device_a, 0xb1, @broadcast, 0x81, 0x7, @device_b, 0x3f}}, @channel_switch={0x25, 0x3, {0x0, 0x38}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x56, @device_a, 0x2, @device_b, 0x20, 0x4, @broadcast, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x78, 0x9}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd5, 0x7f, [@cf={0x4, 0x6, {0x1, 0x20, 0x1ff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0x38, 0x2}}, @fast_bss_trans={0x37, 0xbe, {0x20, 0x6, "2acc00c3cbf98b5b3865949f8d53b4eb", "9feb12dae448f4626a12a78a0776b910dca5e24ab0a23adc6f3c258572c203f4", "c513edb3daef08bd1eec59de55f6210d21643a337b658b18c4179490524d24cb", [{0x3, 0x22, "7b0dda1b49037efe43a334b9f0f3cc0227420ce7706cfc67a04fa241a7d4f9c5c5f7"}, {0x4, 0xc, "e4343a9ebc3546f6488d2a75"}, {0x3, 0x1a, "f7b552169d921c564b906b66bcef1e035465a737e2af349b2876"}, {0x2, 0x2, '\'6'}, {0x1, 0xc, "2798ca924c03a2fc8ecf1e14"}, {0x3, 0xa, "110bc062f7d7b66b6c7f"}]}}, @challenge={0x10, 0x1, 0xd0}]}, @NL80211_ATTR_PROBE_RESP={0x197, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x41, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x75}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @broadcast, 0x5, "", 0x7f, 0x3, @device_a, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x4, [{0x10, 0x1}, {0x36}, {0x1b, 0x1}, {0x9, 0x1}]}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x872, 0x91, "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"}, @NL80211_ATTR_IE={0xf5, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x99, 0xf5, @device_b, 0x0, @device_a, 0x0, 0x101, @device_a, 0x8}}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x8001, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x1}}, @perr={0x84, 0x28, {0x5, 0x2, [@ext={{}, @device_a, 0x3f, @device_a, 0x8}, @ext={{}, @device_a, 0x5, @device_b, 0xd}]}}, @fast_bss_trans={0x37, 0x78, {0xbb, 0x1, "89d733b19e69c69740d47e2bcb2269cc", "1ec66fb2d78873615421c71181ce41de236f706c3906d651be6f2f4d3f05d7b2", "34b32a4bff870adf205cbf3694b88725d0a964b53a3f1040817e89603acedc47", [{0x2, 0x24, "82e06963b577b94249fb33391affc3daf59045c83ec48bdaf72d4dd7ef8aadedde1ff62e"}]}}, @supported_rates={0x1, 0x5, [{0x2, 0x1}, {0x9}, {0x2, 0x1}, {0x5}, {0x6c, 0x1}]}, @dsss={0x3, 0x1, 0xb9}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x20, 0x61}}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x0, 0x0, {0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x1, 0x4}}, @rann={0x7e, 0x15, {{0x0, 0x20}, 0x8, 0x0, @device_a, 0x3, 0x9, 0x8}}, @chsw_timing={0x68, 0x4, {0xa44, 0x1}}, @tim={0x5, 0x10, {0xee, 0x7b, 0x9, "3e7e0e7febdf0fb9ee928ea4ab"}}, @rann={0x7e, 0x15, {{0x0, 0x5b}, 0x40, 0x8, @broadcast, 0x8, 0x3, 0x800}}, @random_vendor={0xdd, 0x94, "0aca0a3ab706ffa19e31af3e9223199ed84b83a367fadb1cc677a3d165c3dc8d2105e39d6c72b3b2fce2f5981595af08b0d7d4c24d42e766fedd00aada522cfd629fab00a72159da2178acf1103d480a6fb8d0b9e40cd29f3df9fba9d4aaa41e1f71d7cbe0088fcaddfc204e1ca29eabbeeff362af953f3ae5e18f3cd56459c659cbba532a4dd65730e4fa362758452a7d26dc2e"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1fc, 0x80, [@mic={0x8c, 0x10, {0x13c, "472b7ec71a88", @short="fe74bb6bc5e34a2c"}}, @chsw_timing={0x68, 0x4, {0x1ff, 0x4}}, @cf={0x4, 0x6, {0x20, 0x3, 0x4, 0x1f}}, @sec_chan_ofs={0x3e, 0x1}, @link_id={0x65, 0x12, {@from_mac, @device_b}}, @cf={0x4, 0x6, {0x40, 0x25, 0xa8, 0x4}}, @mic={0x8c, 0x10, {0x745, "239dccadc1c5", @short="1bd5cda4ffcafdce"}}, @dsss={0x3, 0x1, 0x24}, @fast_bss_trans={0x37, 0x6d, {0x9, 0x1, "c25e281dcbccd7b8c347dae303d20133", "38a790878106fe0350e70c821cd619dc819893b71972c7feb8738e2cadf83dfa", "f5b438a1f3984757f6c415074f7d28b88a6e4ea722874aa1d5c595ce68b7277e", [{0x2, 0x19, "cfa5ac3b6984cc1077657ae8a6439730ca02409c103da43fb0"}]}}, @fast_bss_trans={0x37, 0x133, {0xfe, 0x9, "dc463c11d7e437d07e36172533b9bf56", "74bb388c2dd00fc5a0de8b798935ed97de29d43f25a11453dc18cb4e38615927", "4ec6ed39e2115dfed1f871470a9523381c0dbf0dcd2928a880b123f744175b20", [{0x1, 0x23, "c37912f21ba04f02d8426428d48eea72e0edf3b5f6bdfa4b8e3afac22cc70dbc73a9f6"}, {0x3, 0x1f, "c7645564799cf5b081eaa1d50ba9f28128ef6ff3b4374ce5acca8c78343c56"}, {0x2, 0x17, "827dc8e4b3f8de98a293f688d7523fcce3cbfa5ebff123"}, {0x4, 0x16, "8c2e3e42384880659a1d16395666dd1d05b94c015bb7"}, {0x1, 0x2, "8752"}, {0x1, 0x27, "b57df9ce7a3a7ee4c3d9dcc9194037bbac8fdbef9da7eff113c14f210f7eaec2d7da2bd88fffb9"}, {0x1, 0x22, "ff3898ebfbdf0e304219248f923d218687fc94f16b60bf409a566d6a2b40d6fb1d80"}, {0x1, 0x14, "13f89b421f9bfbe0ac615dd53e7e1552af853fc4"}, {0x2, 0x1, '4'}]}}]}], @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x1344}, 0x1, 0x0, 0x0, 0x4004084}, 0x20004040) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 00:48:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xffff, 0x7, 0x3, 0x1, 0x61, 0x8, 0x6}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:48:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 29) [ 664.071440] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 00:48:03 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 664.091256] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 664.094010] loop6: detected capacity change from 0 to 8336 [ 664.107636] loop0: detected capacity change from 0 to 8 [ 664.116853] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 664.126519] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 664.132024] EXT4-fs (loop6): get root inode failed [ 664.132930] EXT4-fs (loop6): mount failed 00:48:03 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40890) set_tid_address(0x0) 00:48:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 30) [ 664.160662] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'. [ 664.236956] loop0: detected capacity change from 0 to 8 [ 664.241374] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 664.340027] netlink: 'syz-executor.2': attribute type 338 has an invalid length. 00:48:14 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x401}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r1, 0x0) 00:48:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xffff, 0x7, 0x3, 0x1, 0x61, 0x8, 0x6}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:48:14 executing program 4: statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096) getpeername$unix(0xffffffffffffffff, &(0x7f00000010c0)=@abs, &(0x7f0000001140)=0x6e) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001040), 0x2000, 0x0) mknodat$null(r0, &(0x7f0000001080)='./file0\x00', 0x1000, 0x103) 00:48:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 29) 00:48:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x40890) set_tid_address(0x0) 00:48:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 31) 00:48:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xa, 0x1008, 0x0, 0x0) 00:48:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) pread64(r0, &(0x7f0000000040)=""/25, 0x19, 0x8001) [ 674.916640] loop6: detected capacity change from 0 to 8336 [ 674.923618] FAULT_INJECTION: forcing a failure. [ 674.923618] name failslab, interval 1, probability 0, space 0, times 0 [ 674.925686] CPU: 1 UID: 0 PID: 6401 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 674.925723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 674.925740] Call Trace: [ 674.925751] [ 674.925762] dump_stack_lvl+0xfa/0x120 [ 674.925799] should_fail_ex+0x4d7/0x5e0 [ 674.925842] ? __kernfs_new_node+0xd3/0x870 [ 674.925871] should_failslab+0xc2/0x120 [ 674.925902] kmem_cache_alloc_noprof+0x5f/0x470 [ 674.925954] __kernfs_new_node+0xd3/0x870 [ 674.925989] ? __pfx___kernfs_new_node+0x10/0x10 [ 674.926024] ? lock_acquire+0x15e/0x2f0 [ 674.926055] ? kernfs_root+0x23/0x2a0 [ 674.926084] ? find_held_lock+0x2b/0x80 [ 674.926124] ? kernfs_root+0xee/0x2a0 [ 674.926152] ? lock_release+0xc8/0x290 [ 674.926180] ? lock_is_held_type+0x9e/0x120 [ 674.926213] kernfs_new_node+0x13c/0x1e0 [ 674.926254] __kernfs_create_file+0x55/0x360 [ 674.926300] sysfs_add_file_mode_ns+0x21c/0x440 [ 674.926333] ? __pfx_dev_attr_store+0x10/0x10 [ 674.926379] internal_create_group+0x571/0xeb0 [ 674.926421] ? __pfx_internal_create_group+0x10/0x10 [ 674.926461] ? blk_validate_limits+0xbf9/0x14d0 [ 674.926498] ? lock_is_held_type+0x9e/0x120 [ 674.926529] loop_configure+0xc56/0x16e0 [ 674.926597] ? __pfx_loop_configure+0x10/0x10 [ 674.926656] ? lock_acquire+0x15e/0x2f0 [ 674.926685] ? avc_has_extended_perms+0x107/0xf20 [ 674.926725] ? find_held_lock+0x2b/0x80 [ 674.926765] ? avc_has_extended_perms+0x23b/0xf20 [ 674.926809] lo_ioctl+0x76e/0x2070 [ 674.926846] ? avc_has_extended_perms+0x378/0xf20 [ 674.926894] ? __pfx_lo_ioctl+0x10/0x10 [ 674.926934] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 674.926983] ? lock_acquire+0x15e/0x2f0 [ 674.927013] ? __virt_addr_valid+0x1c6/0x5d0 [ 674.927056] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.927105] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.927150] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 674.927195] ? lock_release+0xc8/0x290 [ 674.927228] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 674.927296] ? debug_mutex_unlock+0x60/0x270 [ 674.927336] ? __fget_files+0x34/0x3b0 [ 674.927378] ? find_held_lock+0x2b/0x80 [ 674.927417] ? __fget_files+0x203/0x3b0 [ 674.927461] ? __pfx_lo_ioctl+0x10/0x10 [ 674.927501] blkdev_ioctl+0x27c/0x6c0 [ 674.927535] ? __pfx_blkdev_ioctl+0x10/0x10 [ 674.927569] ? selinux_file_ioctl+0xb9/0x280 [ 674.927601] ? __pfx_blkdev_ioctl+0x10/0x10 [ 674.927638] __x64_sys_ioctl+0x18f/0x210 [ 674.927678] do_syscall_64+0xbf/0x360 [ 674.927711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.927740] RIP: 0033:0x7f95cf2b98d7 [ 674.927762] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.927789] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.927816] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 674.927835] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 674.927852] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 674.927869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 674.927885] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 674.927921] 00:48:14 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:14 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 674.992930] loop0: detected capacity change from 0 to 8 [ 675.014512] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 675.019756] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.022296] EXT4-fs (loop6): get root inode failed [ 675.022857] EXT4-fs (loop6): mount failed [ 675.027374] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:48:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 32) 00:48:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x4, 0x1008, 0x0, 0x0) 00:48:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 30) 00:48:14 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 675.100928] FAULT_INJECTION: forcing a failure. [ 675.100928] name failslab, interval 1, probability 0, space 0, times 0 [ 675.102003] CPU: 1 UID: 0 PID: 6413 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 675.102026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 675.102034] Call Trace: [ 675.102038] [ 675.102044] dump_stack_lvl+0xfa/0x120 [ 675.102066] should_fail_ex+0x4d7/0x5e0 [ 675.102096] ? __kernfs_new_node+0xd3/0x870 [ 675.102125] should_failslab+0xc2/0x120 [ 675.102149] kmem_cache_alloc_noprof+0x5f/0x470 [ 675.102194] __kernfs_new_node+0xd3/0x870 [ 675.102220] ? __pfx___kernfs_new_node+0x10/0x10 [ 675.102248] ? lock_acquire+0x15e/0x2f0 [ 675.102275] ? kernfs_root+0x23/0x2a0 [ 675.102294] ? find_held_lock+0x2b/0x80 [ 675.102323] ? kernfs_root+0xee/0x2a0 [ 675.102342] ? lock_release+0xc8/0x290 [ 675.102357] ? lock_is_held_type+0x9e/0x120 [ 675.102377] kernfs_new_node+0x13c/0x1e0 [ 675.102402] __kernfs_create_file+0x55/0x360 [ 675.102441] sysfs_add_file_mode_ns+0x21c/0x440 [ 675.102469] ? __pfx_dev_attr_store+0x10/0x10 [ 675.102509] internal_create_group+0x571/0xeb0 [ 675.102542] ? __pfx_internal_create_group+0x10/0x10 [ 675.102568] ? blk_validate_limits+0xbf9/0x14d0 [ 675.102594] ? lock_is_held_type+0x9e/0x120 [ 675.102613] loop_configure+0xc56/0x16e0 [ 675.102662] ? __pfx_loop_configure+0x10/0x10 [ 675.102704] ? lock_acquire+0x15e/0x2f0 [ 675.102721] ? avc_has_extended_perms+0x107/0xf20 [ 675.102750] ? find_held_lock+0x2b/0x80 [ 675.102781] ? avc_has_extended_perms+0x23b/0xf20 [ 675.102808] lo_ioctl+0x76e/0x2070 [ 675.102841] ? avc_has_extended_perms+0x378/0xf20 [ 675.102875] ? __pfx_lo_ioctl+0x10/0x10 [ 675.102900] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 675.102930] ? lock_acquire+0x15e/0x2f0 [ 675.102950] ? __virt_addr_valid+0x1c6/0x5d0 [ 675.102975] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.103003] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.103028] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.103056] ? lock_release+0xc8/0x290 [ 675.103083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.103133] ? debug_mutex_unlock+0x60/0x270 [ 675.103166] ? __fget_files+0x34/0x3b0 [ 675.103204] ? find_held_lock+0x2b/0x80 [ 675.103233] ? __fget_files+0x203/0x3b0 [ 675.103259] ? __pfx_lo_ioctl+0x10/0x10 [ 675.103288] blkdev_ioctl+0x27c/0x6c0 [ 675.103307] ? __pfx_blkdev_ioctl+0x10/0x10 [ 675.103331] ? selinux_file_ioctl+0xb9/0x280 [ 675.103352] ? __pfx_blkdev_ioctl+0x10/0x10 [ 675.103373] __x64_sys_ioctl+0x18f/0x210 [ 675.103408] do_syscall_64+0xbf/0x360 [ 675.103437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.103462] RIP: 0033:0x7f21745c38d7 [ 675.103476] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.103505] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.103521] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 675.103535] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 675.103548] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 675.103558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 675.103574] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 675.103594] [ 675.136097] loop0: detected capacity change from 0 to 8 [ 675.143756] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 675.156055] loop6: detected capacity change from 0 to 8336 [ 675.171205] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 675.172806] EXT4-fs (loop6): get root inode failed [ 675.174953] EXT4-fs (loop6): mount failed 00:48:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 33) 00:48:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 31) 00:48:14 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 675.224570] loop6: detected capacity change from 0 to 8336 [ 675.231099] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 675.234708] EXT4-fs (loop6): get root inode failed [ 675.235170] EXT4-fs (loop6): mount failed 00:48:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 32) [ 675.259060] FAULT_INJECTION: forcing a failure. [ 675.259060] name failslab, interval 1, probability 0, space 0, times 0 [ 675.260093] CPU: 1 UID: 0 PID: 6427 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 675.260111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 675.260119] Call Trace: [ 675.260123] [ 675.260128] dump_stack_lvl+0xfa/0x120 [ 675.260148] should_fail_ex+0x4d7/0x5e0 [ 675.260168] ? __kernfs_new_node+0xd3/0x870 [ 675.260181] should_failslab+0xc2/0x120 [ 675.260196] kmem_cache_alloc_noprof+0x5f/0x470 [ 675.260218] __kernfs_new_node+0xd3/0x870 [ 675.260232] ? __pfx___kernfs_new_node+0x10/0x10 [ 675.260247] ? lock_acquire+0x15e/0x2f0 [ 675.260261] ? kernfs_root+0x23/0x2a0 [ 675.260273] ? find_held_lock+0x2b/0x80 [ 675.260290] ? kernfs_root+0xee/0x2a0 [ 675.260302] ? lock_release+0xc8/0x290 [ 675.260313] ? lock_is_held_type+0x9e/0x120 [ 675.260329] kernfs_new_node+0x13c/0x1e0 [ 675.260346] __kernfs_create_file+0x55/0x360 [ 675.260365] sysfs_add_file_mode_ns+0x21c/0x440 [ 675.260379] ? __pfx_dev_attr_store+0x10/0x10 [ 675.260400] internal_create_group+0x571/0xeb0 [ 675.260417] ? __pfx_internal_create_group+0x10/0x10 [ 675.260431] ? blk_validate_limits+0xbf9/0x14d0 [ 675.260453] ? lock_is_held_type+0x9e/0x120 [ 675.260465] loop_configure+0xc56/0x16e0 [ 675.260502] ? __pfx_loop_configure+0x10/0x10 [ 675.260529] ? lock_acquire+0x15e/0x2f0 [ 675.260541] ? avc_has_extended_perms+0x107/0xf20 [ 675.260559] ? find_held_lock+0x2b/0x80 [ 675.260575] ? avc_has_extended_perms+0x23b/0xf20 [ 675.260594] lo_ioctl+0x76e/0x2070 [ 675.260609] ? avc_has_extended_perms+0x378/0xf20 [ 675.260628] ? __pfx_lo_ioctl+0x10/0x10 [ 675.260644] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 675.260664] ? lock_acquire+0x15e/0x2f0 [ 675.260677] ? __virt_addr_valid+0x1c6/0x5d0 [ 675.260696] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.260727] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.260745] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 675.260764] ? lock_release+0xc8/0x290 [ 675.260778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.260808] ? debug_mutex_unlock+0x60/0x270 [ 675.260824] ? __fget_files+0x34/0x3b0 [ 675.260842] ? find_held_lock+0x2b/0x80 [ 675.260859] ? __fget_files+0x203/0x3b0 [ 675.260877] ? __pfx_lo_ioctl+0x10/0x10 [ 675.260893] blkdev_ioctl+0x27c/0x6c0 [ 675.260908] ? __pfx_blkdev_ioctl+0x10/0x10 [ 675.260922] ? selinux_file_ioctl+0xb9/0x280 [ 675.260936] ? __pfx_blkdev_ioctl+0x10/0x10 [ 675.260951] __x64_sys_ioctl+0x18f/0x210 [ 675.260969] do_syscall_64+0xbf/0x360 [ 675.260983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.260996] RIP: 0033:0x7f95cf2b98d7 [ 675.261005] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.261017] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.261028] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 675.261037] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 675.261044] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 675.261051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 675.261057] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 675.261073] [ 675.357612] loop0: detected capacity change from 0 to 8 [ 675.362954] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 675.371162] loop6: detected capacity change from 0 to 8336 [ 675.399320] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 675.404795] EXT4-fs (loop6): get root inode failed [ 675.405256] EXT4-fs (loop6): mount failed 00:48:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 34) 00:48:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 33) 00:48:25 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000100)) set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000180)) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000140)) 00:48:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xb, 0x1008, 0x0, 0x0) 00:48:25 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:25 executing program 5: prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000200)=0x5) 00:48:25 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:48:25 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0xc3, [0x4, 0xfffffffffffffff4, 0x1, 0x401, 0x9, 0x3866b7ef], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=""/195}, &(0x7f00000001c0)=0x78) set_tid_address(0x0) [ 686.199806] loop0: detected capacity change from 0 to 8 [ 686.219583] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:48:25 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 686.346954] loop6: detected capacity change from 0 to 8336 [ 686.415622] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 686.436165] EXT4-fs (loop6): get root inode failed [ 686.439833] EXT4-fs (loop6): mount failed 00:48:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 35) 00:48:25 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:48:25 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) [ 686.594653] FAULT_INJECTION: forcing a failure. [ 686.594653] name failslab, interval 1, probability 0, space 0, times 0 [ 686.596960] CPU: 1 UID: 0 PID: 6469 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 686.596990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 686.597003] Call Trace: [ 686.597010] [ 686.597018] dump_stack_lvl+0xfa/0x120 [ 686.597048] should_fail_ex+0x4d7/0x5e0 [ 686.597083] ? __kernfs_new_node+0xd3/0x870 [ 686.597105] should_failslab+0xc2/0x120 [ 686.597130] kmem_cache_alloc_noprof+0x5f/0x470 [ 686.597170] __kernfs_new_node+0xd3/0x870 [ 686.597197] ? __pfx___kernfs_new_node+0x10/0x10 [ 686.597224] ? lock_acquire+0x15e/0x2f0 [ 686.597249] ? kernfs_root+0x23/0x2a0 [ 686.597270] ? find_held_lock+0x2b/0x80 [ 686.597301] ? kernfs_root+0xee/0x2a0 [ 686.597323] ? lock_release+0xc8/0x290 [ 686.597344] ? lock_is_held_type+0x9e/0x120 [ 686.597371] kernfs_new_node+0x13c/0x1e0 [ 686.597403] __kernfs_create_file+0x55/0x360 [ 686.597439] sysfs_add_file_mode_ns+0x21c/0x440 [ 686.597472] ? __pfx_dev_attr_store+0x10/0x10 [ 686.597507] internal_create_group+0x571/0xeb0 [ 686.597540] ? __pfx_internal_create_group+0x10/0x10 [ 686.597565] ? blk_validate_limits+0xbf9/0x14d0 [ 686.597594] ? lock_is_held_type+0x9e/0x120 [ 686.597618] loop_configure+0xc56/0x16e0 [ 686.597674] ? __pfx_loop_configure+0x10/0x10 [ 686.597720] ? lock_acquire+0x15e/0x2f0 [ 686.597742] ? avc_has_extended_perms+0x107/0xf20 [ 686.597774] ? find_held_lock+0x2b/0x80 [ 686.597804] ? avc_has_extended_perms+0x23b/0xf20 [ 686.597838] lo_ioctl+0x76e/0x2070 [ 686.597867] ? avc_has_extended_perms+0x378/0xf20 [ 686.597903] ? __pfx_lo_ioctl+0x10/0x10 [ 686.597936] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 686.597974] ? lock_acquire+0x15e/0x2f0 [ 686.597997] ? __virt_addr_valid+0x1c6/0x5d0 [ 686.598031] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.598068] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.598103] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 686.598137] ? lock_release+0xc8/0x290 [ 686.598163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 686.598218] ? debug_mutex_unlock+0x60/0x270 [ 686.598248] ? __fget_files+0x34/0x3b0 [ 686.598280] ? find_held_lock+0x2b/0x80 [ 686.598317] ? __fget_files+0x203/0x3b0 [ 686.598350] ? __pfx_lo_ioctl+0x10/0x10 [ 686.598380] blkdev_ioctl+0x27c/0x6c0 [ 686.598407] ? __pfx_blkdev_ioctl+0x10/0x10 [ 686.598433] ? selinux_file_ioctl+0xb9/0x280 [ 686.598459] ? __pfx_blkdev_ioctl+0x10/0x10 [ 686.598486] __x64_sys_ioctl+0x18f/0x210 [ 686.598518] do_syscall_64+0xbf/0x360 [ 686.598544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.598566] RIP: 0033:0x7f95cf2b98d7 [ 686.598583] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.598603] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.598625] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 686.598639] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 686.598652] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 686.598666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 686.598678] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 686.598707] 00:48:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 34) 00:48:26 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:48:26 executing program 4: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x8000, 0x100, 0x2, 0x4, 0x400]}, &(0x7f00000000c0)=0x54) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 686.738194] loop6: detected capacity change from 0 to 8336 [ 686.755018] loop0: detected capacity change from 0 to 8 [ 686.797066] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 686.801859] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 686.816927] EXT4-fs (loop6): get root inode failed [ 686.817398] EXT4-fs (loop6): mount failed 00:48:26 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:48:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 36) [ 686.992919] loop0: detected capacity change from 0 to 8 [ 687.004158] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:48:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 35) 00:48:35 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xc, 0x1008, 0x0, 0x0) 00:48:35 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:35 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:48:35 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:48:35 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) 00:48:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 37) 00:48:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 696.597618] loop6: detected capacity change from 0 to 8336 [ 696.614031] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 696.616709] EXT4-fs (loop6): get root inode failed [ 696.617127] EXT4-fs (loop6): mount failed 00:48:36 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 696.644958] loop0: detected capacity change from 0 to 8 [ 696.645422] FAULT_INJECTION: forcing a failure. [ 696.645422] name failslab, interval 1, probability 0, space 0, times 0 [ 696.646418] CPU: 0 UID: 0 PID: 6517 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 696.646434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 696.646442] Call Trace: [ 696.646450] [ 696.646455] dump_stack_lvl+0xfa/0x120 [ 696.646475] should_fail_ex+0x4d7/0x5e0 [ 696.646496] should_failslab+0xc2/0x120 [ 696.646511] __kmalloc_cache_noprof+0x73/0x470 [ 696.646529] ? set_capacity_and_notify+0xce/0x240 [ 696.646547] ? lock_release+0xc8/0x290 [ 696.646561] ? kobject_uevent_env+0x22e/0xf90 [ 696.646582] ? kobject_uevent_env+0x22e/0xf90 [ 696.646601] kobject_uevent_env+0x22e/0xf90 [ 696.646621] ? lock_is_held_type+0x9e/0x120 [ 696.646636] loop_configure+0xf3d/0x16e0 [ 696.646668] ? __pfx_loop_configure+0x10/0x10 [ 696.646694] ? lock_acquire+0x15e/0x2f0 [ 696.646707] ? avc_has_extended_perms+0x107/0xf20 [ 696.646726] ? find_held_lock+0x2b/0x80 [ 696.646744] ? avc_has_extended_perms+0x23b/0xf20 [ 696.646764] lo_ioctl+0x76e/0x2070 [ 696.646781] ? avc_has_extended_perms+0x378/0xf20 [ 696.646800] ? perf_tp_event+0x807/0xe70 [ 696.646818] ? __pfx_lo_ioctl+0x10/0x10 [ 696.646835] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 696.646855] ? __pfx_perf_tp_event+0x10/0x10 [ 696.646873] ? perf_trace_preemptirq_template+0x259/0x430 [ 696.646897] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 696.646917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 696.646938] ? lock_release+0xc8/0x290 [ 696.646952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.646984] ? debug_mutex_unlock+0x60/0x270 [ 696.647001] ? __fget_files+0x34/0x3b0 [ 696.647021] ? find_held_lock+0x2b/0x80 [ 696.647039] ? __fget_files+0x203/0x3b0 [ 696.647058] ? __pfx_lo_ioctl+0x10/0x10 [ 696.647076] blkdev_ioctl+0x27c/0x6c0 [ 696.647091] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.647107] ? selinux_file_ioctl+0xb9/0x280 [ 696.647121] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.647137] __x64_sys_ioctl+0x18f/0x210 [ 696.647156] do_syscall_64+0xbf/0x360 [ 696.647171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.647185] RIP: 0033:0x7f95cf2b98d7 [ 696.647195] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 696.647207] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.647219] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 696.647228] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 696.647235] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 696.647243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 696.647250] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 696.647266] 00:48:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 36) [ 696.715517] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:48:36 executing program 2: prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000200)=0x5) 00:48:36 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) [ 696.763928] FAULT_INJECTION: forcing a failure. [ 696.763928] name failslab, interval 1, probability 0, space 0, times 0 [ 696.765734] CPU: 1 UID: 0 PID: 6524 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 696.765766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 696.765779] Call Trace: [ 696.765787] [ 696.765796] dump_stack_lvl+0xfa/0x120 [ 696.765828] should_fail_ex+0x4d7/0x5e0 [ 696.765865] ? __kernfs_new_node+0xd3/0x870 [ 696.765889] should_failslab+0xc2/0x120 [ 696.765914] kmem_cache_alloc_noprof+0x5f/0x470 [ 696.765957] __kernfs_new_node+0xd3/0x870 [ 696.765986] ? __pfx___kernfs_new_node+0x10/0x10 [ 696.766016] ? lock_acquire+0x15e/0x2f0 [ 696.766042] ? kernfs_root+0x23/0x2a0 [ 696.766065] ? find_held_lock+0x2b/0x80 [ 696.766098] ? kernfs_root+0xee/0x2a0 [ 696.766122] ? lock_release+0xc8/0x290 [ 696.766144] ? lock_is_held_type+0x9e/0x120 [ 696.766173] kernfs_new_node+0x13c/0x1e0 [ 696.766207] __kernfs_create_file+0x55/0x360 [ 696.766245] sysfs_add_file_mode_ns+0x21c/0x440 [ 696.766273] ? __pfx_dev_attr_store+0x10/0x10 [ 696.766311] internal_create_group+0x571/0xeb0 [ 696.766346] ? __pfx_internal_create_group+0x10/0x10 [ 696.766373] ? blk_validate_limits+0xbf9/0x14d0 [ 696.766404] ? lock_is_held_type+0x9e/0x120 [ 696.766429] loop_configure+0xc56/0x16e0 [ 696.766495] ? __pfx_loop_configure+0x10/0x10 [ 696.766544] ? lock_acquire+0x15e/0x2f0 [ 696.766569] ? avc_has_extended_perms+0x107/0xf20 [ 696.766602] ? find_held_lock+0x2b/0x80 [ 696.766634] ? avc_has_extended_perms+0x23b/0xf20 [ 696.766670] lo_ioctl+0x76e/0x2070 [ 696.766701] ? avc_has_extended_perms+0x378/0xf20 [ 696.766739] ? __pfx_lo_ioctl+0x10/0x10 [ 696.766771] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 696.766811] ? lock_acquire+0x15e/0x2f0 [ 696.766836] ? __virt_addr_valid+0x1c6/0x5d0 [ 696.766872] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 696.766912] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 696.766949] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 696.766985] ? lock_release+0xc8/0x290 [ 696.767013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.767072] ? debug_mutex_unlock+0x60/0x270 [ 696.767104] ? __fget_files+0x34/0x3b0 [ 696.767139] ? find_held_lock+0x2b/0x80 [ 696.767171] ? __fget_files+0x203/0x3b0 [ 696.767207] ? __pfx_lo_ioctl+0x10/0x10 [ 696.767239] blkdev_ioctl+0x27c/0x6c0 [ 696.767267] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.767296] ? selinux_file_ioctl+0xb9/0x280 [ 696.767322] ? __pfx_blkdev_ioctl+0x10/0x10 [ 696.767352] __x64_sys_ioctl+0x18f/0x210 [ 696.767386] do_syscall_64+0xbf/0x360 [ 696.767414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.767437] RIP: 0033:0x7f21745c38d7 [ 696.767456] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 696.767478] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.767500] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 696.767516] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 696.767530] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 696.767544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 696.767557] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 696.767588] 00:48:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 38) 00:48:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x7ffff000}], 0x16, 0x1008, 0x0, 0x0) [ 696.858054] loop6: detected capacity change from 0 to 8336 [ 696.872089] loop0: detected capacity change from 0 to 8 [ 696.876539] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 696.879011] EXT4-fs (loop6): get root inode failed [ 696.879925] EXT4-fs (loop6): mount failed [ 696.894810] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:48:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 37) [ 697.033046] loop6: detected capacity change from 0 to 8336 [ 697.044175] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 697.047693] EXT4-fs (loop6): get root inode failed [ 697.048106] EXT4-fs (loop6): mount failed 00:48:47 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:48:47 executing program 2: prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000200)=0x5) 00:48:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 39) 00:48:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 38) 00:48:47 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xd, 0x1008, 0x0, 0x0) 00:48:47 executing program 5: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x1}, 0xe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101001) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 00:48:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x7ffff000}], 0x16, 0x1008, 0x0, 0x0) [ 708.288662] FAULT_INJECTION: forcing a failure. [ 708.288662] name failslab, interval 1, probability 0, space 0, times 0 [ 708.289740] CPU: 0 UID: 0 PID: 6554 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 708.289756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.289763] Call Trace: [ 708.289767] [ 708.289772] dump_stack_lvl+0xfa/0x120 [ 708.289791] should_fail_ex+0x4d7/0x5e0 [ 708.289811] ? __kernfs_new_node+0xd3/0x870 [ 708.289825] should_failslab+0xc2/0x120 [ 708.289840] kmem_cache_alloc_noprof+0x5f/0x470 [ 708.289862] __kernfs_new_node+0xd3/0x870 [ 708.289877] ? __pfx___kernfs_new_node+0x10/0x10 [ 708.289892] ? lock_acquire+0x15e/0x2f0 [ 708.289907] ? kernfs_root+0x23/0x2a0 [ 708.289919] ? find_held_lock+0x2b/0x80 [ 708.289936] ? kernfs_root+0xee/0x2a0 [ 708.289948] ? lock_release+0xc8/0x290 [ 708.289960] ? lock_is_held_type+0x9e/0x120 [ 708.289975] kernfs_new_node+0x13c/0x1e0 [ 708.289992] __kernfs_create_file+0x55/0x360 [ 708.290012] sysfs_add_file_mode_ns+0x21c/0x440 [ 708.290027] ? __pfx_dev_attr_store+0x10/0x10 [ 708.290048] internal_create_group+0x571/0xeb0 [ 708.290067] ? __pfx_internal_create_group+0x10/0x10 [ 708.290081] ? blk_validate_limits+0xbf9/0x14d0 [ 708.290099] ? lock_is_held_type+0x9e/0x120 [ 708.290111] loop_configure+0xc56/0x16e0 [ 708.290142] ? __pfx_loop_configure+0x10/0x10 [ 708.290167] ? lock_acquire+0x15e/0x2f0 [ 708.290179] ? avc_has_extended_perms+0x107/0xf20 [ 708.290198] ? find_held_lock+0x2b/0x80 [ 708.290214] ? avc_has_extended_perms+0x23b/0xf20 [ 708.290232] lo_ioctl+0x76e/0x2070 [ 708.290248] ? avc_has_extended_perms+0x378/0xf20 [ 708.290265] ? perf_tp_event+0x807/0xe70 [ 708.290284] ? __pfx_lo_ioctl+0x10/0x10 [ 708.290300] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 708.290318] ? __pfx_perf_tp_event+0x10/0x10 [ 708.290335] ? perf_trace_preemptirq_template+0x259/0x430 [ 708.290358] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 708.290376] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 708.290395] ? lock_release+0xc8/0x290 [ 708.290409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.290439] ? debug_mutex_unlock+0x60/0x270 [ 708.290460] ? __fget_files+0x34/0x3b0 [ 708.290478] ? find_held_lock+0x2b/0x80 [ 708.290495] ? __fget_files+0x203/0x3b0 [ 708.290513] ? __pfx_lo_ioctl+0x10/0x10 [ 708.290529] blkdev_ioctl+0x27c/0x6c0 [ 708.290544] ? __pfx_blkdev_ioctl+0x10/0x10 [ 708.290558] ? selinux_file_ioctl+0xb9/0x280 [ 708.290572] ? __pfx_blkdev_ioctl+0x10/0x10 [ 708.290587] __x64_sys_ioctl+0x18f/0x210 [ 708.290605] do_syscall_64+0xbf/0x360 [ 708.290620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.290633] RIP: 0033:0x7f21745c38d7 [ 708.290642] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.290654] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.290665] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 708.290673] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 708.290680] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 708.290687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 708.290694] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 708.290709] [ 708.343257] loop0: detected capacity change from 0 to 8 00:48:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) [ 708.344409] FAULT_INJECTION: forcing a failure. [ 708.344409] name failslab, interval 1, probability 0, space 0, times 0 [ 708.346604] CPU: 1 UID: 0 PID: 6563 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 708.346641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.346657] Call Trace: [ 708.346666] [ 708.346676] dump_stack_lvl+0xfa/0x120 [ 708.346712] should_fail_ex+0x4d7/0x5e0 [ 708.346754] ? kobject_get_path+0xc9/0x200 [ 708.346786] should_failslab+0xc2/0x120 [ 708.346816] __kmalloc_noprof+0xb4/0x4b0 [ 708.346856] ? __kmalloc_cache_noprof+0x369/0x470 [ 708.346892] ? set_capacity_and_notify+0xce/0x240 [ 708.346932] kobject_get_path+0xc9/0x200 [ 708.346966] ? kasan_save_track+0x14/0x30 [ 708.346999] kobject_uevent_env+0x252/0xf90 [ 708.347043] ? lock_is_held_type+0x9e/0x120 00:48:47 executing program 4: set_tid_address(0x0) [ 708.347072] loop_configure+0xf3d/0x16e0 [ 708.347139] ? __pfx_loop_configure+0x10/0x10 [ 708.347195] ? lock_acquire+0x15e/0x2f0 [ 708.347225] ? avc_has_extended_perms+0x107/0xf20 [ 708.347263] ? find_held_lock+0x2b/0x80 [ 708.347302] ? avc_has_extended_perms+0x23b/0xf20 [ 708.347343] lo_ioctl+0x76e/0x2070 [ 708.347379] ? avc_has_extended_perms+0x378/0xf20 [ 708.347423] ? __pfx_lo_ioctl+0x10/0x10 [ 708.347471] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 708.347518] ? lock_acquire+0x15e/0x2f0 [ 708.347546] ? __virt_addr_valid+0x1c6/0x5d0 [ 708.347587] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 708.347634] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 708.347677] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 708.347720] ? lock_release+0xc8/0x290 [ 708.347751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.347817] ? debug_mutex_unlock+0x60/0x270 [ 708.347854] ? __fget_files+0x34/0x3b0 [ 708.347895] ? find_held_lock+0x2b/0x80 [ 708.347933] ? __fget_files+0x203/0x3b0 [ 708.347974] ? __pfx_lo_ioctl+0x10/0x10 [ 708.348012] blkdev_ioctl+0x27c/0x6c0 [ 708.348044] ? __pfx_blkdev_ioctl+0x10/0x10 [ 708.348077] ? selinux_file_ioctl+0xb9/0x280 [ 708.348108] ? __pfx_blkdev_ioctl+0x10/0x10 [ 708.348142] __x64_sys_ioctl+0x18f/0x210 [ 708.348181] do_syscall_64+0xbf/0x360 [ 708.348213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.348240] RIP: 0033:0x7f95cf2b98d7 [ 708.348261] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.348286] RSP: 002b:00007f95cc82ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.348312] RAX: ffffffffffffffda RBX: 00007f95cf303970 RCX: 00007f95cf2b98d7 [ 708.348330] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 708.348346] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 708.348362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 708.348378] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 708.348412] [ 708.409554] loop6: detected capacity change from 0 to 8336 00:48:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:47 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) [ 708.436793] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 708.442660] EXT4-fs (loop6): get root inode failed [ 708.443507] EXT4-fs (loop6): mount failed [ 708.482005] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:48:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 40) 00:48:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 39) 00:48:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8, @none, 0x3ff}, 0xe) 00:48:48 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 708.698337] loop6: detected capacity change from 0 to 8336 [ 708.700826] loop0: detected capacity change from 0 to 8 [ 708.712761] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 708.714531] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 708.719565] EXT4-fs (loop6): get root inode failed [ 708.720292] EXT4-fs (loop6): mount failed 00:48:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 41) 00:48:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xe, 0x1008, 0x0, 0x0) 00:48:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) lseek(r0, 0x1, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prlimit64(r2, 0xa, &(0x7f0000000040)={0x105, 0x2}, &(0x7f00000000c0)) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000001c0)) r3 = gettid() r4 = gettid() tgkill(r3, r4, 0x0) prlimit64(r3, 0x2, &(0x7f0000000100)={0x3, 0xffffffff}, &(0x7f0000000140)) set_tid_address(0x0) 00:48:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) read(r1, &(0x7f0000000080)=""/248, 0xf8) 00:48:59 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:48:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 40) 00:48:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x7ffff000}], 0x16, 0x1008, 0x0, 0x0) 00:48:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xc, 0x1008, 0x0, 0x0) [ 720.182893] loop6: detected capacity change from 0 to 8336 [ 720.186741] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 720.188282] FAULT_INJECTION: forcing a failure. [ 720.188282] name failslab, interval 1, probability 0, space 0, times 0 [ 720.189871] CPU: 0 UID: 0 PID: 6615 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 720.189900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.189912] Call Trace: [ 720.189919] [ 720.189926] dump_stack_lvl+0xfa/0x120 [ 720.189956] should_fail_ex+0x4d7/0x5e0 [ 720.189989] should_failslab+0xc2/0x120 [ 720.190012] __kmalloc_cache_noprof+0x73/0x470 [ 720.190041] ? set_capacity_and_notify+0xce/0x240 [ 720.190070] ? lock_release+0xc8/0x290 [ 720.190093] ? kobject_uevent_env+0x22e/0xf90 [ 720.190127] ? kobject_uevent_env+0x22e/0xf90 [ 720.190157] kobject_uevent_env+0x22e/0xf90 [ 720.190189] ? lock_is_held_type+0x9e/0x120 [ 720.190212] loop_configure+0xf3d/0x16e0 [ 720.190263] ? __pfx_loop_configure+0x10/0x10 [ 720.190306] ? lock_acquire+0x15e/0x2f0 [ 720.190326] ? avc_has_extended_perms+0x107/0xf20 [ 720.190358] ? find_held_lock+0x2b/0x80 [ 720.190389] ? avc_has_extended_perms+0x23b/0xf20 [ 720.190420] lo_ioctl+0x76e/0x2070 [ 720.190454] ? avc_has_extended_perms+0x378/0xf20 [ 720.190484] ? perf_tp_event+0x807/0xe70 [ 720.190514] ? __pfx_lo_ioctl+0x10/0x10 [ 720.190542] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 720.190573] ? __pfx_perf_tp_event+0x10/0x10 [ 720.190603] ? perf_trace_preemptirq_template+0x259/0x430 [ 720.190642] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 720.190675] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 720.190707] ? lock_release+0xc8/0x290 [ 720.190732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 720.190781] ? debug_mutex_unlock+0x60/0x270 [ 720.190810] ? __fget_files+0x34/0x3b0 [ 720.190842] ? find_held_lock+0x2b/0x80 [ 720.190870] ? __fget_files+0x203/0x3b0 [ 720.190902] ? __pfx_lo_ioctl+0x10/0x10 [ 720.190931] blkdev_ioctl+0x27c/0x6c0 [ 720.190955] ? __pfx_blkdev_ioctl+0x10/0x10 [ 720.190980] ? selinux_file_ioctl+0xb9/0x280 [ 720.191005] ? __pfx_blkdev_ioctl+0x10/0x10 [ 720.191030] __x64_sys_ioctl+0x18f/0x210 [ 720.191060] do_syscall_64+0xbf/0x360 [ 720.191086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.191106] RIP: 0033:0x7f21745c38d7 [ 720.191122] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.191142] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.191162] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 720.191176] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 720.191190] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 720.191204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 720.191217] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 720.191242] [ 720.226713] mmap: syz-executor.4 (6612): VmData 37515264 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 720.232894] loop0: detected capacity change from 0 to 8 [ 720.264591] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 720.265431] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 720.267417] EXT4-fs (loop6): get root inode failed [ 720.268563] EXT4-fs (loop6): mount failed 00:48:59 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) 00:48:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 42) 00:48:59 executing program 4: waitid(0x3, 0x0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) set_tid_address(0x0) 00:48:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 41) [ 720.479082] loop0: detected capacity change from 0 to 8 [ 720.519529] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 720.577351] loop6: detected capacity change from 0 to 8336 00:48:59 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) 00:48:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 43) [ 720.598268] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 720.603878] EXT4-fs (loop6): get root inode failed [ 720.604650] EXT4-fs (loop6): mount failed [ 720.709084] loop0: detected capacity change from 0 to 8 [ 720.728979] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 44) 00:49:09 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'wg2\x00', {0x2}, 0xfffb}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) creat(&(0x7f0000000200)='./file0\x00', 0x3) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)=0x1) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x20004004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:49:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x288000, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40, 0x1}, 0xe) 00:49:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xf, 0x1008, 0x0, 0x0) 00:49:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:09 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:49:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 42) [ 730.085496] loop0: detected capacity change from 0 to 8 [ 730.087203] loop6: detected capacity change from 0 to 8336 [ 730.089800] FAULT_INJECTION: forcing a failure. [ 730.089800] name failslab, interval 1, probability 0, space 0, times 0 [ 730.090736] CPU: 0 UID: 0 PID: 6665 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 730.090754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 730.090762] Call Trace: [ 730.090767] [ 730.090772] dump_stack_lvl+0xfa/0x120 [ 730.090792] should_fail_ex+0x4d7/0x5e0 [ 730.090817] ? kobject_get_path+0xc9/0x200 [ 730.090837] should_failslab+0xc2/0x120 [ 730.090853] __kmalloc_noprof+0xb4/0x4b0 [ 730.090873] ? __kmalloc_cache_noprof+0x369/0x470 [ 730.090890] ? set_capacity_and_notify+0xce/0x240 [ 730.090912] kobject_get_path+0xc9/0x200 [ 730.090928] ? kasan_save_track+0x14/0x30 [ 730.090944] kobject_uevent_env+0x252/0xf90 [ 730.090966] ? lock_is_held_type+0x9e/0x120 [ 730.090981] loop_configure+0xf3d/0x16e0 [ 730.091013] ? __pfx_loop_configure+0x10/0x10 [ 730.091039] ? lock_acquire+0x15e/0x2f0 [ 730.091055] ? avc_has_extended_perms+0x107/0xf20 [ 730.091075] ? find_held_lock+0x2b/0x80 [ 730.091095] ? avc_has_extended_perms+0x23b/0xf20 [ 730.091115] lo_ioctl+0x76e/0x2070 [ 730.091132] ? avc_has_extended_perms+0x378/0xf20 [ 730.091151] ? perf_tp_event+0x807/0xe70 [ 730.091170] ? __pfx_lo_ioctl+0x10/0x10 [ 730.091187] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 730.091206] ? __pfx_perf_tp_event+0x10/0x10 [ 730.091225] ? perf_trace_preemptirq_template+0x259/0x430 [ 730.091250] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 730.091270] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 730.091290] ? lock_release+0xc8/0x290 [ 730.091305] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 730.091337] ? debug_mutex_unlock+0x60/0x270 [ 730.091354] ? __fget_files+0x34/0x3b0 [ 730.091375] ? find_held_lock+0x2b/0x80 [ 730.091392] ? __fget_files+0x203/0x3b0 [ 730.091412] ? __pfx_lo_ioctl+0x10/0x10 [ 730.091430] blkdev_ioctl+0x27c/0x6c0 [ 730.091444] ? __pfx_blkdev_ioctl+0x10/0x10 [ 730.091460] ? selinux_file_ioctl+0xb9/0x280 [ 730.091475] ? __pfx_blkdev_ioctl+0x10/0x10 [ 730.091491] __x64_sys_ioctl+0x18f/0x210 [ 730.091511] do_syscall_64+0xbf/0x360 [ 730.091526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.091540] RIP: 0033:0x7f21745c38d7 [ 730.091550] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 730.091562] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.091575] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 730.091583] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 730.091591] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 730.091598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 730.091606] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 730.091622] [ 730.128850] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) (fail_nth: 45) [ 730.207107] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 730.209880] EXT4-fs (loop6): get root inode failed [ 730.210314] EXT4-fs (loop6): mount failed 00:49:09 executing program 4: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, 0x0, 0xeffffffe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') syz_io_uring_submit(0x0, r0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x4, {0x0, r1}, 0x8000, 0x3, 0x1}, 0x8) set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) 00:49:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 43) 00:49:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 730.357464] loop0: detected capacity change from 0 to 8 [ 730.358404] loop6: detected capacity change from 0 to 8336 [ 730.369945] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 730.381552] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 730.387073] EXT4-fs (loop6): get root inode failed [ 730.387770] EXT4-fs (loop6): mount failed 00:49:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 44) 00:49:09 executing program 4: sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e0, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc5, 0x2a, [@random={0x3f, 0x63, "e532da179209a13c7f33f23b35a937d66b7bbd13f827cbf09658180949e33671e5fb05a585be1ea8b89aec689434069178a645e05e5440955413fd7da8411bfd87e3646d88670cd42c67e68cd3961e0f405ef657a83bebaf5e4781082658aabc8b53aa"}, @random={0x3, 0x32, "96ee072e76f8e6405e01a25355b2f853f3717e737e66282aaca1a0f1d37e1525fa2d543107555492d6d06c0a92b05b7e6e0b"}, @mesh_chsw={0x76, 0x6, {0xce, 0x2, 0x4, 0x1}}, @mic={0x8c, 0x10, {0xb6f, "a0719f50d6a6", @short="5a8f4e34e65b92e9"}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x2c}}]}, @NL80211_ATTR_IE={0xee, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xaf, 0x7e}}, @ssid={0x0, 0x1a, @random="7a99adc0ae65fdb93ab312669340860c90f6e9cb94fd22948ba3"}, @tim={0x5, 0xc3, {0xc, 0xbb, 0x0, "65a0562fe56e473bd3e7d3037f27a86e1f3dedf16bd659a15d6530c55d1353e5cfe354748b540a86bbdd9dd2715d5bf860b464f6169fceabf6a8653ccf8e8149bc00fdd9ff28b1f9a437a19f61314e5f9a41747865165f47f87aa58922eabadd131adcd90da6f90763bec610454f136d6df4bc7f863044a57f48f29b868b18f4e7e120d4d10ee09fafe2af37f488dff8c40c3b0de1c1fe6a693eea83db8e9dc5670a453be310c1b4a58772f731580331a62e9b3627f260c673a55201940a107b"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}]}, 0x1e0}}, 0x8000) set_tid_address(0x0) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x4c, 0x0, 0x200, 0x60bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x5e}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x30}, {0x5}, {0xf}, {0x36}, {0xb}, {0x4}, {0x4}, {0xc, 0x1}, {0x55}, {0xb}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40804}, 0x4044840) set_tid_address(&(0x7f00000002c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r2, 0xb810bc7f369e155, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r5, 0xb810bc7f369e155, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)={0x9c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sound_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tun_tap_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000000) [ 730.466841] loop0: detected capacity change from 0 to 8 [ 730.475397] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 730.482524] loop0: detected capacity change from 0 to 8 [ 730.486590] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 730.501127] loop6: detected capacity change from 0 to 8336 [ 730.523470] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 730.532693] EXT4-fs (loop6): get root inode failed [ 730.533223] EXT4-fs (loop6): mount failed 00:49:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 730.595020] loop0: detected capacity change from 0 to 8 [ 730.599470] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 730.609751] loop0: detected capacity change from 0 to 8 [ 730.615478] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 45) 00:49:21 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:49:21 executing program 1: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x3, 0x6, 0x21d9, 0x6d, 0x3, 0xfff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000140), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000001c0)=""/143, 0x8f}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/50, 0x32}], 0x5, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}, 0x10002) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000015c0)={r1, r4, 0xffffffffffffffff}, 0xc) 00:49:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x91) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000180)=""/16, 0x2}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1) 00:49:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x10, 0x1008, 0x0, 0x0) [ 741.907473] loop0: detected capacity change from 0 to 8 [ 741.919103] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 741.935816] loop0: detected capacity change from 0 to 8 [ 741.948821] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 741.949498] loop6: detected capacity change from 0 to 8336 [ 741.957927] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 741.963118] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 741.975973] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 741.978414] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 741.990623] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 741.992860] EXT4-fs (loop6): get root inode failed [ 741.993700] EXT4-fs (loop6): mount failed 00:49:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 46) 00:49:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x288000, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0xe) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40, 0x1}, 0xe) [ 742.076083] loop0: detected capacity change from 0 to 8 [ 742.076821] loop6: detected capacity change from 0 to 8336 [ 742.082038] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 742.088612] loop0: detected capacity change from 0 to 8 [ 742.091493] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 742.096536] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:21 executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000000900)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/254, 0xfe}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/46, 0x2e}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/81, 0x51}], 0x7, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}], 0x2, 0x12101, &(0x7f00000009c0)={r2, r3+10000000}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000002370ab45d4f48fa2145f838fc9ad201bb2f122fa14e6f85beeb3cfbae5", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf25120000001c0007800c00040000040000000000000c0004001f3f0000000000002c000280080001000400000014000380080001000600000008000100f9ffffff040004000800010081000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) set_tid_address(0x0) [ 742.100339] EXT4-fs (loop6): get root inode failed [ 742.100915] EXT4-fs (loop6): mount failed 00:49:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 47) [ 742.223769] loop0: detected capacity change from 0 to 8 [ 742.237078] loop6: detected capacity change from 0 to 8336 00:49:21 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) [ 742.275976] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 742.302932] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 742.310524] EXT4-fs (loop6): get root inode failed [ 742.311020] EXT4-fs (loop6): mount failed 00:49:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 742.397252] loop0: detected capacity change from 0 to 8 [ 742.421282] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 742.431000] loop0: detected capacity change from 0 to 8 [ 742.438662] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 742.781943] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 742.789219] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 742.797433] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:49:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 48) 00:49:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x91) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000180)=""/16, 0x2}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1) 00:49:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x11, 0x1008, 0x0, 0x0) 00:49:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:32 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @any, 0x1, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/208, 0xd0}], 0x2, 0x2, 0x6) 00:49:32 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 752.726214] loop6: detected capacity change from 0 to 8336 [ 752.735879] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 752.744002] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 752.749173] EXT4-fs (loop6): get root inode failed [ 752.750215] EXT4-fs (loop6): mount failed [ 752.781565] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 752.787976] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 752.792048] loop0: detected capacity change from 0 to 8 [ 752.807621] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 752.824312] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:32 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:49:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 49) [ 752.849000] loop0: detected capacity change from 0 to 8 [ 752.859852] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) set_tid_address(0x0) 00:49:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 752.971049] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 752.978478] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 752.990936] loop6: detected capacity change from 0 to 8336 [ 752.994267] FAULT_INJECTION: forcing a failure. [ 752.994267] name failslab, interval 1, probability 0, space 0, times 0 [ 752.996330] CPU: 1 UID: 0 PID: 6790 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 752.996364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 752.996378] Call Trace: [ 752.996386] [ 752.996396] dump_stack_lvl+0xfa/0x120 [ 752.996429] should_fail_ex+0x4d7/0x5e0 [ 752.996475] ? skb_clone+0x191/0x400 [ 752.996510] should_failslab+0xc2/0x120 [ 752.996537] kmem_cache_alloc_noprof+0x5f/0x470 [ 752.996584] skb_clone+0x191/0x400 [ 752.996622] netlink_broadcast_filtered+0xa0e/0xde0 [ 752.996673] netlink_broadcast+0x39/0x50 [ 752.996709] kobject_uevent_env+0xa58/0xf90 [ 752.996749] ? lock_is_held_type+0x9e/0x120 [ 752.996778] loop_configure+0xf3d/0x16e0 [ 752.996840] ? __pfx_loop_configure+0x10/0x10 [ 752.996893] ? lock_acquire+0x15e/0x2f0 [ 752.996920] ? avc_has_extended_perms+0x107/0xf20 [ 752.996956] ? find_held_lock+0x2b/0x80 [ 752.996991] ? avc_has_extended_perms+0x23b/0xf20 [ 752.997031] lo_ioctl+0x76e/0x2070 [ 752.997064] ? avc_has_extended_perms+0x378/0xf20 [ 752.997105] ? __pfx_lo_ioctl+0x10/0x10 [ 752.997139] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 752.997187] ? __lock_acquire+0xc65/0x1b70 [ 752.997222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.997284] ? debug_mutex_unlock+0x60/0x270 [ 752.997320] ? __fget_files+0x34/0x3b0 [ 752.997358] ? find_held_lock+0x2b/0x80 [ 752.997393] ? __fget_files+0x203/0x3b0 [ 752.997432] ? __pfx_lo_ioctl+0x10/0x10 [ 752.997482] blkdev_ioctl+0x27c/0x6c0 [ 752.997513] ? __pfx_blkdev_ioctl+0x10/0x10 [ 752.997544] ? selinux_file_ioctl+0xb9/0x280 [ 752.997572] ? __pfx_blkdev_ioctl+0x10/0x10 [ 752.997605] __x64_sys_ioctl+0x18f/0x210 [ 752.997641] do_syscall_64+0xbf/0x360 [ 752.997671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.997696] RIP: 0033:0x7f21745c38d7 [ 752.997715] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.997739] RSP: 002b:00007f2171b38f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.997763] RAX: ffffffffffffffda RBX: 00007f217460d970 RCX: 00007f21745c38d7 [ 752.997780] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.997795] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.997810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.997825] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 752.997857] 00:49:32 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) [ 753.082033] loop0: detected capacity change from 0 to 8 [ 753.086663] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 753.088824] EXT4-fs (loop6): get root inode failed [ 753.089255] EXT4-fs (loop6): mount failed [ 753.104786] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 753.116143] loop0: detected capacity change from 0 to 8 [ 753.123525] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r1 = syz_open_dev$loop(&(0x7f0000001140), 0x0, 0x20400) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000000c0)={{r1}, 0x0, 0x0, @unused=[0xa4c, 0xfffe, 0x9, 0x32dbf68a], @subvolid=0x8}) set_tid_address(0x0) r2 = mq_open(&(0x7f00000011c0)='+^}+.*,\x00', 0x1, 0x52, &(0x7f0000001200)={0x100000000, 0x8, 0x233, 0x8}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = creat(&(0x7f0000001180)='./file1\x00', 0xab) mknodat(r3, &(0x7f0000001100)='./file1\x00', 0x200, 0x7fff) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) 00:49:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) (fail_nth: 50) [ 753.313134] loop0: detected capacity change from 0 to 8 00:49:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 753.327257] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 753.343380] loop0: detected capacity change from 0 to 8 [ 753.358256] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 753.358359] loop6: detected capacity change from 0 to 8336 [ 753.368103] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 753.369653] EXT4-fs (loop6): get root inode failed [ 753.370110] EXT4-fs (loop6): mount failed [ 753.602829] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:49:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:49:50 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:50 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x12, 0x1008, 0x0, 0x0) 00:49:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) set_tid_address(0x0) 00:49:50 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/118, &(0x7f00000000c0)=0x76) 00:49:50 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) 00:49:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 770.757400] loop0: detected capacity change from 0 to 8 [ 770.760615] loop6: detected capacity change from 0 to 8336 [ 770.766771] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 770.777276] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 770.791546] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 770.799046] loop0: detected capacity change from 0 to 8 [ 770.804432] EXT4-fs (loop6): get root inode failed [ 770.805345] EXT4-fs (loop6): mount failed [ 770.822530] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 770.845319] loop6: detected capacity change from 0 to 8336 [ 770.859132] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:49:50 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0400006530007ce6f98e0a74cf6e74971b0d7f95a0deef27fb8cf8d0bc7ec59ba7144e53bc9f7df2bd8ef506ebf9d0881dcbf8a01fc66418edb57eb8916f8fc4b5fe02fb0c7cb910ddc16876e97e85bb861d1b307115fc5ea5b391949de64142ba9054b91beb069d996eb2aa92a8362e46397cfe65b6f2bea07e01f7c464f63ecb10d18586437a62ceaae98ef645c3fe8c4007287bd6aeab2e287b59874273572549c4abf3f98b38586f0db6dfdfb858a9c98f90688c9954244bac3e5f72cf995108fea015ebb5a807f2726588bad7bf9cc322e864d47d9eb3f543917c49b7000037eaecb01022c347c289bd9afd63301779a4c2583b2e8cecaeb8b6a8196597a4c8f37fc53e9ca560771848181a7ad330320d59cf60735bae6148b8a6c4feb37393ae6bc04f6bffe72bea543d1b3bee149c8de3a71ea4dcf59711c701ef98b7a8e944933444511efbede859e2f510fd7eb266b6b031a2a570b4859ad995754e5f3237"]) r1 = syz_open_dev$loop(&(0x7f0000001140), 0x0, 0x20400) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000000c0)={{r1}, 0x0, 0x0, @unused=[0xa4c, 0xfffe, 0x9, 0x32dbf68a], @subvolid=0x8}) set_tid_address(0x0) r2 = mq_open(&(0x7f00000011c0)='+^}+.*,\x00', 0x1, 0x52, &(0x7f0000001200)={0x100000000, 0x8, 0x233, 0x8}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = creat(&(0x7f0000001180)='./file1\x00', 0xab) mknodat(r3, &(0x7f0000001100)='./file1\x00', 0x200, 0x7fff) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) 00:49:50 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 770.872042] EXT4-fs (loop6): get root inode failed [ 770.873259] EXT4-fs (loop6): mount failed 00:49:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:49:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 771.156095] loop0: detected capacity change from 0 to 8 [ 771.160588] loop6: detected capacity change from 0 to 8336 [ 771.167017] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:49:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="29000038bb511c620010a3a521892c79d23bdd22ba84f4ca1b247fd3351d6c9dfe25e5da0c024f331f2bc546190768881796a3a06d05da62698cfa1abe2a3a1abf37e2d76ac6dfa84e37dc9db610edbb250e7748679e6b8e5d3d013b18cfe139a42b86e6b56424e057219f887d8b05d3735867ba2e4fe33c858e0c8efffe7937a56ea8df83958b912de4ae44706068d451c309ff5796a896c0a3fb8eda19794d9269fa75d4ac8a66a63b833d2736f5ca1aa28c1594e551fdfa13a94d660297c17a4d3b96f7a6aab5a36b79c8b5c4a1f431cfbcaf0148fad22c643f6f929cc805636280", @ANYRES16=r1, @ANYBLOB="01030000000000000000320000000c009900880000001c000000"], 0x20}}, 0x0) fchmod(r0, 0x51) set_tid_address(0x0) [ 771.188769] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 771.196159] loop0: detected capacity change from 0 to 8 [ 771.201066] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 771.202411] EXT4-fs (loop6): get root inode failed [ 771.203155] EXT4-fs (loop6): mount failed 00:49:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12cf, 0x5, &(0x7f0000000400)=[{&(0x7f0000000080)="1c9c28ad9855c59be438d23f237eb33c5af74b3f3678a0c10d15fbafd3a55c1893fd026e7334702272c5d0892aef29339f7dcde21b4136e47c67444616cf1fe7d8a4bdb53306ffc5c1d7832067dbc563362e86b65b8d5eebddac460effd342d6279a5c29ec6024609c662b1e7027cc1d0301d3b9e2cbacd2daa497942a16a054d5b137fec29fab95ba2652f64eaf277b74f4016096a4a20505af802191524266340d810fc3f28ee4dc464c0c5d", 0xad, 0x100}, {&(0x7f0000000140)="9f3044f0aa65d9ce559734021cae5da549b9777d16057b402f3cf61356f23b5d9beb611918da9943eb120285df3f16aaa067625a13b29ee1666f09633f6cddf39196c2f9b6743347c9272f1e035c890bcd4d6b0eeccfd0513af950bcabfb41fca38ea6ec00946203cffdf49f7a3c21af7a709abb339be5c9a364335056862666d1edc50990817dd309994ab2aadf46e89f4a2110b86d80a4d9a309b637ce7cd5861b2ff1b95eebec625d67f3aa7def8d3e954e14ebec1d8d85cf0526e0075336f6e1be6ecd1dd5e13c9dc1e79c7e0d2fbe1d4ecea36d379d04c8343e5c86c680c9b1404616d069843df159d7eba9375d76732747b02f12795a", 0xf9, 0x1f}, {&(0x7f0000000240)="a267fec09c5c6da35abcdca02d929921fa2fefe22a23f80381", 0x19, 0x7}, {&(0x7f0000000280)="37a499ba656ca7807b52cd93d7b68369dc586200358b485bbe0f0cd74dc96f524f778fb24e7e963d47384be39b7ef718bb81dd44b0aa9a7c7cc7eb340722f14f76468d071c81d185d6a976549d3d93d93c7dcd83bffceb902226eea20004b761c4f8131b44bdaa53e83f6041", 0x6c, 0x8}, {&(0x7f0000000300)="8cd3da9f988c6ff153e1195e75f300245ac25b51f6403264d02442716a540230dcdd9e29bc55b333e0f68f4e4cab49c3be9179a519cc0795533bc45869a78ef8f70dff15db1b8ecab8c043133a859315ba3d5784dc6df2f4908cc5458b89c3677eac2ee8731fdf8d47369549531f6e56b003554f814fc0431616651c8f80ce866fe8697a71a52d75be6cda6573c692c41af8ca77ceb5b8659045f22d8c93899ae7698ce81b757cb2643879bc89195d79f45378f27d693f1fd0c9dbad4b999b83ed13", 0xc2, 0x3}], 0x2000000, &(0x7f0000000480)={[{@uni_xlate}, {@utf8no}, {@shortname_mixed}], [{@subj_type={'subj_type', 0x3d, '$([]\xc6'}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_user}, {@fsname={'fsname', 0x3d, '-'}}, {@euid_lt}]}) set_tid_address(0x0) set_tid_address(&(0x7f0000000540)) set_tid_address(&(0x7f0000000500)) [ 771.248579] loop6: detected capacity change from 0 to 8336 [ 771.271210] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 771.280091] EXT4-fs (loop6): get root inode failed [ 771.280665] EXT4-fs (loop6): mount failed [ 771.303841] loop1: detected capacity change from 0 to 9 [ 771.312530] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 00:49:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:49:59 executing program 4: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+10000}, {0x0, 0x2710}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xb3a9ecea5ccce956}, {0xffffffffffffffff, 0x21}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x3]}, 0x8) 00:49:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x13, 0x1008, 0x0, 0x0) 00:49:59 executing program 2: r0 = timerfd_create(0x8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x8001, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:49:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:49:59 executing program 7: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:49:59 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x3, 0x99, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x7f, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xf341, 0xacf2, 0x3}, {0x6, 0x24, 0x1a, 0x8db5, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x46, 0x9, 0x9, 0x7, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x1f, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x3, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x3652f559fca979ac, 0x1, 0x8, 0x7f}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x0, 0x5, 0x6, 0x20, 0x1}, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9c, 0x6, 0x3ff}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x812}}, {0xef, &(0x7f0000000240)=@string={0xef, 0x3, "2cb52a801e937c77ed37fe0e54aa24c170d60e2ad8e05acf4896616f4d99d08f9aafb9f37f7deb7388452582bdb69b22ee2af6bffc485c1de747edd6247d6a313b6a3e8ca4b7f4ca2061dc352d872227365f33721f8d3673f220cf87be79e53b5e21bd62ab78cc5f3079a5fe7fe30c3cbc02e31958340448418d97084a8bf2be9ee3c78c31f6f790c8c2c2b7f47abf50e873e868aef001458dcd113a0ec76069501a762993bc3df96cc2e1bd9c80e3222bbfd54ca6ae3375839385cdfae9aa03a56921b04a344fb43db20638f3e2f2129766e7a34c5de527a9b92ac167d20317f3b2823946d190e1d865bf4dcd"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x820}}, {0x5, &(0x7f0000000400)=@string={0x5, 0x3, "486c9b"}}]}) syz_usb_ep_read(r0, 0x4, 0x73, &(0x7f00000004c0)=""/115) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:49:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 780.238388] loop1: detected capacity change from 0 to 8336 [ 780.265624] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 780.270289] EXT4-fs (loop1): get root inode failed [ 780.270913] EXT4-fs (loop1): mount failed [ 780.279038] loop0: detected capacity change from 0 to 8 [ 780.285014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.291366] loop6: detected capacity change from 0 to 8336 [ 780.294270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.298073] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 780.311294] loop0: detected capacity change from 0 to 8 [ 780.313259] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 780.318129] EXT4-fs (loop6): get root inode failed [ 780.318690] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 780.319109] EXT4-fs (loop6): mount failed 00:49:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x12, 0x1008, 0x0, 0x0) [ 780.365090] loop6: detected capacity change from 0 to 8336 00:49:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 780.393674] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 780.403205] EXT4-fs (loop6): get root inode failed [ 780.404116] EXT4-fs (loop6): mount failed [ 780.499358] loop0: detected capacity change from 0 to 8 00:49:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 780.520160] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 780.540405] loop0: detected capacity change from 0 to 8 [ 780.561156] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 780.617041] loop6: detected capacity change from 0 to 8336 00:49:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 780.640316] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 780.655174] EXT4-fs (loop6): get root inode failed [ 780.655860] EXT4-fs (loop6): mount failed [ 780.670994] loop6: detected capacity change from 0 to 8336 [ 780.685050] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 780.692252] EXT4-fs (loop6): get root inode failed [ 780.693116] EXT4-fs (loop6): mount failed [ 780.701219] loop0: detected capacity change from 0 to 8 [ 780.732063] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:50:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 780.762332] loop0: detected capacity change from 0 to 8 [ 780.775802] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 780.832966] loop6: detected capacity change from 0 to 8336 [ 780.846746] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 780.852723] EXT4-fs (loop6): get root inode failed [ 780.853106] EXT4-fs (loop6): mount failed [ 780.866284] loop6: detected capacity change from 0 to 8336 00:50:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 780.878668] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 780.883750] EXT4-fs (loop6): get root inode failed [ 780.884185] EXT4-fs (loop6): mount failed [ 780.934022] loop0: detected capacity change from 0 to 8 [ 780.943082] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 780.951883] loop0: detected capacity change from 0 to 8 [ 780.962466] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:50:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 781.075022] loop6: detected capacity change from 0 to 8336 [ 781.097089] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 781.099875] loop0: detected capacity change from 0 to 8 [ 781.111576] EXT4-fs (loop6): get root inode failed [ 781.112010] EXT4-fs (loop6): mount failed [ 781.118792] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 781.133983] loop6: detected capacity change from 0 to 8336 [ 781.147395] loop0: detected capacity change from 0 to 8 [ 781.148243] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 781.148683] EXT4-fs (loop6): get root inode failed [ 781.150371] EXT4-fs (loop6): mount failed 00:50:00 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) [ 781.184103] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:50:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:00 executing program 7: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:50:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:00 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x14, 0x1008, 0x0, 0x0) [ 781.290602] loop6: detected capacity change from 0 to 8336 [ 781.295705] loop2: detected capacity change from 0 to 8 [ 781.309398] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 781.311535] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 781.318065] EXT4-fs (loop6): get root inode failed [ 781.318806] EXT4-fs (loop6): mount failed [ 781.335268] loop6: detected capacity change from 0 to 8336 [ 781.352094] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 781.370817] EXT4-fs (loop6): get root inode failed [ 781.371546] EXT4-fs (loop6): mount failed [ 781.497796] loop1: detected capacity change from 0 to 8336 [ 781.517474] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 781.521799] EXT4-fs (loop1): get root inode failed [ 781.522213] EXT4-fs (loop1): mount failed 00:50:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 792.971727] loop1: detected capacity change from 0 to 8336 00:50:12 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:50:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xcb, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:12 executing program 7: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:50:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x15, 0x1008, 0x0, 0x0) 00:50:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103000000130000000032000000a1fd5201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="190cac0bc9455cb0f0abd954f9beb3c0d1332616739dc7ad0966b091d47dfe0064ee8deb37466a2d956e87fe07f46aae0806615b5b1c27764e0b0d7bc53a36d6ccbe14035b3c27ebbc87fb4340b63be5e695e443d695f0824b5dd9db41c2bfd352051bfcee5b16b7b1e6b25b2c7f922310cbc794e0a4b19829e271087395eb182c3cf2ea8b4a455c4048f980caa300f8a19f2efd6aa93174e70203b50ac63ee09643ecebb8043e90ca0523c8f87cc2ac7c7f6317f1016e1d9fede4307edbb5615e3b29a1b786", 0xc6}], 0x1, &(0x7f0000000200)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xe1, 0x0, 0x5, [0xe2, 0x80000000, 0xbbd9]}, @generic={0x7, 0x6, "706d99a9"}, @timestamp={0x44, 0x18, 0x7f, 0x0, 0x8, [0x7, 0x8c7, 0x8001, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x1c, 0x6e, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@broadcast, 0x80000001}, {@private=0x6, 0x7}]}, @lsrr={0x83, 0x23, 0xdf, [@local, @multicast1, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @broadcast, @empty]}, @timestamp={0x44, 0x14, 0xea, 0x0, 0x3, [0x3, 0xffffffff, 0x3, 0x3]}, @lsrr={0x83, 0x0, 0x7d, [@rand_addr=0x64010101]}, @generic={0x86, 0xf, "d5e6490adc131c44160d75edfe"}]}}}], 0xa8}}], 0x1, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x400442) shutdown(r3, 0x1) [ 792.979072] loop2: detected capacity change from 0 to 8336 [ 792.982398] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 792.985976] EXT4-fs (loop1): get root inode failed [ 792.986356] EXT4-fs (loop1): mount failed [ 792.996393] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 792.999373] EXT4-fs (loop2): get root inode failed [ 792.999889] EXT4-fs (loop2): mount failed 00:50:12 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f0000000040)={0x70, 0x10000b, 0x20000, {r0}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x301002, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) set_tid_address(0x0) [ 793.047080] loop6: detected capacity change from 0 to 8336 [ 793.063434] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 793.069597] EXT4-fs (loop6): get root inode failed [ 793.070405] EXT4-fs (loop6): mount failed [ 793.077371] loop0: detected capacity change from 0 to 8 [ 793.081159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 793.088429] loop6: detected capacity change from 0 to 8336 00:50:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 793.106493] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 793.128166] loop0: detected capacity change from 0 to 8 [ 793.132699] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 793.159844] EXT4-fs (loop6): get root inode failed [ 793.161574] EXT4-fs (loop6): mount failed [ 793.162616] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 793.190000] loop2: detected capacity change from 0 to 8336 [ 793.257030] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 793.274961] EXT4-fs (loop2): get root inode failed [ 793.275929] EXT4-fs (loop2): mount failed [ 793.306583] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:50:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 793.402295] loop6: detected capacity change from 0 to 8336 [ 793.411479] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 793.413792] EXT4-fs (loop6): get root inode failed [ 793.414201] EXT4-fs (loop6): mount failed [ 793.414536] loop0: detected capacity change from 0 to 8 [ 793.420241] loop6: detected capacity change from 0 to 8336 [ 793.426662] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 793.428852] EXT4-fs (loop6): get root inode failed [ 793.429226] EXT4-fs (loop6): mount failed [ 793.439905] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 793.474334] loop0: detected capacity change from 0 to 8 [ 793.483995] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:50:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) connect$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x1, @none, 0x6, 0x1}, 0xe) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000380)) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f00000007c0)=""/260, 0x104}], 0xa) 00:50:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f00000001c0)=0x30) mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, &(0x7f0000000040)={0x70, 0x10000b, 0x20000, {r0}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x301002, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) set_tid_address(0x0) 00:50:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x17, 0x1008, 0x0, 0x0) 00:50:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:21 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xa, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) set_tid_address(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c00060001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) 00:50:21 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:50:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:50:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) [ 802.676664] loop0: detected capacity change from 0 to 8 [ 802.697291] loop6: detected capacity change from 0 to 8336 [ 802.703663] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 802.725262] loop0: detected capacity change from 0 to 8 00:50:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:50:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000040)=0x10000, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 802.747941] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 802.780751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.788851] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 802.791272] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 802.800569] EXT4-fs (loop6): get root inode failed [ 802.801350] EXT4-fs (loop6): mount failed 00:50:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) [ 802.862363] loop6: detected capacity change from 0 to 8336 00:50:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) connect$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x1, @none, 0x6, 0x1}, 0xe) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000380)) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f00000007c0)=""/260, 0x104}], 0xa) [ 802.894425] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 802.898902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.902935] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 802.906754] EXT4-fs (loop6): get root inode failed [ 802.907144] EXT4-fs (loop6): mount failed 00:50:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:50:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 802.974164] loop0: detected capacity change from 0 to 8 [ 802.987492] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:50:22 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000140)) [ 803.003418] loop0: detected capacity change from 0 to 8 [ 803.012493] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 803.055629] loop2: detected capacity change from 0 to 8336 [ 803.075733] loop6: detected capacity change from 0 to 8336 [ 803.109515] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 803.112535] EXT4-fs (loop6): get root inode failed [ 803.112916] EXT4-fs (loop6): mount failed [ 803.116187] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 803.121297] EXT4-fs (loop2): get root inode failed [ 803.121797] EXT4-fs (loop2): mount failed [ 803.139312] loop6: detected capacity change from 0 to 8336 [ 803.159765] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 803.164138] EXT4-fs (loop6): get root inode failed [ 803.164628] EXT4-fs (loop6): mount failed [ 803.722812] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:50:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="24ce07d97d3c0d1954cedd0012afdf6fcd7fa039b5235aa564a5daa56948cbad02f8a55a009c12e93f13880eedcb7a2634283f9ff4e4f893d1c278fdb0429f19af0bdab0b74050f1f08d0ffe8f51fd52b0b5dc2c3d05e649908030d9dd4a21a00c229db338fd554a1f8c6ce791a6019f3eff3ddf30ebf7da6cb60a177c731d4741dbeca7f6a1603065b8944b326f0a52f9a8410e67b6f000784490465f902cf1f343cd5ababf4cdd58bff6"], 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={0x0, 0x1}) set_tid_address(0x0) 00:50:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) 00:50:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x4f7, 0x1008, 0x0, 0x0) 00:50:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:50:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) connect$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0x1, @none, 0x6, 0x1}, 0xe) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000380)) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f00000007c0)=""/260, 0x104}], 0xa) [ 815.469923] loop6: detected capacity change from 0 to 8336 [ 815.521861] loop0: detected capacity change from 0 to 8 [ 815.533147] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 815.539152] loop2: detected capacity change from 0 to 8336 [ 815.540697] EXT4-fs (loop6): get root inode failed [ 815.541598] EXT4-fs (loop6): mount failed [ 815.548188] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 815.558493] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 815.588983] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 815.593659] loop0: detected capacity change from 0 to 8 00:50:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 815.609503] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 815.615294] EXT4-fs (loop2): get root inode failed [ 815.616116] EXT4-fs (loop2): mount failed 00:50:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xfffffffe, 0x1008, 0x0, 0x0) 00:50:35 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) [ 815.669814] loop1: detected capacity change from 0 to 8336 [ 815.704396] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated 00:50:35 executing program 4: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x21, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'none\x00', 0x20, 0x4, 0x32}, {@private=0xa010102, 0x4e24, 0x4, 0x1000, 0x80000000, 0x3}}, 0x44) set_tid_address(0x0) 00:50:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 815.722409] EXT4-fs (loop1): get root inode failed [ 815.723244] EXT4-fs (loop1): mount failed 00:50:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:35 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1004, 0x0, 0x0) 00:50:35 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 815.884021] loop0: detected capacity change from 0 to 8 00:50:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 815.921543] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 816.049712] loop1: detected capacity change from 0 to 8336 [ 816.067333] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 816.074226] EXT4-fs (loop1): get root inode failed [ 816.075161] EXT4-fs (loop1): mount failed 00:50:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x23, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) 00:50:47 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1007, 0x0, 0x0) 00:50:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x0, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r2}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xfffffffa, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/153, 0x99}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/252, 0xfc}, {&(0x7f0000000580)=""/69, 0x45}], 0x9) 00:50:47 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:50:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:47 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:50:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 827.943504] loop6: detected capacity change from 0 to 8336 [ 827.948888] loop0: detected capacity change from 0 to 8 [ 827.953024] loop2: detected capacity change from 0 to 8336 [ 827.975188] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 827.987632] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 828.001628] EXT4-fs (loop6): get root inode failed [ 828.002789] EXT4-fs (loop6): mount failed [ 828.025692] loop0: detected capacity change from 0 to 8 00:50:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) 00:50:47 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000180)) set_tid_address(&(0x7f00000001c0)) set_tid_address(&(0x7f0000000100)) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000140)) [ 828.031827] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 828.035693] loop6: detected capacity change from 0 to 8336 [ 828.038101] EXT4-fs (loop2): get root inode failed [ 828.039039] EXT4-fs (loop2): mount failed [ 828.043042] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 828.072585] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 828.085939] EXT4-fs (loop6): get root inode failed [ 828.086854] EXT4-fs (loop6): mount failed 00:50:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:50:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:47 executing program 5: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/112, &(0x7f0000000100)=0x70) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 828.230641] loop0: detected capacity change from 0 to 8 00:50:47 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) [ 828.239492] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 828.248226] loop0: detected capacity change from 0 to 8 [ 828.256971] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:50:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x1008, 0x0, 0x0) [ 828.346264] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:50:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 828.399117] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 828.409877] loop6: detected capacity change from 0 to 8336 [ 828.431110] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 828.438198] EXT4-fs (loop6): get root inode failed [ 828.439342] EXT4-fs (loop6): mount failed [ 828.485162] loop0: detected capacity change from 0 to 8 [ 828.485404] loop6: detected capacity change from 0 to 8336 [ 828.490844] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 828.506027] loop0: detected capacity change from 0 to 8 [ 828.509521] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 828.542247] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 828.550389] EXT4-fs (loop6): get root inode failed [ 828.551423] EXT4-fs (loop6): mount failed 00:50:59 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:50:59 executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/112, &(0x7f0000000100)=0x70) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:50:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1009, 0x0, 0x0) 00:50:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:59 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xc}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:50:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:50:59 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:50:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x500, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FIONCLEX(r1, 0x5450) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:50:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 839.788577] loop0: detected capacity change from 0 to 8 [ 839.789838] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 839.801991] loop6: detected capacity change from 0 to 8336 [ 839.803812] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 839.819586] loop0: detected capacity change from 0 to 8 [ 839.820046] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 839.825596] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 839.858121] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 839.863806] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 839.872850] EXT4-fs (loop6): get root inode failed [ 839.873905] EXT4-fs (loop6): mount failed 00:50:59 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:50:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3fc}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 839.933891] loop6: detected capacity change from 0 to 8336 [ 839.959160] loop2: detected capacity change from 0 to 8 [ 839.981689] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 839.990029] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 00:50:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:50:59 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xc}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 840.001054] EXT4-fs (loop6): get root inode failed [ 840.002043] EXT4-fs (loop6): mount failed 00:50:59 executing program 4: remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x7, 0x80000) set_tid_address(0x0) [ 840.158309] loop0: detected capacity change from 0 to 8 [ 840.182039] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 840.196652] loop0: detected capacity change from 0 to 8 [ 840.200349] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:12 executing program 4: r0 = gettid() r1 = gettid() tgkill(r0, r1, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x9, &(0x7f0000000000)={0x3d, 0x40, 0x200}) set_tid_address(0x0) 00:51:12 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:51:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:12 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500), 0x0, 0x1008, 0x0, 0x0) 00:51:12 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3fc}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:51:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), 0x4) mknod(&(0x7f0000000140)='./file0\x00', 0x8000, 0x80) 00:51:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x100f, 0x0, 0x0) 00:51:12 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000000)) [ 853.114053] loop0: detected capacity change from 0 to 8 [ 853.119072] loop6: detected capacity change from 0 to 8336 [ 853.123649] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 853.129983] loop0: detected capacity change from 0 to 8 [ 853.138105] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 853.142662] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 853.167597] EXT4-fs (loop6): get root inode failed [ 853.168052] EXT4-fs (loop6): mount failed 00:51:12 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) [ 853.207338] loop6: detected capacity change from 0 to 8336 00:51:12 executing program 4: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x4800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) mknodat$null(r3, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) r4 = accept4$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x800) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1, r0, r4], 0x3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040005) set_tid_address(0x0) 00:51:12 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1009, 0x0, 0x0) [ 853.215716] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:51:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe23, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 853.219131] EXT4-fs (loop6): get root inode failed [ 853.219601] EXT4-fs (loop6): mount failed 00:51:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 853.407815] loop0: detected capacity change from 0 to 8 [ 853.412815] loop6: detected capacity change from 0 to 8336 [ 853.428904] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 853.443082] loop0: detected capacity change from 0 to 8 [ 853.456911] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 853.466936] EXT4-fs (loop6): get root inode failed [ 853.467735] EXT4-fs (loop6): mount failed [ 853.491858] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 853.508197] loop6: detected capacity change from 0 to 8336 [ 853.531656] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 853.540128] EXT4-fs (loop6): get root inode failed [ 853.540952] EXT4-fs (loop6): mount failed 00:51:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:22 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/76, 0x4c}], 0x8) r0 = semget$private(0x0, 0x0, 0x1c1) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000000)=""/125) set_tid_address(0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000000c0)=""/77) set_tid_address(&(0x7f0000000080)) 00:51:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), 0x4) mknod(&(0x7f0000000140)='./file0\x00', 0x8000, 0x80) 00:51:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:51:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:22 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3fc}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:51:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1010, 0x0, 0x0) 00:51:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) 00:51:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x1008, 0x0, 0x0) 00:51:22 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:51:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) [ 863.653384] loop6: detected capacity change from 0 to 8336 [ 863.656171] loop0: detected capacity change from 0 to 8 [ 863.660538] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 863.662179] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 863.666978] loop0: detected capacity change from 0 to 8 [ 863.668383] EXT4-fs (loop6): get root inode failed [ 863.668894] EXT4-fs (loop6): mount failed [ 863.673692] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:23 executing program 4: ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x1) set_tid_address(0x0) [ 863.722013] loop6: detected capacity change from 0 to 8336 00:51:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 863.747046] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 863.751058] EXT4-fs (loop6): get root inode failed [ 863.751613] EXT4-fs (loop6): mount failed [ 863.768005] loop0: detected capacity change from 0 to 16 [ 863.793616] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) [ 863.833077] loop0: detected capacity change from 0 to 16 00:51:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1e0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:23 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) set_tid_address(0x0) [ 863.847113] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 863.921058] loop6: detected capacity change from 0 to 8336 [ 863.936128] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 863.941860] EXT4-fs (loop6): get root inode failed [ 863.942290] EXT4-fs (loop6): mount failed [ 863.964190] loop6: detected capacity change from 0 to 8336 [ 863.975757] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 863.977733] EXT4-fs (loop6): get root inode failed [ 863.978162] EXT4-fs (loop6): mount failed 00:51:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1016, 0x0, 0x0) 00:51:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:33 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000080)) 00:51:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1, 0x1008, 0x0, 0x0) 00:51:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180), 0x4) mknod(&(0x7f0000000140)='./file0\x00', 0x8000, 0x80) 00:51:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1e0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001c40), &(0x7f0000001c80)=0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)=""/26, &(0x7f0000000580)=0x1a) r1 = accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001c00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000640)={0x157c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_FRAME={0x108c, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1f36}, @device_b, @random="0d5dffffdfc6", @broadcast, {0x2, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1000, "ed27071a5081525c8f853285dbb5b3a031ac69126594893db86a5358f1613a32c50c64aab2f0bff468747b8217e19a50835440f7cf188c3a5053602eb4bde6585a952c798fca5ec9ac4f2e81441e1ac67d078d60ff6dcc620b7a044ab0d6cdee6d8ead2fe6c60c1a2257c081f6db1ae3c36512e8529dfcdfe79e5f61defb3bbeaf6a76c1d9a3e9b62bbb37dd6015c51f2ef0d270459325dbcbe5054f327454d26fc13ee9f1091fb64a80eb348d9b8f40f95c28abea274e3f4594348bb568bc4df6c0bccc909125a1450fcca663e9a266ab320b2a75d02f2ba8a3dde6ffe8880687d7b5f3576ca105faefdbff6f578c5c610b8f1681d89db381b0c94c19fd8f358ae46085c977c9f997883c59505d778cbcd21d094b0521e34bd32f2616acd43095dc31aae70c5f8f51590e2fcdcdd8bb9a3b90214a4422dfd5ff36e3aafe5c205309588d7105d38011d4ad5ab5552b404972ff8664a1f8d3d20e2ab209b489dcd37292b478c06db36487b217840e374e8dea1fe8d335b73e2b9193e80faec6f8c7c291426a6d123c733c3887408c5ce8d067785a535a4510ac3a2da1c448362e3b2bb6b7250bc658c34af418d53845dfcc071529d108e6a507a6de0e3e95ff767d583cd7e713bf0eba9292aed17f4ed7a5e752e951d13120f85ee9a83abb6cd1834dd4ea3ac09b019736ff10610b1442f7fb4b14086fe0f9fadce910510c9ab5617b8fedb31da28a49366e9efa5c145224658e57d3afe85a10ed5a1581cf5e964312c8e00b9756c51f863e1996d59c557e3e51d37021b7a0c272a8a768de385e1950ccfcc9ec57193653a0a9bda29166aef3a904e21300561e35f25d8369601967508d4f07b6fd875804930568bd55ba893c84f74802fd261eb7dfa478be40fc5af195d1d9922920b2a613aac9a9ff4a4c07ba615af6a8638fd36bec4426e4b77efde10824b124f15fdbbc72c0de0fb336c98bb525f26ed2d2c794a5eea226b26e7936fbf0de2308fdc827d5ea5879c2dc90418e75e4f3a7ac19f371a90d3dfd421ca82c8d3a875ddb303c4abd00da9bc255be1a7e609c66e79d853184b5de840436e43d1e27262a79e51076abe14d941189277914025de81f7dc12407b7aa0b13e1311fe8f9512d69dd93beff24350ac84f3d3db03bc3ff69fc6c3d011fdb232c3432a9401126b28f9e7217fef53a9a69a9674dd567a0d8c900a0baa74cd81c4b0f79727cab0d98de5a8e42bbfbf61dec855ad855299a495b882baab13ceeeb97bae66b04a7914e7f2de7ac72517ada38ea13df15fc72ff1fe98abea825ca5353a5942b662e77ba373c2d204170672d297d8345a91d85f6008a8dc52649bbe226c87d047593a6d35985df19b426f1b39c8d620a30a71d4e9990b03684b15140856dd2acfc872066e4e4a034fd06f50e65bb77fc87d24b349708d10093f42f16c6790de42544b960b0dbb55b69c995ab8b195fb54504cd2ed058f44e0cab57cbed4d610e8dd410177ab12c92a3558f50f266cb82f01a19498c5385ce796cf6b9589d3978fe4c3d5b35680dce491661d21e78483b18200a208e79aec32499aa9b15f9961a6b77f2e90e379f9a17bc9ffc81d9664d2264061e8539700f121a913a2fb4656670abefbad099a1c17f4d926d29e98d578dbb4854c127d44f8aabaf932a04e7ddcc6c15a953c09347613a8c7847fca9763f678495ef2a9ab18aa28acf7db6cd8afca7a4defa938ff5837c03441eaac0c60673b9c48b392a57d8f4234ba5315e3b9d5ac8cff5ad3b79e084fb9e473fcf2ca2a4eaaf3a4fd1e55ae1bd740b46c39baeabc3ab0f537a91dfa2a765e0522e33d694178c284581a4fe907c0325c2144f94690ccbf6f82ddea7866d335b2edcd6f2817bbc316e23d6a0e153d16d9b9258bd7877f479c89d42ce5407b80f16b7b7d99bb224f8bb9a9283289a650803b566623f4a84069fef5aa4712dbb253d73aa1cc85f1167d05ca652c2c7b3ddb3f94f46739270fb19f76f3448245a896df216a234ab58b73cd7a3e05b71bfa15c92cd68b36dd7f2333fd344c545193c9152bc456c45deaaf47b3b943957d788c06f26224c0063f07d6d56ad80bf7654d78f22b497f10066263e413271679bff0516c46e98c138f172e59ca852cf5b36b91174370f5ae8b97f6ce49faad74f43dc6b365a1a5e22ec68701356c20fe7f18e8c6db933a1c3359d19a1db9a84ce2d5d56a4c67c677011075e35caef43199088cc45f7b1b8a65ba62eb290f8c6f3a12edad85e13e860a1d2a220dc96efb88ce4971a2a09ac0ffd4bc93136fe6bce311dfaddfc92fb6300ad16035b18d3257f68b9fb6b306d1bdcfaedfc05fc3c1a09874b017e2de0dac39363fffce112b919a836ea695fbc1ec380e771db2a027df8c2e5f062df8fe0c0c40b20b9422e9037ea97abed73d4fc50a1f7636cef615a13d2acbd3337565416498f93f73435d8b1ee0d928a296a869c608d7f703fbaef2bba3dffcea351c19907e8bd8fc5df91848c5ca380b6ec835fc5c1704758e6fa5f1d96dee14db9ada84cc7cd1e2c231e4ced53aa9ddfb04d4c871afbb6e0918c9dbe1988145e119c57c5939d1ddedfa378ed245d177f40f2a93b5e372aed3ae94befc469a0bf81ad5397200e368b960e32715b7d7d49c322af72b8fd029a0afbff4f8045c5edb4bc6378dda9d3de634b206050d072131e23a881511493d81cf9e793b84d6477fb63130ad9958273309849e65e3e82faea1248e66903e14fb27f54ab01f462e15436e761c3b6c6e3e21193af7abf8c1403889c5a568e4954a83793ec50faea38f7db9b40fb9bd49aab8697867dc9869348be2472f0e155bee7138cab3d54051d99659f94d0c1c89599445d1dd0df3379fb08fe71abc918008480ed175ac557ee8ddfb69e9906368c72238cb1d9db4b262c63a124885b067604abdfbb1376f69e42a1cbbaddc77b7657e6642de1ce20055e77c39506c60f847adea98eb192f5d9b732648fd80789fa4871a25d63fc79faa73a2dbf7bbfb80ddadaea9da7b697db6baf8b20850ebf1181fc8a8bbc397867b1ea5a7d19b84358ac90a97605164dd984302a07b71c04d7f1ad81b4d9b0ff1d1e570a42bd698e4966d1c623bebc526a5a8be5eb074699d0073f64ebc52bfd0ff15181b092fab431b1142f8e8d765187780436b25eb2a71d79279f4ce8bb2a5754d3d6893d019811b5b40ee387fcf6676d0c518772ecc2677800bcc295a7b3c23b5ce68705acebca129206430e33bfc35abccd0991640b4791bb6a85c248382ceade80ad0206f697e785f6386f0c13a27a42ad31b77f903c4eb599ed4d9e9f6124de0258394e06366583a0a22daf7171c7f87fab53958bee15ff6b06313148e25c17f726001f5f70f5a88e393b444933a85087f48d9aecdc2c26c73d4745954829b837a51b3cee519e1fbaa314d1978a0409afed1a369723fc257dcdd41c958ecc2d6c893ee2093ec13d9c451e797080cb72ee2a50f3f42557994221a13b06158d0afd9de809e0a3cc068fe4318b19b2cc54ca5e5966d8187dd1757f5fff8970ab208688c7f28ac31661bb589a4d3326bb68deaf1ec074c8aafe9b6c2209f6e07ab5f2bb8a533b75e7cdacbdb6f88808f822beaa3ecb8fcedca64280029a47c34bf6172397dbb8b47e24a8bb7fad802f07851e7c49d7a0a11e7e0c7302f69f5c609eb59d120c3e7750db61d74153bb38c7c372d21a01e3a07bc3a0718261296d7ac5692a746c960f6f0316c5cc881fd6c113b6912d36abd294815a6715876b75964a740f509410f0870ce2dab43ee3d7e9f472146c97b24637034c9c7134d7f602c79eb6b32abb1101a6b32f5fc9f64dc031bd4490c8dc52b0649a0041977318bbf8326aea0901cfff4236ead7391771c5182a83aca71b629f56924c1ea9f2ca9c26d2e3179dbe85a826487a96acd90da0d6273da4cbca7c7097159408996a517dc5aa9b18ad09db99712259297474516c5fa0f902242443b44bb971e9b4077a5a7ad350a4f2fd40e30b34cff75422bfc782a976d63ff832db1e719076aa05d503dd0e5c7ee2e956562c629370f95e0d68b226288ad474b7770c9df67ef515f695ad4a787e06ccf6328106afa44124842a47cefb8f80b327cada88d90d04b509b442c1b89723ce92578abaca742929e5b8437b2c8fe0d05fa520f93078539f07b5eb4dac6372cd18c9d8a5794ce3a69eee8172f14c3e18d1106cade561a8ab5365b857be63f038d1fb3e9ed5458acb1c6842edbf04d6e52ef6c67f7e2f6c81402afcbd45bf9bf8b9825afaa61db533f6d44c14ed1aaec0bbaa26f41c972c3aa53b0c5f661fae0a8bb90ddd340e791936c46ceffb8f0dd26174dc93c3952f89025b69fd8903e3c8f04a432feafd0266d4cf24d92cb67d0a7a12588b93cf80c4cde04d0a706861030f9396760cdeaad0c03de28c2d1cf2aa9354f198849d67dad8c25a6eb07bc64a5b8424ca54ef07fd0e19545888440dd5a89d7402084aec04707a426b66d64834314c739508868e34bc8fd3bf0a9038c5ec1163febcc1148589846de18d39cd58213a07f83a84338c66cb28be67ae471249db6a4927da7551206457ace75ee34d88d42631796e807e6d661b4985f50fc3cd5355a6b35db0006166dd523d5314c66d3ad9a034bd13446a359d112adc72e130bccff76bdbf5ab35bd7202c717d5c0c2615e5653e68d79fbd6f951f02efc01baf0530d1ecc8191d42ef6d6d90590ddd1a3aac66afcaca14f1a86eda9311e456747dc904d93efcd02faa107f0ca7503b3a15ad32140a88e65a4088bae3c33de73a7a92b7fa549fc4e85e77da5db26cd4405774bc1f912b84638635470d5a009ffa63e95b308f6815788eca4fd7b424eb8b4d244f95c6cacccf224b942a5cf7a104fbe030cb28b6438999e2f3dec798e1b1874f76eb61f21ed3baa956b62ad84d02ed7fe762f992a221416a13c6e7a3d44cae11aee69fffa7b6832523c67110b18625d003f7d238a33b027d4e0a9c3a21b570d201bdc8696b8a5e10ae11e24736c8e340a19875c1afa56824a749caa8aab086248434f81949ab730644f0630a6d02e0f43b7fc91e0deb32eb7b4e167cefcf98e2952a9979dfa171cb5dab0ebbfd3982329f6d77eedcb4bd8cbad442ad7c7c24183ae03c7e6a14f0e8f229e8b31add995776a4d7b4eca72046eab5c46be988184dd39f8bf7fc0bb74e30db2ad874120983be0f0831414b035ec57539d915443d62893b66eca517c61195b7a86bd60113f66137a213a8c19fc9521a3a8de0ea6c6cae2b7834ca11a26cc4c2f970de30db0f894d590f7e448a95b1132ac0809f4f82ced7e2da743766d9fe64a4323dbb9cde964da6e7074bed49828849c43578bf86586ceb2df1a076f3265186eafb47f56cae130620f1a26876e43ae7645ae73866e8e4d14c3e62314eaf8bbaff36515528a23b9a0a2f8f16417c23254b87bf76088b1377bff47fafcb4adc4a43421529f428603a9f804d8695908ef7658f9ad3957e7091be922695c02a81f255a9496b9ad5ea3affda41351d6a6f75e4d920b30e95df7c77625c3c3f49da75d01aeec8ea3a9bb8994adb6914ee89e907f2aece703378d91d22e9a9dde1d759905d831d324bc838371c5f28451e3d17d3a5ebbe460a6bc0987df95a5abd155821c85b8d245702bb3d2d18998cba772fddb125a5872f1a68ed630489c1a30b13cacaf478aac34e300842f2f1b6a1b2898fcd7adfdc746d1873a629877163ef7ffac92168f05181232ea79b837ac1fdea68ac82876"}, {@device_b, @device_b, 0x52, "504bc4bcf3d1f03346738671fd9e277736d8fcc4515973f9f3be462f40f323b31c0a2b44a07fd43d6c1bd8f7a006d4c2aeaf6ecfdd5d7066bf8c2f72ba1f0d99629ee5e24a782d63e3e62db753de4324163f"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x492, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @broadcast, {0x3, 0x7}, @device_b}, {0x7, 0x1, 0x3}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_a, @device_a, @random="68d5df16b07a", {0xe, 0x3}}, {0x6, 0x0, 0x2, 0x1, 0x81}}}, @ver_80211n={0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0x9b, "9c97d4ac8c30941b629328dbdfc46c241b1795f8143e7e6fb8b4dcb61ea134f6cc201a3ee2f953eb811cb388265425f9ef7211576d9c45a0f3070a395490ac8c4e470ee6b58003b69d82313b19eb3bd3308f1927dd2a001e60ee1fa02708283c7a3997ac9a7f9ce4f63a5d5c1524745b762c571051a5fde7f69f9dc67a0a0f6a48a2e2f881c61325d7810d3812aa289d4fbd953644dd8f46759930"}, {@device_a, @device_b, 0xa1, "f7661ac2062cad40c7c7c5582a1e9555430ed5242ce3aecdc5f447e93d2443536a07d31bc2c2aa2ca0e514744485e22c4762db44b4f277bacd4befeba9f90affee3c035bc6259e519d706e305d9d6b2cf5d991fee4f0eb12b228e7287f350e507f612aa884c418e6427c50ffeac8afb6d234986e82aa537766a29df6c052f6026423c7aaab87195691a1a32d95edcac0139d57e943b5a77a543dd1677845192516"}, {@device_b, @broadcast, 0xc9, "6a3a6d1729df07fda5e91f8642055516f6742769ba8d5d7fb96b0f109dabf21f7e31d4e10f9e8e70056699a33ac6c61e559eaa7d59d8433e609ca1bf591385c7a484410c0dde437a4ca963131a05d9d87ec3f45d2136e2b0b386ff3c7e3a37852bc37f1f1bc3841235aea66dc014001c0dfa81214b7122968b9429a072ed7242c18983405265f1a46e669bb7689b347744d2b00a0ad548c62bd29c4a8def38e74126ddd81fe8cfad4913180257a1665d31db8247e4fb76ca43ea82ef188da97a284e876dca6d8db429"}, {@device_b, @device_a, 0xf2, "192ef4e27b89f1cd5190333e9458b82da58696ba96df73b6f255eeebb0e83b311a038df9d6f2f075a8cd1a70a676ff27ef6263c0418b4c746a5c98133fa3106971524927e6053cd2d624a2a84086b75aef9285ab11d6bb92956c21ecde8627a695c0319eede989bdc5bc2fa5fb33babe79a8c072401fc630e2fe9764598c14d0b081210d457748164633d326d8f8aa2200bb59db3561768f5d50ceec86b78f56a617618649236d3ebcea8d3b7229e0056caf7fb9f2f1bb7ea786460be70a56f8833e1840a98022dd19e0fbb4d9af3d9a601cfb8b69aa321842e7f2eec9225adfc4331577879b7608b6a6a74f417932c55dcd"}, {@broadcast, @broadcast, 0xa0, "0f1a0b2086f9571445715747ee43cf570891d1079383f2deb4dcd92082619e6512d6736086f634fce298fd5187e1ce5e5feb60eedaedec97f840a1df96466021d3453946668008fd0cdf4e7673697275f39f6be893a0ceb9ed366a306a62563cbd9ed4597b741e26dd99e5fc11b473b152e8622351014dd2521cd9872f8e8db652b287f0b8998aa3012e503ac67df12ea82718bd7b86c2fa6879eb5c7a5ca128"}, {@broadcast, @broadcast, 0x5e, "3ab07717b1ce039f1b04ecdc0939fc97543b49c595925b2b320ccd2ceff3d41564a7cb8b041d636f4a94c1e6e7e3aca6636a7d4be39d81b68d0120932ca517edc94373389bbf7fc7cc69faf39b79ee05a094164a5fd9f6a6b73a8cc8db55"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x157c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0103000000000000000032fe000008005201", @ANYRES32=0x0, @ANYBLOB="268fd4dd508cfd453d2aa02c93594a416fc17414eb9e584015caccd3b9c8df21307d5c47ac78d0a9fc64e5742419034e80d6b18caaa01fee839fc8dc60ed0caf154460d9e8e0a64caa0fb7895604a4ae5ba0c7cb6857b048584b4061c0a568b75dd55c77ed38a2a15a10f26a20a87e3b7600000000000000000000000000000000cd493c71d5b05d6bf93447c4c0029b4758"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0x15, 0x34, @random="034d7a35bbf4d6845af986a06e5af01769"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0xac}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040084) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008814) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0103000000000000000829000000080052e01a678e622397c228fad47718708399d3311ae90df68f06d4019311099b3baa50ec8a84b132d50ca0c6c4c32e594954ab16c6c731bbde8ed7fad385b6f3ea170db20063d87287e2af9b176f3dfa4306c302dbb985b8a50c420b2bd42f70b2a1140dd864e37d8031fb62963d496f5a7c26ed5e320e0b9c3a663c4a92eeee2d4341ea77c6b224598445ce3650226d9fa1f61ab5d109ebc693b724360877dff57f392a52272780671b361e11840e6041e11b4308378864f1663bdf9925770280e8720d53a857874773e56cd428b2cc6f1b80864f35e20a654e35cef43c5f61", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8000}, {r0, 0x1}, {r0, 0x1021}, {r1, 0x18}, {r0, 0x105}, {r2, 0x3158}, {r0, 0x1a}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x28]}, 0x8) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 874.174430] loop6: detected capacity change from 0 to 8336 00:51:33 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000080)) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) [ 874.194076] loop2: detected capacity change from 0 to 8336 [ 874.195285] loop0: detected capacity change from 0 to 16 [ 874.204054] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 874.205102] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 874.209758] EXT4-fs (loop6): get root inode failed [ 874.210584] EXT4-fs (loop6): mount failed [ 874.213956] loop0: detected capacity change from 0 to 16 [ 874.223424] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 874.225349] loop6: detected capacity change from 0 to 8336 [ 874.232912] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 874.247566] EXT4-fs (loop2): get root inode failed [ 874.247992] EXT4-fs (loop2): mount failed 00:51:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 874.268803] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 874.278404] EXT4-fs (loop6): get root inode failed [ 874.279467] EXT4-fs (loop6): mount failed [ 874.316406] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 874.323037] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:51:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x230e, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x410, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 874.370314] loop6: detected capacity change from 0 to 8336 00:51:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 874.455317] loop0: detected capacity change from 0 to 17 [ 874.463467] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 874.464107] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 874.469564] loop0: detected capacity change from 0 to 17 [ 874.478909] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:33 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000330000002cd07530beb7d914a86842ad2bb74be4e475de05e8cc8587096d270576efa46db40537c3d07d9d6a6d4f4f8e0fa4071dc4848d4dc2bcb387d1f91fb124d692b132cf", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01800000000000002e2f66696c653000"]) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x4000010, r0, 0x10001) set_tid_address(0x0) [ 874.483542] EXT4-fs (loop6): get root inode failed [ 874.484403] EXT4-fs (loop6): mount failed [ 874.512422] loop6: detected capacity change from 0 to 8336 00:51:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 874.530042] loop2: detected capacity change from 0 to 8336 00:51:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 874.537485] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 874.541708] EXT4-fs (loop6): get root inode failed [ 874.542148] EXT4-fs (loop6): mount failed [ 874.563537] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 874.568641] EXT4-fs (loop2): get root inode failed [ 874.569057] EXT4-fs (loop2): mount failed [ 874.642041] loop0: detected capacity change from 0 to 18 [ 874.647782] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 874.663763] loop0: detected capacity change from 0 to 18 [ 874.665685] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 875.061639] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 875.062724] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:51:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:46 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='#\x00', &(0x7f0000000080)='./file0\x00', r0) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:51:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1, 0x0, 0x0, 0x0) 00:51:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x230e, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x81, @any, 0x2, 0x1}, 0xe) 00:51:46 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1f48, 0x0, 0x0) [ 887.486940] loop2: detected capacity change from 0 to 8336 [ 887.487785] loop1: detected capacity change from 0 to 17 [ 887.495354] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 887.501994] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 887.504875] loop6: detected capacity change from 0 to 8336 [ 887.505714] loop0: detected capacity change from 0 to 19 [ 887.509922] EXT4-fs (loop2): get root inode failed [ 887.510354] EXT4-fs (loop2): mount failed [ 887.511920] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 887.525691] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 887.531424] EXT4-fs (loop6): get root inode failed [ 887.532414] EXT4-fs (loop6): mount failed 00:51:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000001c40), &(0x7f0000001c80)=0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)=""/26, &(0x7f0000000580)=0x1a) r1 = accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001c00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000640)={0x157c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_FRAME={0x108c, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1f36}, @device_b, @random="0d5dffffdfc6", @broadcast, {0x2, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1000, "ed27071a5081525c8f853285dbb5b3a031ac69126594893db86a5358f1613a32c50c64aab2f0bff468747b8217e19a50835440f7cf188c3a5053602eb4bde6585a952c798fca5ec9ac4f2e81441e1ac67d078d60ff6dcc620b7a044ab0d6cdee6d8ead2fe6c60c1a2257c081f6db1ae3c36512e8529dfcdfe79e5f61defb3bbeaf6a76c1d9a3e9b62bbb37dd6015c51f2ef0d270459325dbcbe5054f327454d26fc13ee9f1091fb64a80eb348d9b8f40f95c28abea274e3f4594348bb568bc4df6c0bccc909125a1450fcca663e9a266ab320b2a75d02f2ba8a3dde6ffe8880687d7b5f3576ca105faefdbff6f578c5c610b8f1681d89db381b0c94c19fd8f358ae46085c977c9f997883c59505d778cbcd21d094b0521e34bd32f2616acd43095dc31aae70c5f8f51590e2fcdcdd8bb9a3b90214a4422dfd5ff36e3aafe5c205309588d7105d38011d4ad5ab5552b404972ff8664a1f8d3d20e2ab209b489dcd37292b478c06db36487b217840e374e8dea1fe8d335b73e2b9193e80faec6f8c7c291426a6d123c733c3887408c5ce8d067785a535a4510ac3a2da1c448362e3b2bb6b7250bc658c34af418d53845dfcc071529d108e6a507a6de0e3e95ff767d583cd7e713bf0eba9292aed17f4ed7a5e752e951d13120f85ee9a83abb6cd1834dd4ea3ac09b019736ff10610b1442f7fb4b14086fe0f9fadce910510c9ab5617b8fedb31da28a49366e9efa5c145224658e57d3afe85a10ed5a1581cf5e964312c8e00b9756c51f863e1996d59c557e3e51d37021b7a0c272a8a768de385e1950ccfcc9ec57193653a0a9bda29166aef3a904e21300561e35f25d8369601967508d4f07b6fd875804930568bd55ba893c84f74802fd261eb7dfa478be40fc5af195d1d9922920b2a613aac9a9ff4a4c07ba615af6a8638fd36bec4426e4b77efde10824b124f15fdbbc72c0de0fb336c98bb525f26ed2d2c794a5eea226b26e7936fbf0de2308fdc827d5ea5879c2dc90418e75e4f3a7ac19f371a90d3dfd421ca82c8d3a875ddb303c4abd00da9bc255be1a7e609c66e79d853184b5de840436e43d1e27262a79e51076abe14d941189277914025de81f7dc12407b7aa0b13e1311fe8f9512d69dd93beff24350ac84f3d3db03bc3ff69fc6c3d011fdb232c3432a9401126b28f9e7217fef53a9a69a9674dd567a0d8c900a0baa74cd81c4b0f79727cab0d98de5a8e42bbfbf61dec855ad855299a495b882baab13ceeeb97bae66b04a7914e7f2de7ac72517ada38ea13df15fc72ff1fe98abea825ca5353a5942b662e77ba373c2d204170672d297d8345a91d85f6008a8dc52649bbe226c87d047593a6d35985df19b426f1b39c8d620a30a71d4e9990b03684b15140856dd2acfc872066e4e4a034fd06f50e65bb77fc87d24b349708d10093f42f16c6790de42544b960b0dbb55b69c995ab8b195fb54504cd2ed058f44e0cab57cbed4d610e8dd410177ab12c92a3558f50f266cb82f01a19498c5385ce796cf6b9589d3978fe4c3d5b35680dce491661d21e78483b18200a208e79aec32499aa9b15f9961a6b77f2e90e379f9a17bc9ffc81d9664d2264061e8539700f121a913a2fb4656670abefbad099a1c17f4d926d29e98d578dbb4854c127d44f8aabaf932a04e7ddcc6c15a953c09347613a8c7847fca9763f678495ef2a9ab18aa28acf7db6cd8afca7a4defa938ff5837c03441eaac0c60673b9c48b392a57d8f4234ba5315e3b9d5ac8cff5ad3b79e084fb9e473fcf2ca2a4eaaf3a4fd1e55ae1bd740b46c39baeabc3ab0f537a91dfa2a765e0522e33d694178c284581a4fe907c0325c2144f94690ccbf6f82ddea7866d335b2edcd6f2817bbc316e23d6a0e153d16d9b9258bd7877f479c89d42ce5407b80f16b7b7d99bb224f8bb9a9283289a650803b566623f4a84069fef5aa4712dbb253d73aa1cc85f1167d05ca652c2c7b3ddb3f94f46739270fb19f76f3448245a896df216a234ab58b73cd7a3e05b71bfa15c92cd68b36dd7f2333fd344c545193c9152bc456c45deaaf47b3b943957d788c06f26224c0063f07d6d56ad80bf7654d78f22b497f10066263e413271679bff0516c46e98c138f172e59ca852cf5b36b91174370f5ae8b97f6ce49faad74f43dc6b365a1a5e22ec68701356c20fe7f18e8c6db933a1c3359d19a1db9a84ce2d5d56a4c67c677011075e35caef43199088cc45f7b1b8a65ba62eb290f8c6f3a12edad85e13e860a1d2a220dc96efb88ce4971a2a09ac0ffd4bc93136fe6bce311dfaddfc92fb6300ad16035b18d3257f68b9fb6b306d1bdcfaedfc05fc3c1a09874b017e2de0dac39363fffce112b919a836ea695fbc1ec380e771db2a027df8c2e5f062df8fe0c0c40b20b9422e9037ea97abed73d4fc50a1f7636cef615a13d2acbd3337565416498f93f73435d8b1ee0d928a296a869c608d7f703fbaef2bba3dffcea351c19907e8bd8fc5df91848c5ca380b6ec835fc5c1704758e6fa5f1d96dee14db9ada84cc7cd1e2c231e4ced53aa9ddfb04d4c871afbb6e0918c9dbe1988145e119c57c5939d1ddedfa378ed245d177f40f2a93b5e372aed3ae94befc469a0bf81ad5397200e368b960e32715b7d7d49c322af72b8fd029a0afbff4f8045c5edb4bc6378dda9d3de634b206050d072131e23a881511493d81cf9e793b84d6477fb63130ad9958273309849e65e3e82faea1248e66903e14fb27f54ab01f462e15436e761c3b6c6e3e21193af7abf8c1403889c5a568e4954a83793ec50faea38f7db9b40fb9bd49aab8697867dc9869348be2472f0e155bee7138cab3d54051d99659f94d0c1c89599445d1dd0df3379fb08fe71abc918008480ed175ac557ee8ddfb69e9906368c72238cb1d9db4b262c63a124885b067604abdfbb1376f69e42a1cbbaddc77b7657e6642de1ce20055e77c39506c60f847adea98eb192f5d9b732648fd80789fa4871a25d63fc79faa73a2dbf7bbfb80ddadaea9da7b697db6baf8b20850ebf1181fc8a8bbc397867b1ea5a7d19b84358ac90a97605164dd984302a07b71c04d7f1ad81b4d9b0ff1d1e570a42bd698e4966d1c623bebc526a5a8be5eb074699d0073f64ebc52bfd0ff15181b092fab431b1142f8e8d765187780436b25eb2a71d79279f4ce8bb2a5754d3d6893d019811b5b40ee387fcf6676d0c518772ecc2677800bcc295a7b3c23b5ce68705acebca129206430e33bfc35abccd0991640b4791bb6a85c248382ceade80ad0206f697e785f6386f0c13a27a42ad31b77f903c4eb599ed4d9e9f6124de0258394e06366583a0a22daf7171c7f87fab53958bee15ff6b06313148e25c17f726001f5f70f5a88e393b444933a85087f48d9aecdc2c26c73d4745954829b837a51b3cee519e1fbaa314d1978a0409afed1a369723fc257dcdd41c958ecc2d6c893ee2093ec13d9c451e797080cb72ee2a50f3f42557994221a13b06158d0afd9de809e0a3cc068fe4318b19b2cc54ca5e5966d8187dd1757f5fff8970ab208688c7f28ac31661bb589a4d3326bb68deaf1ec074c8aafe9b6c2209f6e07ab5f2bb8a533b75e7cdacbdb6f88808f822beaa3ecb8fcedca64280029a47c34bf6172397dbb8b47e24a8bb7fad802f07851e7c49d7a0a11e7e0c7302f69f5c609eb59d120c3e7750db61d74153bb38c7c372d21a01e3a07bc3a0718261296d7ac5692a746c960f6f0316c5cc881fd6c113b6912d36abd294815a6715876b75964a740f509410f0870ce2dab43ee3d7e9f472146c97b24637034c9c7134d7f602c79eb6b32abb1101a6b32f5fc9f64dc031bd4490c8dc52b0649a0041977318bbf8326aea0901cfff4236ead7391771c5182a83aca71b629f56924c1ea9f2ca9c26d2e3179dbe85a826487a96acd90da0d6273da4cbca7c7097159408996a517dc5aa9b18ad09db99712259297474516c5fa0f902242443b44bb971e9b4077a5a7ad350a4f2fd40e30b34cff75422bfc782a976d63ff832db1e719076aa05d503dd0e5c7ee2e956562c629370f95e0d68b226288ad474b7770c9df67ef515f695ad4a787e06ccf6328106afa44124842a47cefb8f80b327cada88d90d04b509b442c1b89723ce92578abaca742929e5b8437b2c8fe0d05fa520f93078539f07b5eb4dac6372cd18c9d8a5794ce3a69eee8172f14c3e18d1106cade561a8ab5365b857be63f038d1fb3e9ed5458acb1c6842edbf04d6e52ef6c67f7e2f6c81402afcbd45bf9bf8b9825afaa61db533f6d44c14ed1aaec0bbaa26f41c972c3aa53b0c5f661fae0a8bb90ddd340e791936c46ceffb8f0dd26174dc93c3952f89025b69fd8903e3c8f04a432feafd0266d4cf24d92cb67d0a7a12588b93cf80c4cde04d0a706861030f9396760cdeaad0c03de28c2d1cf2aa9354f198849d67dad8c25a6eb07bc64a5b8424ca54ef07fd0e19545888440dd5a89d7402084aec04707a426b66d64834314c739508868e34bc8fd3bf0a9038c5ec1163febcc1148589846de18d39cd58213a07f83a84338c66cb28be67ae471249db6a4927da7551206457ace75ee34d88d42631796e807e6d661b4985f50fc3cd5355a6b35db0006166dd523d5314c66d3ad9a034bd13446a359d112adc72e130bccff76bdbf5ab35bd7202c717d5c0c2615e5653e68d79fbd6f951f02efc01baf0530d1ecc8191d42ef6d6d90590ddd1a3aac66afcaca14f1a86eda9311e456747dc904d93efcd02faa107f0ca7503b3a15ad32140a88e65a4088bae3c33de73a7a92b7fa549fc4e85e77da5db26cd4405774bc1f912b84638635470d5a009ffa63e95b308f6815788eca4fd7b424eb8b4d244f95c6cacccf224b942a5cf7a104fbe030cb28b6438999e2f3dec798e1b1874f76eb61f21ed3baa956b62ad84d02ed7fe762f992a221416a13c6e7a3d44cae11aee69fffa7b6832523c67110b18625d003f7d238a33b027d4e0a9c3a21b570d201bdc8696b8a5e10ae11e24736c8e340a19875c1afa56824a749caa8aab086248434f81949ab730644f0630a6d02e0f43b7fc91e0deb32eb7b4e167cefcf98e2952a9979dfa171cb5dab0ebbfd3982329f6d77eedcb4bd8cbad442ad7c7c24183ae03c7e6a14f0e8f229e8b31add995776a4d7b4eca72046eab5c46be988184dd39f8bf7fc0bb74e30db2ad874120983be0f0831414b035ec57539d915443d62893b66eca517c61195b7a86bd60113f66137a213a8c19fc9521a3a8de0ea6c6cae2b7834ca11a26cc4c2f970de30db0f894d590f7e448a95b1132ac0809f4f82ced7e2da743766d9fe64a4323dbb9cde964da6e7074bed49828849c43578bf86586ceb2df1a076f3265186eafb47f56cae130620f1a26876e43ae7645ae73866e8e4d14c3e62314eaf8bbaff36515528a23b9a0a2f8f16417c23254b87bf76088b1377bff47fafcb4adc4a43421529f428603a9f804d8695908ef7658f9ad3957e7091be922695c02a81f255a9496b9ad5ea3affda41351d6a6f75e4d920b30e95df7c77625c3c3f49da75d01aeec8ea3a9bb8994adb6914ee89e907f2aece703378d91d22e9a9dde1d759905d831d324bc838371c5f28451e3d17d3a5ebbe460a6bc0987df95a5abd155821c85b8d245702bb3d2d18998cba772fddb125a5872f1a68ed630489c1a30b13cacaf478aac34e300842f2f1b6a1b2898fcd7adfdc746d1873a629877163ef7ffac92168f05181232ea79b837ac1fdea68ac82876"}, {@device_b, @device_b, 0x52, "504bc4bcf3d1f03346738671fd9e277736d8fcc4515973f9f3be462f40f323b31c0a2b44a07fd43d6c1bd8f7a006d4c2aeaf6ecfdd5d7066bf8c2f72ba1f0d99629ee5e24a782d63e3e62db753de4324163f"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x492, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @broadcast, {0x3, 0x7}, @device_b}, {0x7, 0x1, 0x3}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_a, @device_a, @random="68d5df16b07a", {0xe, 0x3}}, {0x6, 0x0, 0x2, 0x1, 0x81}}}, @ver_80211n={0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0x9b, "9c97d4ac8c30941b629328dbdfc46c241b1795f8143e7e6fb8b4dcb61ea134f6cc201a3ee2f953eb811cb388265425f9ef7211576d9c45a0f3070a395490ac8c4e470ee6b58003b69d82313b19eb3bd3308f1927dd2a001e60ee1fa02708283c7a3997ac9a7f9ce4f63a5d5c1524745b762c571051a5fde7f69f9dc67a0a0f6a48a2e2f881c61325d7810d3812aa289d4fbd953644dd8f46759930"}, {@device_a, @device_b, 0xa1, "f7661ac2062cad40c7c7c5582a1e9555430ed5242ce3aecdc5f447e93d2443536a07d31bc2c2aa2ca0e514744485e22c4762db44b4f277bacd4befeba9f90affee3c035bc6259e519d706e305d9d6b2cf5d991fee4f0eb12b228e7287f350e507f612aa884c418e6427c50ffeac8afb6d234986e82aa537766a29df6c052f6026423c7aaab87195691a1a32d95edcac0139d57e943b5a77a543dd1677845192516"}, {@device_b, @broadcast, 0xc9, "6a3a6d1729df07fda5e91f8642055516f6742769ba8d5d7fb96b0f109dabf21f7e31d4e10f9e8e70056699a33ac6c61e559eaa7d59d8433e609ca1bf591385c7a484410c0dde437a4ca963131a05d9d87ec3f45d2136e2b0b386ff3c7e3a37852bc37f1f1bc3841235aea66dc014001c0dfa81214b7122968b9429a072ed7242c18983405265f1a46e669bb7689b347744d2b00a0ad548c62bd29c4a8def38e74126ddd81fe8cfad4913180257a1665d31db8247e4fb76ca43ea82ef188da97a284e876dca6d8db429"}, {@device_b, @device_a, 0xf2, "192ef4e27b89f1cd5190333e9458b82da58696ba96df73b6f255eeebb0e83b311a038df9d6f2f075a8cd1a70a676ff27ef6263c0418b4c746a5c98133fa3106971524927e6053cd2d624a2a84086b75aef9285ab11d6bb92956c21ecde8627a695c0319eede989bdc5bc2fa5fb33babe79a8c072401fc630e2fe9764598c14d0b081210d457748164633d326d8f8aa2200bb59db3561768f5d50ceec86b78f56a617618649236d3ebcea8d3b7229e0056caf7fb9f2f1bb7ea786460be70a56f8833e1840a98022dd19e0fbb4d9af3d9a601cfb8b69aa321842e7f2eec9225adfc4331577879b7608b6a6a74f417932c55dcd"}, {@broadcast, @broadcast, 0xa0, "0f1a0b2086f9571445715747ee43cf570891d1079383f2deb4dcd92082619e6512d6736086f634fce298fd5187e1ce5e5feb60eedaedec97f840a1df96466021d3453946668008fd0cdf4e7673697275f39f6be893a0ceb9ed366a306a62563cbd9ed4597b741e26dd99e5fc11b473b152e8622351014dd2521cd9872f8e8db652b287f0b8998aa3012e503ac67df12ea82718bd7b86c2fa6879eb5c7a5ca128"}, {@broadcast, @broadcast, 0x5e, "3ab07717b1ce039f1b04ecdc0939fc97543b49c595925b2b320ccd2ceff3d41564a7cb8b041d636f4a94c1e6e7e3aca6636a7d4be39d81b68d0120932ca517edc94373389bbf7fc7cc69faf39b79ee05a094164a5fd9f6a6b73a8cc8db55"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x157c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0103000000000000000032fe000008005201", @ANYRES32=0x0, @ANYBLOB="268fd4dd508cfd453d2aa02c93594a416fc17414eb9e584015caccd3b9c8df21307d5c47ac78d0a9fc64e5742419034e80d6b18caaa01fee839fc8dc60ed0caf154460d9e8e0a64caa0fb7895604a4ae5ba0c7cb6857b048584b4061c0a568b75dd55c77ed38a2a15a10f26a20a87e3b7600000000000000000000000000000000cd493c71d5b05d6bf93447c4c0029b4758"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0x15, 0x34, @random="034d7a35bbf4d6845af986a06e5af01769"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0xac}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040084) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008814) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0103000000000000000829000000080052e01a678e622397c228fad47718708399d3311ae90df68f06d4019311099b3baa50ec8a84b132d50ca0c6c4c32e594954ab16c6c731bbde8ed7fad385b6f3ea170db20063d87287e2af9b176f3dfa4306c302dbb985b8a50c420b2bd42f70b2a1140dd864e37d8031fb62963d496f5a7c26ed5e320e0b9c3a663c4a92eeee2d4341ea77c6b224598445ce3650226d9fa1f61ab5d109ebc693b724360877dff57f392a52272780671b361e11840e6041e11b4308378864f1663bdf9925770280e8720d53a857874773e56cd428b2cc6f1b80864f35e20a654e35cef43c5f61", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8000}, {r0, 0x1}, {r0, 0x1021}, {r1, 0x18}, {r0, 0x105}, {r2, 0x3158}, {r0, 0x1a}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x28]}, 0x8) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:51:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1016, 0x0, 0x0) [ 887.600142] loop0: detected capacity change from 0 to 19 [ 887.603094] loop6: detected capacity change from 0 to 8336 [ 887.612667] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:46 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x4800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) mknodat$null(r3, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) r4 = accept4$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x800) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1, r0, r4], 0x3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040005) set_tid_address(0x0) [ 887.628827] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:51:47 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x3, 0x1, 0x1]}, &(0x7f00000000c0)=0x44) set_tid_address(0x0) [ 887.656024] EXT4-fs (loop6): get root inode failed [ 887.656501] EXT4-fs (loop6): mount failed 00:51:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:47 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x4800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) mknodat$null(r3, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) r4 = accept4$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x800) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1, r0, r4], 0x3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040005) set_tid_address(0x0) [ 887.747168] loop6: detected capacity change from 0 to 8336 00:51:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 887.766782] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 887.769154] EXT4-fs (loop6): get root inode failed [ 887.769625] EXT4-fs (loop6): mount failed [ 887.824987] loop6: detected capacity change from 0 to 8336 [ 887.829933] loop0: detected capacity change from 0 to 31 [ 887.837384] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 887.842608] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 887.850846] EXT4-fs (loop6): get root inode failed [ 887.851259] EXT4-fs (loop6): mount failed [ 887.851416] loop0: detected capacity change from 0 to 31 [ 887.859865] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:47 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='#\x00', &(0x7f0000000080)='./file0\x00', r0) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 887.907847] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:51:47 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 887.936682] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:51:59 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f00000000c0)) set_tid_address(&(0x7f0000000040)) set_tid_address(&(0x7f0000000080)) 00:51:59 executing program 7: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x100f, 0x0, 0x0) 00:51:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1f48, 0x0, 0x0) 00:51:59 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='#\x00', &(0x7f0000000080)='./file0\x00', r0) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:51:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x8800000, 0x0, 0x0) 00:51:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000003c0)=0x7f, &(0x7f0000000400)=0x1) r2 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x400000004000, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="ceb97166ea69b226507247289308f3f50f1aaf96e4ac55bb4a7d4783c3891ebb94f863d920f98d1b0490aa21fc4586980dc5015886c7e27150606abb6e9fa17c304bf4cc4696b966600f8040fd2c3290ab6f106e683262930635bf905bf82f44ff36a18b5f504dbbfe1e27de3afce8988b7deca885bfb9549beaa47dbca3912290bbe3287c7a3d296c6d6a940ebf0be593b7eda906ed", 0x96, 0x1}], 0x6, &(0x7f00000001c0)={[{@huge_advise}, {@gid={'gid', 0x3d, 0xee01}}, {@uid={'uid', 0x3d, 0xee01}}], [{@pcr={'pcr', 0x3d, 0x3f}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#*+{%'}}, {@fowner_lt}, {@obj_role={'obj_role', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '+'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@euid_gt={'euid>', 0xee01}}]}) readv(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001440)=""/204, 0xcc}], 0x3) 00:51:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 900.009225] loop0: detected capacity change from 0 to 32 [ 900.016298] loop6: detected capacity change from 0 to 8336 [ 900.022499] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 900.029427] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 900.031584] loop0: detected capacity change from 0 to 32 [ 900.034150] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 900.035298] EXT4-fs (loop6): get root inode failed [ 900.035728] EXT4-fs (loop6): mount failed [ 900.051990] loop6: detected capacity change from 0 to 8336 [ 900.068276] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 900.077198] EXT4-fs (loop6): get root inode failed [ 900.078025] EXT4-fs (loop6): mount failed 00:51:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:51:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0xffffffff, 0x0, 0x0) [ 900.164587] loop5: detected capacity change from 0 to 264192 [ 900.174636] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 00:51:59 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:51:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:51:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x824, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 900.215746] loop2: detected capacity change from 0 to 8336 [ 900.228122] loop0: detected capacity change from 0 to 33 [ 900.235824] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 900.246542] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:51:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x4000000) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'veth1_to_team\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000000)='erspan0\x00', 0x8, 0x7, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x18}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x16, 0x1}, {0x24, 0x1}, {0x6c, 0x1}, {0x6c, 0x1}, {0x2}, {0x48}, {0x0, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8044) set_tid_address(0x0) set_tid_address(&(0x7f0000000100)) [ 900.262792] EXT4-fs (loop2): get root inode failed [ 900.263226] EXT4-fs (loop2): mount failed [ 900.274935] loop0: detected capacity change from 0 to 33 [ 900.288214] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 900.296681] loop6: detected capacity change from 0 to 8336 00:51:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) 00:51:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x53ef, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 900.323654] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 900.329950] EXT4-fs (loop6): get root inode failed [ 900.330761] EXT4-fs (loop6): mount failed [ 900.345143] loop6: detected capacity change from 0 to 8336 [ 900.364753] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 900.373686] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 900.383022] EXT4-fs (loop6): get root inode failed [ 900.383976] EXT4-fs (loop6): mount failed [ 900.393485] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 900.426245] loop0: detected capacity change from 0 to 41 [ 900.466140] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 900.490327] loop0: detected capacity change from 0 to 41 [ 900.510085] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 900.879051] loop5: detected capacity change from 0 to 264192 [ 900.883190] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 00:52:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x2, 0x0) 00:52:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:09 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xcb00, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:09 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000080)) 00:52:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:52:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 909.961995] loop2: detected capacity change from 0 to 8336 [ 909.962907] loop7: detected capacity change from 0 to 8 [ 909.968215] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 909.973325] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: special inode unallocated [ 909.980337] EXT4-fs (loop2): get root inode failed [ 909.980760] EXT4-fs (loop2): mount failed [ 910.034203] loop6: detected capacity change from 0 to 8336 [ 910.035898] loop0: detected capacity change from 0 to 101 00:52:09 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) 00:52:09 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 910.048176] loop1: detected capacity change from 0 to 8336 [ 910.066610] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 910.090571] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 910.094206] loop0: detected capacity change from 0 to 101 [ 910.098665] EXT4-fs (loop6): get root inode failed [ 910.099640] EXT4-fs (loop6): mount failed [ 910.108915] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 910.111155] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 910.119002] EXT4-fs (loop1): get root inode failed [ 910.119939] EXT4-fs (loop1): mount failed 00:52:09 executing program 7: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) 00:52:09 executing program 2: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000000)=0xeb, 0x4, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000005, 0x50, r0, 0xea178000) set_tid_address(0x0) [ 910.147296] loop6: detected capacity change from 0 to 8336 [ 910.179764] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 910.213034] netlink: 'syz-executor.2': attribute type 338 has an invalid length. [ 910.218233] EXT4-fs (loop6): get root inode failed [ 910.218838] EXT4-fs (loop6): mount failed 00:52:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:09 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) [ 910.338099] loop0: detected capacity change from 0 to 118 [ 910.348668] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 910.353786] loop0: detected capacity change from 0 to 118 [ 910.356913] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:52:21 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='-]/-.(%!(\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) set_tid_address(0x0) 00:52:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0xf3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x2}, @release, @dead_binder_done, @request_death={0x400c630e, 0x1}], 0x5d, 0x0, &(0x7f0000000140)="124d237fe07347596950a585559bef3bdd6cce6633dcbc20c1c8457279b75c76d936ec6622908a9f46f67933f6a17ca0e87d3067a1cf7121522980eae710a60a4ab35ea0ed4f7ae0bde1a22adab7ca0c6d2f980cea304d9af275fca422"}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x1) 00:52:21 executing program 7: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) 00:52:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x3, 0x0) 00:52:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xef53, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:21 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"08ad8f5f2308b9120281a282e252d95a", 0x0, 0x0, {0x9, 0x22}, {0x3ff, 0x2}, 0x2, [0x1, 0x0, 0x5, 0x100000001, 0x5ad, 0xf3c3, 0x101, 0x5, 0x80000001, 0x0, 0xdcc, 0xfffffffffffffff8, 0x1f, 0x3, 0x1000, 0x101]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"9fb86d0e453a84ec78385283ea7f3cf1", r1, r2, {0xfffffffffffffff6, 0x401}, {0x400, 0x259}, 0x25ec, [0xa1, 0x6, 0x707, 0x7fff, 0x1a, 0x6, 0x8, 0x0, 0x9, 0x4, 0x7f, 0x800, 0x1, 0x8000, 0x180000000000000, 0x55b6]}) set_tid_address(0x0) 00:52:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 00:52:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 922.450657] loop6: detected capacity change from 0 to 8336 [ 922.470161] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 922.474842] EXT4-fs (loop6): get root inode failed [ 922.475254] EXT4-fs (loop6): mount failed 00:52:21 executing program 7: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) [ 922.489968] loop6: detected capacity change from 0 to 8336 [ 922.500759] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 922.506234] EXT4-fs (loop6): get root inode failed [ 922.506666] EXT4-fs (loop6): mount failed [ 922.510737] loop0: detected capacity change from 0 to 119 00:52:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 922.584593] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:52:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 00:52:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0x40, 0x9, 0xfffffffffffff800, 0x2, 0x3, 0x101, 0x61, 0x38, 0x307, 0x1ff, 0x9, 0x20, 0x2, 0x3, 0x2, 0x40}, [{0x1, 0x0, 0x7, 0x1, 0x80000001, 0x3, 0x4, 0x2}, {0x5, 0x9, 0x2, 0xa18, 0x4, 0x7fff, 0x1000, 0x7f}], "0b674ff98714f116a6dc8ee6a93d77606b5235050b0e2d0172013a6b891c898481696fae1445987781d0b3c54919399530e274f450712d0fda5284498cd51894338e0c6fd46e5f1495c201c14666687579dc617f7e71cd19eb6c1e508924694444bac129dbf9166ab22fe8af794614f73391ddcbdbbe646275f76efc397af89d4efe597e45af415e5ed9c878171c6cae1729da8b7984e11a8da1f9a3bb9b3a1e0c5943d2bbf2a802a30733e15c537a76c6d26e886d8823ab32faf987318af9602c831b70ad9cb8ade1f0dc63a2553c7c9aa394c43c309b29d5c396d02f27246aa3c998762c368a129abad6e93044d3b5ed36d7937919188542", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x771) set_tid_address(0x0) 00:52:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:52:22 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:52:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) (fail_nth: 1) [ 922.850948] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 922.866228] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 922.869303] loop7: detected capacity change from 0 to 8336 [ 922.893240] FAULT_INJECTION: forcing a failure. [ 922.893240] name failslab, interval 1, probability 0, space 0, times 0 [ 922.895097] CPU: 1 UID: 0 PID: 7603 Comm: syz-executor.2 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 922.895127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 922.895140] Call Trace: [ 922.895148] [ 922.895156] dump_stack_lvl+0xfa/0x120 [ 922.895187] should_fail_ex+0x4d7/0x5e0 [ 922.895221] ? jbd2__journal_start+0x193/0x6b0 [ 922.895248] should_failslab+0xc2/0x120 [ 922.895273] kmem_cache_alloc_noprof+0x5f/0x470 [ 922.895306] ? lock_is_held_type+0x9e/0x120 [ 922.895333] jbd2__journal_start+0x193/0x6b0 [ 922.895365] __ext4_journal_start_sb+0x325/0x5d0 [ 922.895388] ? ext4_dirty_inode+0xa5/0x130 [ 922.895415] ext4_dirty_inode+0xa5/0x130 [ 922.895446] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 922.895469] __mark_inode_dirty+0x1b7/0xd00 [ 922.895498] generic_update_time+0xcb/0xf0 [ 922.895522] file_modified+0x1f0/0x230 [ 922.895548] ext4_buffered_write_iter+0xf4/0x430 [ 922.895585] ext4_file_write_iter+0x9df/0x1990 [ 922.895623] ? __pfx__kstrtoull+0x10/0x10 [ 922.895650] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 922.895682] ? __might_fault+0xe0/0x190 [ 922.895713] ? __lock_acquire+0xc65/0x1b70 [ 922.895742] do_iter_readv_writev+0x5a6/0x870 [ 922.895778] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 922.895818] ? lock_is_held_type+0x9e/0x120 [ 922.895843] vfs_writev+0x2d4/0xcd0 [ 922.895886] ? __pfx_vfs_writev+0x10/0x10 [ 922.895917] ? ksys_write+0x121/0x240 [ 922.895942] ? __fget_files+0x34/0x3b0 [ 922.895975] ? find_held_lock+0x2b/0x80 [ 922.896014] ? __fget_files+0x20d/0x3b0 [ 922.896057] do_pwritev+0x1ab/0x280 [ 922.896090] ? __pfx_do_pwritev+0x10/0x10 [ 922.896123] ? ksys_write+0x1a3/0x240 [ 922.896142] ? __pfx_ksys_write+0x10/0x10 [ 922.896166] __x64_sys_pwritev2+0xef/0x160 [ 922.896192] do_syscall_64+0xbf/0x360 [ 922.896218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.896241] RIP: 0033:0x7f501d70eb19 [ 922.896258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.896281] RSP: 002b:00007f501ac84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 922.896302] RAX: ffffffffffffffda RBX: 00007f501d821f60 RCX: 00007f501d70eb19 [ 922.896318] RDX: 0000000000000005 RSI: 0000000020000500 RDI: 0000000000000003 [ 922.896331] RBP: 00007f501ac841d0 R08: 0000000000000000 R09: 0000000000000000 [ 922.896344] R10: 0000000000001008 R11: 0000000000000246 R12: 0000000000000001 [ 922.896358] R13: 00007ffc4e8cc48f R14: 00007f501ac84300 R15: 0000000000022000 [ 922.896388] [ 922.946972] EXT4-fs error (device loop7): __ext4_fill_super:5500: inode #2: comm syz-executor.7: iget: special inode unallocated [ 922.967131] EXT4-fs (loop7): get root inode failed [ 922.968021] EXT4-fs (loop7): mount failed 00:52:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:34 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 1) 00:52:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40002001}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ba}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x64}}, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44413) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:52:34 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000000)="75b08b8b7388d11890ba51b91c9c440cd072db237eccde1b8a85ccbb8bd3af1f4fea5195841f2aa15b376d508d837c1cefc7db7ccd66d9ad6921bfa53cd4ce", 0x3f, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:52:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:52:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:52:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x4, 0x0) [ 935.534676] loop0: detected capacity change from 0 to 127 [ 935.544195] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 935.554391] loop0: detected capacity change from 0 to 127 [ 935.560674] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 935.620720] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 935.624856] loop6: detected capacity change from 0 to 8336 00:52:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 935.667348] FAULT_INJECTION: forcing a failure. [ 935.667348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.669076] CPU: 1 UID: 0 PID: 7630 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 935.669106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 935.669119] Call Trace: [ 935.669127] [ 935.669135] dump_stack_lvl+0xfa/0x120 [ 935.669165] should_fail_ex+0x4d7/0x5e0 [ 935.669200] _copy_from_user+0x30/0xd0 [ 935.669234] __ext4_ioctl+0x739/0x38b0 [ 935.669264] ? get_pid_task+0x107/0x250 [ 935.669300] ? __pfx___ext4_ioctl+0x10/0x10 [ 935.669324] ? find_held_lock+0x2b/0x80 [ 935.669356] ? ksys_write+0x121/0x240 [ 935.669376] ? lock_is_held_type+0x9e/0x120 [ 935.669400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 935.669429] ? do_vfs_ioctl+0x125/0x1470 [ 935.669466] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 935.669493] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 935.669518] ? __mutex_unlock_slowpath+0x91/0x650 [ 935.669542] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 935.669568] ? __pfx___bfs+0xb/0x10 [ 935.669599] ? __fget_files+0x34/0x3b0 [ 935.669632] ? find_held_lock+0x2b/0x80 [ 935.669663] ? __fget_files+0x203/0x3b0 [ 935.669695] ? lock_release+0xc8/0x290 [ 935.669725] ? selinux_file_ioctl+0xb9/0x280 [ 935.669750] ? __pfx_ext4_ioctl+0x10/0x10 [ 935.669776] __x64_sys_ioctl+0x18f/0x210 [ 935.669807] do_syscall_64+0xbf/0x360 [ 935.669833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.669856] RIP: 0033:0x7fe019041b19 [ 935.669873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 935.669894] RSP: 002b:00007fe0165b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.669916] RAX: ffffffffffffffda RBX: 00007fe019154f60 RCX: 00007fe019041b19 [ 935.669931] RDX: 0000000020000000 RSI: 000000004004662b RDI: 0000000000000003 [ 935.669945] RBP: 00007fe0165b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 935.669958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.669972] R13: 00007ffe6d04f75f R14: 00007fe0165b7300 R15: 0000000000022000 [ 935.670001] [ 935.711891] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 935.726071] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 935.728401] EXT4-fs (loop6): get root inode failed [ 935.729269] EXT4-fs (loop6): mount failed 00:52:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 2) [ 935.739068] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 935.759868] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 935.766798] loop6: detected capacity change from 0 to 8336 [ 935.799785] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 935.803149] loop0: detected capacity change from 0 to 127 [ 935.809577] netlink: 'syz-executor.4': attribute type 338 has an invalid length. [ 935.816966] EXT4-fs (loop6): get root inode failed [ 935.817775] EXT4-fs (loop6): mount failed [ 935.826869] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:52:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 935.844985] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 935.850769] netlink: 'syz-executor.4': attribute type 338 has an invalid length. 00:52:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 935.972387] loop1: detected capacity change from 0 to 127 [ 935.994200] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:52:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 3) 00:52:35 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf252c00000008000300", @ANYRES32=r0, @ANYBLOB="95b9e8369fe7b2694290946373cd9b6c9f84734468881879677bd4f30d15a6fff496ce10fb7757080bf4d4a904562470253ea17a0ebe79e3024004cc24bf22e98663e1a7885a77ffec5757b6a2283d90700eb833005f2dbcce1681e17e35efc36eef534c90217d3455ac7571e25b8e21343491"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) set_tid_address(0x0) [ 936.107201] loop6: detected capacity change from 0 to 8336 [ 936.108343] loop0: detected capacity change from 0 to 512 00:52:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40002001}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ba}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x64}}, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44413) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 936.129263] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 936.173028] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 936.185829] loop0: detected capacity change from 0 to 512 [ 936.188017] EXT4-fs (loop6): get root inode failed [ 936.189144] EXT4-fs (loop6): mount failed [ 936.202503] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 936.234013] loop6: detected capacity change from 0 to 8336 00:52:35 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 936.251023] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 936.257883] EXT4-fs (loop6): get root inode failed [ 936.258852] EXT4-fs (loop6): mount failed 00:52:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 4) [ 936.337486] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 936.453192] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 936.460945] loop0: detected capacity change from 0 to 1024 [ 936.472403] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 936.531367] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 936.538640] loop0: detected capacity change from 0 to 1024 [ 936.562226] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:52:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'bond_slave_1\x00', {0x6}, 0x2}) 00:52:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe9f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:46 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 5) 00:52:46 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x5, 0x0) 00:52:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x7ffff000}], 0x5, 0x1008, 0x0, 0x0) 00:52:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x4, 0x0) 00:52:46 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) 00:52:46 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) [ 947.294829] loop6: detected capacity change from 0 to 8336 [ 947.298401] loop0: detected capacity change from 0 to 1792 [ 947.311506] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 947.315835] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 947.322782] loop0: detected capacity change from 0 to 1792 [ 947.323321] EXT4-fs (loop6): get root inode failed [ 947.323849] EXT4-fs (loop6): mount failed [ 947.335543] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 947.344241] loop6: detected capacity change from 0 to 8336 [ 947.369104] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 947.376032] EXT4-fs (loop6): get root inode failed [ 947.376381] validate_nla: 1 callbacks suppressed [ 947.376406] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 947.376461] EXT4-fs (loop6): mount failed 00:52:46 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 6) 00:52:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xea0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 947.491877] loop0: detected capacity change from 0 to 2048 00:52:46 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x424, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040890) set_tid_address(0x0) [ 947.526154] loop6: detected capacity change from 0 to 8336 [ 947.531678] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 947.547380] loop0: detected capacity change from 0 to 2048 [ 947.569643] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 947.584904] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 947.595772] EXT4-fs (loop6): get root inode failed [ 947.596749] EXT4-fs (loop6): mount failed [ 947.629022] loop6: detected capacity change from 0 to 8336 [ 947.667670] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 947.677736] EXT4-fs (loop6): get root inode failed [ 947.678268] EXT4-fs (loop6): mount failed [ 948.131235] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:52:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 7) 00:52:59 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x51d8, 0x3, 0x7}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) set_tid_address(0x0) 00:52:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x2, 0x1008, 0x0, 0x0) 00:52:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe9f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xea1, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:52:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x6, 0x0) 00:52:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000040), 0x62) 00:52:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 8) [ 960.096975] loop0: detected capacity change from 0 to 8192 [ 960.102057] loop6: detected capacity change from 0 to 8336 [ 960.113809] loop1: detected capacity change from 0 to 8336 00:52:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 9) [ 960.126308] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 960.147691] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 960.164410] loop0: detected capacity change from 0 to 8192 [ 960.165897] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated 00:52:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 10) [ 960.173860] EXT4-fs (loop6): get root inode failed [ 960.174791] EXT4-fs (loop6): mount failed [ 960.177883] EXT4-fs (loop1): get root inode failed [ 960.178804] EXT4-fs (loop1): mount failed [ 960.182272] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 960.222933] loop6: detected capacity change from 0 to 8336 00:52:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 11) [ 960.274193] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 960.284493] EXT4-fs (loop6): get root inode failed 00:52:59 executing program 4: set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) [ 960.285486] EXT4-fs (loop6): mount failed 00:52:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 12) 00:52:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:52:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0x7ffff000}], 0x5, 0x1008, 0x0, 0x0) 00:52:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 960.470901] loop0: detected capacity change from 0 to 28799 [ 960.489041] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 960.491098] loop6: detected capacity change from 0 to 8336 [ 960.511859] loop0: detected capacity change from 0 to 28799 [ 960.522347] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 960.535021] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 960.537941] EXT4-fs (loop6): get root inode failed [ 960.538818] EXT4-fs (loop6): mount failed [ 960.597360] loop6: detected capacity change from 0 to 8336 [ 960.634267] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 960.641328] EXT4-fs (loop6): get root inode failed [ 960.642195] EXT4-fs (loop6): mount failed 00:53:11 executing program 4: prctl$PR_SVE_GET_VL(0x33, 0x14cd8) set_tid_address(0x0) set_tid_address(&(0x7f0000000000)) prctl$PR_SVE_GET_VL(0x33, 0x10448) 00:53:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x6, 0x0) 00:53:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x3, 0x1008, 0x0, 0x0) 00:53:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x7, 0x0) 00:53:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @none, 0xfffc}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:53:11 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 13) [ 972.313939] loop0: detected capacity change from 0 to 30847 [ 972.381686] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 972.384808] loop6: detected capacity change from 0 to 8336 [ 972.420255] loop0: detected capacity change from 0 to 30847 [ 972.434640] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 972.447401] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:53:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:53:11 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 14) 00:53:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 972.455773] EXT4-fs (loop6): get root inode failed [ 972.456235] EXT4-fs (loop6): mount failed [ 972.527642] loop6: detected capacity change from 0 to 8336 [ 972.536362] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 972.539077] EXT4-fs (loop6): get root inode failed [ 972.539612] EXT4-fs (loop6): mount failed 00:53:11 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 15) [ 972.570398] loop4: detected capacity change from 0 to 8336 00:53:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1048, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 972.612889] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz-executor.4: iget: special inode unallocated [ 972.617289] EXT4-fs (loop4): get root inode failed [ 972.618290] EXT4-fs (loop4): mount failed [ 972.817012] loop6: detected capacity change from 0 to 8336 [ 972.840031] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 972.848496] EXT4-fs (loop6): get root inode failed [ 972.848929] EXT4-fs (loop6): mount failed [ 972.872098] loop6: detected capacity change from 0 to 8336 [ 972.886644] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 972.896596] EXT4-fs (loop6): get root inode failed [ 972.897025] EXT4-fs (loop6): mount failed 00:53:21 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 16) 00:53:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x3, 0x1008, 0x0, 0x0) 00:53:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x4, 0x1008, 0x0, 0x0) 00:53:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x8, 0x0) 00:53:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x5, @any, 0x81}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x0, 0x5}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/124, &(0x7f0000000100)=0x7c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x10300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000003c0)={0x0, r3, 0x0, 0x7ff, 0x80, 0x4}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/116, 0xfffffd07}, {&(0x7f0000000240)=""/105, 0x6b}, {&(0x7f0000000680)=""/221, 0xd2}, {&(0x7f0000000580)=""/247}], 0x4) pidfd_send_signal(r2, 0x0, &(0x7f0000000480)={0x3b, 0x1, 0x2}, 0x0) accept(r0, &(0x7f0000000400)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000380)=0x80) [ 982.187871] loop6: detected capacity change from 0 to 8336 [ 982.202007] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 982.206799] EXT4-fs (loop6): get root inode failed [ 982.207220] EXT4-fs (loop6): mount failed [ 982.216883] loop6: detected capacity change from 0 to 8336 [ 982.230569] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 982.232685] EXT4-fs (loop6): get root inode failed [ 982.233110] EXT4-fs (loop6): mount failed [ 982.261157] loop0: detected capacity change from 0 to 65536 [ 982.263386] loop4: detected capacity change from 0 to 8336 [ 982.277495] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:53:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 982.294488] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz-executor.4: iget: special inode unallocated [ 982.299543] EXT4-fs (loop4): get root inode failed [ 982.299987] EXT4-fs (loop4): mount failed [ 982.331635] loop0: detected capacity change from 0 to 65536 [ 982.339046] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 982.341532] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:53:21 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 17) 00:53:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 982.471260] loop4: detected capacity change from 0 to 8336 00:53:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x208c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 982.544480] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz-executor.4: iget: special inode unallocated [ 982.555831] EXT4-fs (loop4): get root inode failed [ 982.556413] EXT4-fs (loop4): mount failed [ 982.569053] loop0: detected capacity change from 0 to 98304 00:53:21 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 18) [ 982.597669] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 982.612988] loop0: detected capacity change from 0 to 98304 [ 982.624420] loop6: detected capacity change from 0 to 8336 [ 982.626794] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 982.657560] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:53:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 982.695831] EXT4-fs (loop6): get root inode failed [ 982.696811] EXT4-fs (loop6): mount failed 00:53:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x7, 0x0) [ 982.774771] loop6: detected capacity change from 0 to 8336 [ 982.781913] loop0: detected capacity change from 0 to 131072 [ 982.792800] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 982.808531] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 982.810833] EXT4-fs (loop6): get root inode failed [ 982.811886] EXT4-fs (loop6): mount failed [ 982.820849] loop0: detected capacity change from 0 to 131072 [ 982.831779] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 983.100077] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:53:31 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 19) 00:53:31 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x6, 0x1008, 0x0, 0x0) 00:53:31 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x4, 0x1008, 0x0, 0x0) 00:53:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2090, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:31 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x4, 0x1008, 0x0, 0x0) 00:53:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x4000, 0x2}, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0)={0x3, "edea5e"}, 0x6) readv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000040)=""/243}, {&(0x7f0000000140)=""/150}, {&(0x7f0000000200)=""/66}, {&(0x7f0000001500)=""/223}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/177}, {&(0x7f0000000280)=""/25}], 0x3) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0xfffffffffffffffe, &(0x7f0000000300)) 00:53:31 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x9, 0x0) [ 992.264954] loop6: detected capacity change from 0 to 8336 [ 992.274040] loop0: detected capacity change from 0 to 163840 [ 992.276632] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 992.280703] EXT4-fs (loop6): get root inode failed [ 992.281127] EXT4-fs (loop6): mount failed [ 992.294631] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 992.338697] loop0: detected capacity change from 0 to 163840 [ 992.339880] loop6: detected capacity change from 0 to 8336 [ 992.352521] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 992.388377] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 992.398653] EXT4-fs (loop6): get root inode failed [ 992.399067] EXT4-fs (loop6): mount failed 00:53:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) fsync(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 00:53:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:31 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 20) 00:53:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 992.519719] loop0: detected capacity change from 0 to 196608 [ 992.522985] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 992.528166] loop6: detected capacity change from 0 to 8336 [ 992.530528] loop0: detected capacity change from 0 to 196608 [ 992.533937] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 992.537552] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 992.541029] EXT4-fs (loop6): get root inode failed [ 992.541458] EXT4-fs (loop6): mount failed 00:53:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 992.730373] loop0: detected capacity change from 0 to 229376 00:53:32 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 21) 00:53:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 992.753720] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 992.765653] loop0: detected capacity change from 0 to 229376 [ 992.782139] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 992.793874] loop6: detected capacity change from 0 to 8336 [ 992.838692] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 992.851057] EXT4-fs (loop6): get root inode failed [ 992.851870] EXT4-fs (loop6): mount failed [ 992.876530] loop6: detected capacity change from 0 to 8336 [ 992.896292] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 992.904245] EXT4-fs (loop6): get root inode failed [ 992.905038] EXT4-fs (loop6): mount failed 00:53:44 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 22) 00:53:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000100)) 00:53:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2408, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xa, 0x0) 00:53:44 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x8, 0x1008, 0x0, 0x0) 00:53:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2090, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1004.810807] loop1: detected capacity change from 0 to 8336 [ 1004.812029] loop6: detected capacity change from 0 to 8336 [ 1004.824035] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1004.827915] EXT4-fs (loop1): get root inode failed [ 1004.828812] EXT4-fs (loop1): mount failed [ 1004.841720] loop4: detected capacity change from 0 to 8336 [ 1004.851841] loop0: detected capacity change from 0 to 262144 [ 1004.863591] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1004.871111] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz-executor.4: iget: special inode unallocated 00:53:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x7, 0x0) [ 1004.889981] EXT4-fs (loop4): get root inode failed [ 1004.891325] EXT4-fs (loop4): mount failed [ 1004.893642] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1004.920842] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1004.936167] EXT4-fs (loop6): get root inode failed [ 1004.937260] EXT4-fs (loop6): mount failed [ 1004.986887] loop6: detected capacity change from 0 to 8336 [ 1004.988194] loop0: detected capacity change from 0 to 262144 [ 1004.993225] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1005.002555] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1005.022963] EXT4-fs (loop6): get root inode failed [ 1005.023770] EXT4-fs (loop6): mount failed 00:53:44 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 23) 00:53:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x4, 0x0) [ 1005.315305] loop0: detected capacity change from 0 to 264192 [ 1005.328989] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1005.355171] loop0: detected capacity change from 0 to 264192 [ 1005.357689] loop6: detected capacity change from 0 to 8336 [ 1005.377160] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1005.405561] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:53:44 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 24) [ 1005.428972] EXT4-fs (loop6): get root inode failed [ 1005.429831] EXT4-fs (loop6): mount failed [ 1005.485073] loop6: detected capacity change from 0 to 8336 00:53:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:44 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 25) [ 1005.532599] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1005.540739] EXT4-fs (loop6): get root inode failed [ 1005.541774] EXT4-fs (loop6): mount failed [ 1005.647948] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:53:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1005.709091] loop0: detected capacity change from 0 to 264192 00:53:45 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 26) [ 1005.752542] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1005.776774] loop0: detected capacity change from 0 to 264192 [ 1005.794513] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:53:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1005.898671] loop6: detected capacity change from 0 to 8336 [ 1005.999212] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1006.014651] EXT4-fs (loop6): get root inode failed [ 1006.015768] EXT4-fs (loop6): mount failed [ 1006.074032] loop6: detected capacity change from 0 to 8336 [ 1006.082680] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1006.090036] EXT4-fs (loop6): get root inode failed [ 1006.090918] EXT4-fs (loop6): mount failed 00:53:57 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xb, 0x0) 00:53:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:53:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xf, 0x1008, 0x0, 0x0) 00:53:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:57 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 27) 00:53:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1018.303946] loop0: detected capacity change from 0 to 264192 [ 1018.305971] loop1: detected capacity change from 0 to 8336 [ 1018.353641] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1018.357114] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated [ 1018.359177] loop4: detected capacity change from 0 to 8336 [ 1018.362354] EXT4-fs (loop1): get root inode failed [ 1018.362895] EXT4-fs (loop1): mount failed [ 1018.366800] loop6: detected capacity change from 0 to 8336 [ 1018.381630] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz-executor.4: iget: special inode unallocated [ 1018.386940] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1018.388373] EXT4-fs (loop4): get root inode failed [ 1018.388874] EXT4-fs (loop4): mount failed [ 1018.399596] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1018.410117] EXT4-fs (loop6): get root inode failed [ 1018.411076] EXT4-fs (loop6): mount failed 00:53:57 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 28) 00:53:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1018.452657] loop6: detected capacity change from 0 to 8336 00:53:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1018.472251] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1018.479910] EXT4-fs (loop6): get root inode failed [ 1018.480908] EXT4-fs (loop6): mount failed [ 1018.527856] loop0: detected capacity change from 0 to 264192 [ 1018.538211] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:53:57 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 1) 00:53:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:53:57 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (fail_nth: 1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:53:57 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 29) [ 1018.650339] FAULT_INJECTION: forcing a failure. [ 1018.650339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.651310] CPU: 0 UID: 0 PID: 8067 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 1018.651326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.651334] Call Trace: [ 1018.651338] [ 1018.651343] dump_stack_lvl+0xfa/0x120 [ 1018.651362] should_fail_ex+0x4d7/0x5e0 [ 1018.651382] _copy_from_user+0x30/0xd0 [ 1018.651402] move_addr_to_kernel.part.0+0x40/0x120 [ 1018.651418] __sys_connect+0xd4/0x1a0 [ 1018.651437] ? __pfx___sys_connect+0x10/0x10 [ 1018.651451] ? perf_trace_preemptirq_template+0x259/0x430 [ 1018.651474] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1018.651493] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1018.651513] ? ksys_write+0x1a3/0x240 [ 1018.651525] ? __pfx_ksys_write+0x10/0x10 [ 1018.651539] __x64_sys_connect+0x73/0xb0 [ 1018.651554] do_syscall_64+0xbf/0x360 [ 1018.651569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.651582] RIP: 0033:0x7f10b6f0ab19 [ 1018.651592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.651604] RSP: 002b:00007f10b4480188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1018.651616] RAX: ffffffffffffffda RBX: 00007f10b701df60 RCX: 00007f10b6f0ab19 [ 1018.651625] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000004 [ 1018.651632] RBP: 00007f10b44801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.651639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.651646] R13: 00007fff914ca5ff R14: 00007f10b4480300 R15: 0000000000022000 [ 1018.651661] [ 1018.654035] FAULT_INJECTION: forcing a failure. [ 1018.654035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.676788] CPU: 1 UID: 0 PID: 8065 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 1018.676822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.676837] Call Trace: [ 1018.676846] [ 1018.676856] dump_stack_lvl+0xfa/0x120 [ 1018.676889] should_fail_ex+0x4d7/0x5e0 [ 1018.676932] _copy_from_user+0x30/0xd0 [ 1018.676972] __ext4_ioctl+0x739/0x38b0 [ 1018.677006] ? get_pid_task+0x107/0x250 [ 1018.677048] ? __pfx___ext4_ioctl+0x10/0x10 [ 1018.677074] ? find_held_lock+0x2b/0x80 [ 1018.677112] ? ksys_write+0x121/0x240 [ 1018.677135] ? lock_is_held_type+0x9e/0x120 [ 1018.677161] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1018.677195] ? do_vfs_ioctl+0x125/0x1470 [ 1018.677231] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1018.677261] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1018.677291] ? __mutex_unlock_slowpath+0x91/0x650 [ 1018.677318] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1018.677348] ? __pfx___bfs+0xb/0x10 [ 1018.677384] ? __fget_files+0x34/0x3b0 [ 1018.677421] ? find_held_lock+0x2b/0x80 [ 1018.677463] ? __fget_files+0x203/0x3b0 [ 1018.677499] ? lock_release+0xc8/0x290 [ 1018.677533] ? selinux_file_ioctl+0xb9/0x280 [ 1018.677560] ? __pfx_ext4_ioctl+0x10/0x10 [ 1018.677590] __x64_sys_ioctl+0x18f/0x210 [ 1018.677624] do_syscall_64+0xbf/0x360 [ 1018.677654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.677679] RIP: 0033:0x7f02a3fe3b19 [ 1018.677698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.677722] RSP: 002b:00007f02a1559188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1018.677745] RAX: ffffffffffffffda RBX: 00007f02a40f6f60 RCX: 00007f02a3fe3b19 [ 1018.677762] RDX: 0000000020000000 RSI: 000000004004662b RDI: 0000000000000003 [ 1018.677777] RBP: 00007f02a15591d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.677792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.677807] R13: 00007fffd7919c5f R14: 00007f02a1559300 R15: 0000000000022000 [ 1018.677839] 00:53:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1018.830770] loop0: detected capacity change from 0 to 264192 [ 1018.831832] loop6: detected capacity change from 0 to 8336 [ 1018.839410] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1018.844560] loop0: detected capacity change from 0 to 264192 [ 1018.846105] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1018.855615] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1018.859946] EXT4-fs (loop6): get root inode failed [ 1018.860375] EXT4-fs (loop6): mount failed [ 1019.186128] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:54:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 2) 00:54:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x10, 0x1008, 0x0, 0x0) 00:54:09 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 30) 00:54:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4810, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (fail_nth: 2) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:54:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:54:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xc, 0x0) 00:54:09 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1030.385596] loop0: detected capacity change from 0 to 264192 [ 1030.386712] loop6: detected capacity change from 0 to 8336 00:54:09 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 31) [ 1030.443810] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1030.445597] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1030.459426] EXT4-fs (loop6): get root inode failed [ 1030.460853] EXT4-fs (loop6): mount failed [ 1030.484873] loop0: detected capacity change from 0 to 264192 [ 1030.509837] loop6: detected capacity change from 0 to 8336 [ 1030.526239] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1030.548520] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1030.568478] EXT4-fs (loop6): get root inode failed [ 1030.569280] EXT4-fs (loop6): mount failed 00:54:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 3) 00:54:10 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) pipe(&(0x7f0000000080)) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)={0x83, 0x4f, "6834d50cabd52d33ef16da2ca174130508868c088f65fb661d3e9471fc9c26f42a323171c3c3615bf9a06385e99adf4713949d4b32864b0f565b1fc383944dfe2b2162c5021eb6b88eb14e9b9f84c3"}) 00:54:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:54:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:10 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 32) [ 1030.788341] loop0: detected capacity change from 0 to 264192 [ 1030.796505] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:54:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1030.805274] loop0: detected capacity change from 0 to 264192 [ 1030.816365] loop6: detected capacity change from 0 to 8336 [ 1030.818558] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1030.843644] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1030.850490] EXT4-fs (loop6): get root inode failed [ 1030.850923] EXT4-fs (loop6): mount failed [ 1030.881638] loop6: detected capacity change from 0 to 8336 [ 1030.900473] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1030.908527] EXT4-fs (loop6): get root inode failed [ 1030.908971] EXT4-fs (loop6): mount failed [ 1031.255642] FAULT_INJECTION: forcing a failure. [ 1031.255642] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.256624] CPU: 0 UID: 0 PID: 8103 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 1031.256641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.256649] Call Trace: [ 1031.256653] [ 1031.256658] dump_stack_lvl+0xfa/0x120 [ 1031.256679] should_fail_ex+0x4d7/0x5e0 [ 1031.256699] ? taskstats_exit+0x672/0xba0 [ 1031.256718] should_failslab+0xc2/0x120 [ 1031.256732] kmem_cache_alloc_noprof+0x5f/0x470 [ 1031.256749] ? acct_collect+0x654/0x880 [ 1031.256765] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1031.256784] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1031.256804] taskstats_exit+0x672/0xba0 [ 1031.256821] ? find_held_lock+0x2b/0x80 [ 1031.256839] ? __pfx_taskstats_exit+0x10/0x10 [ 1031.256855] ? acct_update_integrals+0x36e/0x430 [ 1031.256872] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1031.256891] ? acct_update_integrals+0x36e/0x430 [ 1031.256910] do_exit+0x5d1/0x2970 [ 1031.256922] ? perf_trace_preemptirq_template+0x259/0x430 [ 1031.256941] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1031.256960] ? __pfx_do_exit+0x10/0x10 [ 1031.256972] ? find_held_lock+0x2b/0x80 [ 1031.256987] ? get_signal+0x835/0x2340 [ 1031.257005] do_group_exit+0xd3/0x2a0 [ 1031.257018] get_signal+0x2315/0x2340 [ 1031.257032] ? l2cap_sock_connect+0x20e/0x720 [ 1031.257051] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 1031.257071] ? __pfx_get_signal+0x10/0x10 [ 1031.257087] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1031.257107] arch_do_signal_or_restart+0x80/0x790 [ 1031.257124] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1031.257140] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1031.257159] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1031.257177] ? ksys_write+0x1a3/0x240 [ 1031.257189] ? __pfx_ksys_write+0x10/0x10 [ 1031.257203] exit_to_user_mode_loop+0x8b/0x100 [ 1031.257215] do_syscall_64+0x2f7/0x360 [ 1031.257229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.257241] RIP: 0033:0x7f10b6f0ab19 [ 1031.257251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.257262] RSP: 002b:00007f10b4480188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1031.257274] RAX: fffffffffffffffc RBX: 00007f10b701df60 RCX: 00007f10b6f0ab19 [ 1031.257282] RDX: 000000000000000e RSI: 0000000020000000 RDI: 0000000000000004 [ 1031.257289] RBP: 00007f10b44801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.257296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.257303] R13: 00007fff914ca5ff R14: 00007f10b4480300 R15: 0000000000022000 [ 1031.257319] 00:54:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 4) 00:54:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:54:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 33) 00:54:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c20, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xd, 0x0) 00:54:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0xfffffffe, 0x1008, 0x0, 0x0) 00:54:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05630440000000030000004000000000000000000e634c40030000000000000004000000"], 0xff, 0x0, &(0x7f0000000440)="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"}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0xfd, 0x1) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x13c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4c}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5c}, @NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "6187674242c3fe4aca148c9468a51f5fa56f7d746b150f23fa7d765e0901f970c87270e55bc0d18a5d3b2d9316e88bb7800cf6"}, @NL80211_ATTR_VENDOR_DATA={0xd1, 0xc5, "6ba10d83d7cdaffcf3741c8fb71841841e18cea528deed7cffbb5033eab59de4389e714abe95f5607a09dc76c48f78851bea9717a08dd02f9237865a9aee94801ec15fbc244587166a4d1ba2a3d42317ab99b1bc0222e9ef5cc56a958b859d1786074c01059e45bfe48d963602d86c642d3a0d12c72b3f767aaf9936df70d7daf6aa8b51017207ec53ca269d7179f21b7c1d9f031a673f9f0f9a3a63fdb87cdf47f4bbb11b997cede12ba05c60f8fbfa827cd553be3871265d3df15394dff7ba867d3291853eed5218a301a7df"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x28000000}, 0x20008081) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000680)=@get={0x1, &(0x7f0000000580)=""/247, 0x3}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)={0x5c, r4, 0x200, 0x70bd2b, 0x25dedbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040805}, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) 00:54:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x230e0000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1042.729119] loop6: detected capacity change from 0 to 8336 [ 1042.753503] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1042.764360] EXT4-fs (loop6): get root inode failed [ 1042.765121] EXT4-fs (loop6): mount failed [ 1042.850678] loop0: detected capacity change from 0 to 264192 00:54:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 5) [ 1042.876113] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1042.905211] loop0: detected capacity change from 0 to 264192 [ 1042.916488] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:54:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9020, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1042.968974] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:54:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 34) 00:54:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1004, 0x0, 0x0) 00:54:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1043.052778] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1043.114276] loop6: detected capacity change from 0 to 8336 00:54:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 6) [ 1043.191664] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1043.213176] EXT4-fs (loop6): get root inode failed [ 1043.213975] EXT4-fs (loop6): mount failed [ 1043.249022] loop0: detected capacity change from 0 to 264192 [ 1043.267010] loop6: detected capacity change from 0 to 8336 [ 1043.273231] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1043.286229] loop0: detected capacity change from 0 to 264192 00:54:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 35) [ 1043.289179] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1043.294369] EXT4-fs (loop6): get root inode failed [ 1043.295172] EXT4-fs (loop6): mount failed [ 1043.320541] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1043.660892] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1043.720281] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:54:33 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 7) 00:54:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:54:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f0e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:33 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:54:33 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 36) 00:54:33 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1005, 0x0, 0x0) 00:54:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xffffffffffffff96) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) dup2(r1, r3) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:54:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xe, 0x0) [ 1054.311759] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1054.330072] loop0: detected capacity change from 0 to 264192 [ 1054.331842] loop6: detected capacity change from 0 to 8336 [ 1054.332671] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1054.335112] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1054.376041] loop0: detected capacity change from 0 to 264192 [ 1054.384299] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1054.389479] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1054.396807] EXT4-fs (loop6): get root inode failed [ 1054.397223] EXT4-fs (loop6): mount failed 00:54:33 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 37) 00:54:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080), 0x0) [ 1054.426947] loop6: detected capacity change from 0 to 8336 00:54:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x35f9f7c9, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:54:33 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 8) [ 1054.451825] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1054.458819] EXT4-fs (loop6): get root inode failed [ 1054.459326] EXT4-fs (loop6): mount failed 00:54:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1054.547230] loop0: detected capacity change from 0 to 264192 00:54:33 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 38) [ 1054.605650] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1054.613852] loop6: detected capacity change from 0 to 8336 [ 1054.623067] loop0: detected capacity change from 0 to 264192 [ 1054.629400] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1054.633107] EXT4-fs (loop6): get root inode failed [ 1054.634025] EXT4-fs (loop6): mount failed [ 1054.635129] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:54:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 9) [ 1054.663059] loop6: detected capacity change from 0 to 8336 [ 1054.721994] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:54:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 10) [ 1054.736753] EXT4-fs (loop6): get root inode failed [ 1054.737202] EXT4-fs (loop6): mount failed [ 1054.742495] FAULT_INJECTION: forcing a failure. [ 1054.742495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.743555] CPU: 0 UID: 0 PID: 8241 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250715 #1 PREEMPT(voluntary) [ 1054.743572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.743581] Call Trace: [ 1054.743585] [ 1054.743590] dump_stack_lvl+0xfa/0x120 [ 1054.743610] should_fail_ex+0x4d7/0x5e0 [ 1054.743634] _copy_to_user+0x32/0xd0 [ 1054.743655] simple_read_from_buffer+0xe0/0x180 [ 1054.743677] proc_fail_nth_read+0x189/0x270 [ 1054.743699] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1054.743719] ? security_file_permission+0x22/0x90 [ 1054.743738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1054.743757] vfs_read+0x1eb/0xbe0 [ 1054.743782] ? __pfx_vfs_read+0x10/0x10 [ 1054.743801] ? lock_release+0xc8/0x290 [ 1054.743819] ? __fget_files+0x20d/0x3b0 [ 1054.743849] ksys_read+0x121/0x240 [ 1054.743861] ? __pfx_ksys_read+0x10/0x10 [ 1054.743876] do_syscall_64+0xbf/0x360 [ 1054.743892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.743905] RIP: 0033:0x7fe018ff469c [ 1054.743915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1054.743927] RSP: 002b:00007fe0165b7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1054.743939] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe018ff469c [ 1054.743948] RDX: 000000000000000f RSI: 00007fe0165b71e0 RDI: 0000000000000004 [ 1054.743955] RBP: 00007fe0165b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.743964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.743971] R13: 00007ffe6d04f75f R14: 00007fe0165b7300 R15: 0000000000022000 [ 1054.743988] [ 1054.786662] loop0: detected capacity change from 0 to 264192 [ 1054.788643] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:54:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1054.791786] loop0: detected capacity change from 0 to 264192 [ 1054.794115] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1062.521864] kworker/u9:0 (25) used greatest stack depth: 23776 bytes left 00:54:43 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:54:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xf, 0x0) 00:54:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa10e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x80}, 0xe) pwritev2(r0, &(0x7f0000002400)=[{&(0x7f0000000040)="ec047f3332a259328cd20f6a519689114591f04f54578453cb9f5bb446b9b5ee67b8b045a939574150e54485c638c69a37817db6c9b6e54c2af8d2a8316eb2943d86f2c42303330785835c8ae848324e10c31c8d0bcca964893cbdac7e50e7e708e8d439abcea15f3e6f56150da11b0e5c7f4e045c20147f55dfeb3fbac998132ccc90b79c4dd796771f6a4ce93abf9443bb31a6929299b83a7d983afd9a1d26574f62a0c8a44f24be758a7d9e108a306f83500fcadbfda643c32e427d984a83973d74", 0xc3}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="701ee1740d119daa6cbf3254f4d2f1b49e9662", 0x13}, {&(0x7f0000001180)="a53acd39897999869476d48871d429333a05e99c70123a393a258447b100c863c378fae595814667b3aa1c08d8d1763ccd8b46b4d1c61ff3cb44d2cda6ab44aeee6493a4a46fba7b9b10554a82f0b3cf1050861dd98546e33290cc9a19", 0x5d}, {&(0x7f0000001200)="4b362107e3e47e6b1d883aafd08e6008d03b", 0x12}, {&(0x7f0000001240)="292a014704ecaf0d3a3864d12c3b287646047468cf5a1e29a37e4c9609dd74a69f954a55c1bcacdea8bb368a9388f8276a05113548609aa153edc80f4452cad27b6385b601b75743b20f1682613f1b945d258759d37b7b9cea564cf9f2262d401a76b590eab085edf8997bc406a66c2153330cd44e512b30513010ea0055353f3106ac2a6209cc7e70484470468a19526d8f9b8701e0098728f955edf2b139e2d0f196a32f7419ad53ae68d2c2", 0xad}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="70768d2a1f5c50ec3f3977ff7042994368a0a551192ac2a62c2a0bba9971c7531588a7df698c69c0d2f5d3f5881e70f569c3b8b81a42e52b7f7c3d26be8fca6c7276288619f2212a0b3ce24173778a655622a34856bf5662a282000a3750a0e7d8d859163aee802af2a57836e1aa68699a86427ec4301417a72e582d382a841e38bb8e1736129aa9cc06959f5ef178de36ef8868c08bee5e558ef3894ad2e831c0d5a18cd495e7ec7c", 0xa9}, {&(0x7f00000023c0)="8938b53e1512d035377af6bdd257baff46aa3f655b26df0cf59500e70ab5b5730fc0a813f12880fdc016024243eec7e45294", 0x32}], 0x9, 0x591, 0x7fff, 0x8) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:54:43 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 11) 00:54:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:54:43 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1007, 0x0, 0x0) 00:54:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1064.090575] loop0: detected capacity change from 0 to 264192 [ 1064.093138] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1064.095724] loop0: detected capacity change from 0 to 264192 [ 1064.097384] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:54:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1064.153825] loop6: detected capacity change from 0 to 8336 00:54:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x7, 0xf, "3686b5cabc074007554dffd95d5cd4"}}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1064.206670] loop0: detected capacity change from 0 to 264192 [ 1064.239153] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1064.239769] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1064.245200] EXT4-fs (loop6): get root inode failed [ 1064.246025] EXT4-fs (loop6): mount failed [ 1064.262421] loop6: detected capacity change from 0 to 8336 [ 1064.281548] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1064.287022] EXT4-fs (loop6): get root inode failed [ 1064.287850] EXT4-fs (loop6): mount failed 00:54:43 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x2, &(0x7f0000000000)) 00:54:43 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 12) 00:54:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x53ef0000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:54:54 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1009, 0x0, 0x0) 00:54:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 13) 00:54:54 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x10, 0x0) 00:54:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:54:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe001, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:54 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4b47, &(0x7f0000000000)) 00:54:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:54:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) dup2(r0, r0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1074.837212] loop0: detected capacity change from 0 to 264192 [ 1074.856966] loop6: detected capacity change from 0 to 8336 00:54:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 14) [ 1074.874923] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1074.902134] loop0: detected capacity change from 0 to 264192 [ 1074.909784] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1074.915188] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1074.921268] EXT4-fs (loop6): get root inode failed [ 1074.921714] EXT4-fs (loop6): mount failed 00:54:54 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4b49, &(0x7f0000000000)) 00:54:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 15) 00:54:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendto(r0, &(0x7f0000000080)="2909d08ec783f40da70c390ec6389c8ed8ff113283c59bc0703ef2299eb303d01d8d6e9fe523a313d4501824e812303422337d6605535cd1d943973626de4d41840d330bea293b83d93ceab723e05a61afdf4ea6b6d43ddb5967655fcbebd1cb5341f527f7ea75fddcbbb97bff72a6d89727c2d77d9f274109013a173ea52cc5978165b922b8031516755435478c11bcd8129ce89be85a22ab8af2db4d896e1f5f6f23186c6f10c8ecb3f34ba89e1e42dc5bf26cdcaf6f4965e215f24533c74ddebef63a40ffc8205d6937311e67e15e0f93cb7b606c05b9", 0xd8, 0x20000041, &(0x7f0000000180)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1) [ 1074.969804] loop6: detected capacity change from 0 to 8336 00:54:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1075.012583] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1075.023279] EXT4-fs (loop6): get root inode failed [ 1075.024394] EXT4-fs (loop6): mount failed 00:54:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 16) 00:54:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:54:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 17) [ 1075.215963] loop0: detected capacity change from 0 to 264192 [ 1075.268114] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1075.272390] loop6: detected capacity change from 0 to 8336 [ 1075.326635] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1075.333872] EXT4-fs (loop6): get root inode failed [ 1075.334763] EXT4-fs (loop6): mount failed [ 1075.365768] loop6: detected capacity change from 0 to 8336 [ 1075.388640] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1075.398732] EXT4-fs (loop6): get root inode failed [ 1075.401558] EXT4-fs (loop6): mount failed 00:55:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 18) 00:55:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:07 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x541b, &(0x7f0000000000)) 00:55:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x100f, 0x0, 0x0) 00:55:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:55:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x11, 0x0) 00:55:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000580)) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000080)=""/241, 0xf1}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000380)=""/238, 0xee}], 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000500)) flock(r0, 0xe) [ 1088.015786] loop6: detected capacity change from 0 to 8336 [ 1088.025500] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1088.027408] EXT4-fs (loop6): get root inode failed [ 1088.028117] EXT4-fs (loop6): mount failed [ 1088.048996] loop6: detected capacity change from 0 to 8336 [ 1088.071415] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1088.073407] EXT4-fs (loop6): get root inode failed [ 1088.074112] EXT4-fs (loop6): mount failed [ 1088.074397] loop0: detected capacity change from 0 to 264192 [ 1088.098133] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1088.110786] loop0: detected capacity change from 0 to 264192 [ 1088.113353] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff07, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc9f7f935, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1088.208372] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:55:07 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5421, &(0x7f0000000000)) 00:55:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 19) [ 1088.302798] loop6: detected capacity change from 0 to 8336 [ 1088.322620] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1088.330108] EXT4-fs (loop6): get root inode failed [ 1088.331147] EXT4-fs (loop6): mount failed [ 1088.411602] loop0: detected capacity change from 0 to 264192 [ 1088.411918] loop6: detected capacity change from 0 to 8336 00:55:07 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5450, &(0x7f0000000000)) [ 1088.426994] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1088.428484] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1088.433164] EXT4-fs (loop6): get root inode failed [ 1088.434088] EXT4-fs (loop6): mount failed [ 1088.465184] loop0: detected capacity change from 0 to 264192 [ 1088.481601] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 20) 00:55:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xcb000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:07 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5451, &(0x7f0000000000)) [ 1088.610011] loop6: detected capacity change from 0 to 8336 [ 1088.665599] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1088.671366] EXT4-fs (loop6): get root inode failed [ 1088.671900] EXT4-fs (loop6): mount failed [ 1088.694739] loop6: detected capacity change from 0 to 8336 00:55:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 21) [ 1088.703250] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1088.708829] EXT4-fs (loop6): get root inode failed [ 1088.709240] EXT4-fs (loop6): mount failed [ 1088.723360] loop0: detected capacity change from 0 to 264192 [ 1088.782686] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1088.802936] loop0: detected capacity change from 0 to 264192 [ 1088.817816] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1088.887187] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:55:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 22) 00:55:18 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5452, &(0x7f0000000000)) 00:55:18 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x12, 0x0) 00:55:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000080)=""/153, 0x99}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/170, 0xaa}, {&(0x7f0000001600)=""/213, 0xd5}, {&(0x7f0000001700)=""/66, 0x42}, {&(0x7f0000001780)=""/65, 0x41}], 0xa) 00:55:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1010, 0x0, 0x0) 00:55:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x14c00) vmsplice(r1, &(0x7f0000001280)=[{&(0x7f0000000100)="3f78da3f45f5485d8a29050afdcc9f42795b8d3f17f0d7a0f2923506348a4d91ecfde0e894cd9ceb8df1570781fa058fad15683b6e456f875dda09", 0x3b}, {&(0x7f0000000140)="e3d9bea81e80ef0c97ae0843953e5ffc667b8768a08d91d249dcbb5c525b8bce457b8112ac15becd02adb45f0187be2bc9d16186f4fe022caf296df2aa62fca7dd25d839cc1d03215eb59a2037c5dc6590c2e0b1642d9e83b86b0e372b9b649e9cb93e899f610967c2ed9703f6a822f45a3acefc20ba9aed", 0x78}, {&(0x7f00000001c0)="24f7e3c2aa88b26570c9da292dafff35fd1bc1d0ad6855e55839a44caaf783cae23dadf334b29f1c3b4df00c8f605650f4a6e2ea4e6c13ba7bd10738b96559c2773a116b6c566eda40915fdf0a1c12e68aa13e21ceeb1b5bbb2b69ffd9960b82870cd931e9dbe3f45f96e41b2112160607d996bbaf01586ce9a9963c286c0c6d3e52964604352a9a00761f66cd41efaa36349b42ee62116c", 0x98}, {&(0x7f0000000280)="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", 0x1000}], 0x4, 0x5) 00:55:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1099.094109] loop6: detected capacity change from 0 to 8336 [ 1099.098736] loop0: detected capacity change from 0 to 264192 00:55:18 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5460, &(0x7f0000000000)) [ 1099.130981] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1099.131581] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1099.139992] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1099.150623] EXT4-fs (loop6): get root inode failed [ 1099.151408] EXT4-fs (loop6): mount failed [ 1099.153394] loop0: detected capacity change from 0 to 264192 00:55:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 23) [ 1099.177059] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1099.185705] loop6: detected capacity change from 0 to 8336 [ 1099.206236] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1099.215685] EXT4-fs (loop6): get root inode failed [ 1099.216532] EXT4-fs (loop6): mount failed 00:55:18 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6609, &(0x7f0000000000)) 00:55:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:18 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:18 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 24) [ 1099.336945] loop0: detected capacity change from 0 to 264192 [ 1099.349793] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1099.356360] loop0: detected capacity change from 0 to 264192 [ 1099.365797] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1099.372402] loop6: detected capacity change from 0 to 8336 00:55:18 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x660c, &(0x7f0000000000)) [ 1099.391796] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1099.394276] EXT4-fs (loop6): get root inode failed [ 1099.394709] EXT4-fs (loop6): mount failed [ 1099.412583] loop6: detected capacity change from 0 to 8336 [ 1099.422698] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1099.423886] EXT4-fs (loop6): get root inode failed [ 1099.424285] EXT4-fs (loop6): mount failed [ 1099.914251] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:55:28 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 25) 00:55:28 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) 00:55:28 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x13, 0x0) 00:55:28 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, &(0x7f0000000000)) 00:55:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1f48, 0x0, 0x0) 00:55:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:55:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1109.580395] loop0: detected capacity change from 0 to 264192 [ 1109.591493] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1109.592678] loop6: detected capacity change from 0 to 8336 [ 1109.600331] loop0: detected capacity change from 0 to 264192 [ 1109.606599] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1109.612580] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1109.616522] EXT4-fs (loop6): get root inode failed [ 1109.617052] EXT4-fs (loop6): mount failed [ 1109.643051] loop6: detected capacity change from 0 to 8336 00:55:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1109.669202] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1109.672866] EXT4-fs (loop6): get root inode failed [ 1109.673280] EXT4-fs (loop6): mount failed [ 1109.698406] loop0: detected capacity change from 0 to 264192 [ 1109.705532] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:29 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 26) 00:55:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:29 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6612, &(0x7f0000000000)) 00:55:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1109.822237] loop6: detected capacity change from 0 to 8336 [ 1109.836981] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1109.840745] EXT4-fs (loop6): get root inode failed [ 1109.841160] EXT4-fs (loop6): mount failed [ 1109.852596] loop0: detected capacity change from 0 to 264192 [ 1109.864479] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1109.871755] loop6: detected capacity change from 0 to 8336 00:55:29 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6628, &(0x7f0000000000)) [ 1109.897358] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1109.903611] EXT4-fs (loop6): get root inode failed [ 1109.904750] EXT4-fs (loop6): mount failed [ 1109.915167] loop0: detected capacity change from 0 to 264192 [ 1109.922395] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:29 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 27) [ 1110.008847] loop6: detected capacity change from 0 to 8336 00:55:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1110.028158] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1110.029584] EXT4-fs (loop6): get root inode failed [ 1110.030075] EXT4-fs (loop6): mount failed [ 1110.046724] loop6: detected capacity change from 0 to 8336 [ 1110.059220] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1110.063006] EXT4-fs (loop6): get root inode failed [ 1110.063749] EXT4-fs (loop6): mount failed 00:55:29 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40046629, &(0x7f0000000000)) [ 1110.128199] loop0: detected capacity change from 0 to 264192 [ 1110.144807] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffe000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x8800000, 0x0, 0x0) 00:55:40 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @none, 0x7}, 0xe) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000640)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/13, 0xd}], 0x1, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/124, 0x7c}, {&(0x7f00000018c0)=""/197, 0xc5}, {&(0x7f00000019c0)=""/174, 0xae}, {&(0x7f0000001a80)=""/146, 0x92}], 0x5, &(0x7f0000001bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/191, 0xbf}], 0x1}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001e80)=""/239, 0xef}, {&(0x7f0000001f80)=""/61, 0x3d}], 0x2, &(0x7f0000002000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f00000021c0), 0x0, &(0x7f0000002200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x7, 0x40, &(0x7f0000002400)) clock_gettime(0x0, &(0x7f0000002480)={0x0, 0x0}) ppoll(&(0x7f0000002440)=[{0xffffffffffffffff, 0x88e4}, {r0, 0x130c}, {r1, 0x100}, {r0, 0x100}, {r3, 0x500}, {r5, 0x80}], 0x6, &(0x7f00000024c0)={r6, r7+60000000}, &(0x7f0000002500)={[0x7]}, 0x8) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r8, &(0x7f0000002700)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fff, 0x2}, 0xe) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) shutdown(r9, 0x1) 00:55:40 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40049409, &(0x7f0000000000)) 00:55:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x14, 0x0) 00:55:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @none}, 0xe) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x7ffe}, 0x16, 0x3) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="93f035bca28a7bab46e455a8ba9b32d2c7816ee17d67fd14"], 0x1c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000100)={{r4}, "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"}) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:55:40 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 28) 00:55:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1121.093071] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1121.102310] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1121.123280] loop6: detected capacity change from 0 to 28799 00:55:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0xffffffff, 0x0, 0x0) [ 1121.149531] loop0: detected capacity change from 0 to 264192 [ 1121.154550] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1121.157717] EXT4-fs (loop6): get root inode failed [ 1121.158535] EXT4-fs (loop6): mount failed [ 1121.165071] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1121.207263] loop6: detected capacity change from 0 to 28799 [ 1121.212837] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1121.216799] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1121.239060] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1121.250821] EXT4-fs (loop6): get root inode failed [ 1121.251669] EXT4-fs (loop6): mount failed 00:55:40 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 29) 00:55:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x15, 0x0) 00:55:40 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086602, &(0x7f0000000000)) 00:55:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x0, 0x0) 00:55:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:40 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 30) [ 1121.500262] loop6: detected capacity change from 0 to 32768 [ 1121.512349] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1121.523872] EXT4-fs (loop6): get root inode failed [ 1121.524854] EXT4-fs (loop6): mount failed [ 1121.924788] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1121.925374] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1121.977535] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1121.983397] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:55:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x2, 0x0) 00:55:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x16, 0x0) 00:55:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:53 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086604, &(0x7f0000000000)) 00:55:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:55:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 31) 00:55:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x174, @any, 0x81, 0x1}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) finit_module(r0, &(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x4) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000140), 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000200)=ANY=[@ANYBLOB="e77006c9ff0803e96cf1db291d00f4", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @any, 0x100, 0x1}, 0xe) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9, @any, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:55:53 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0x6) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 1133.885241] loop0: detected capacity change from 0 to 264192 [ 1133.907901] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1133.915818] EXT4-fs warning (device sda): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 1133.921212] loop6: detected capacity change from 0 to 65536 [ 1133.950908] loop0: detected capacity change from 0 to 264192 [ 1133.971683] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:53 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086607, &(0x7f0000000000)) [ 1134.024836] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:55:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 32) [ 1134.049977] EXT4-fs (loop6): get root inode failed [ 1134.050972] EXT4-fs (loop6): mount failed [ 1134.103245] loop6: detected capacity change from 0 to 65536 [ 1134.122298] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1134.129373] EXT4-fs (loop6): get root inode failed [ 1134.133343] EXT4-fs (loop6): mount failed 00:55:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:55:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1134.297895] loop0: detected capacity change from 0 to 264192 [ 1134.312033] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:53 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6609, &(0x7f0000000000)) [ 1134.331460] loop0: detected capacity change from 0 to 264192 [ 1134.349950] loop6: detected capacity change from 0 to 98304 [ 1134.350008] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:55:53 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 33) [ 1134.376043] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1134.380385] EXT4-fs (loop6): get root inode failed [ 1134.381016] EXT4-fs (loop6): mount failed 00:55:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1134.423105] loop6: detected capacity change from 0 to 98304 [ 1134.456215] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1134.459927] EXT4-fs (loop6): get root inode failed [ 1134.460547] EXT4-fs (loop6): mount failed [ 1134.529989] loop0: detected capacity change from 0 to 264192 [ 1134.543083] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1134.555923] loop0: detected capacity change from 0 to 264192 [ 1134.562719] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:56:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) pread64(r0, &(0x7f00000002c0)=""/176, 0xb0, 0xe0a) pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x3) 00:56:03 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x3, 0x0) 00:56:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:03 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4008662c, &(0x7f0000000000)) 00:56:03 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x17, 0x0) 00:56:03 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_open_pts(0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f00000000c0)=""/143, 0x8f}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) 00:56:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 34) [ 1143.884015] loop6: detected capacity change from 0 to 131072 [ 1143.893941] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1143.897348] EXT4-fs (loop6): get root inode failed [ 1143.897878] EXT4-fs (loop6): mount failed [ 1143.903036] loop0: detected capacity change from 0 to 264192 [ 1143.910314] loop6: detected capacity change from 0 to 131072 00:56:03 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40087602, &(0x7f0000000000)) [ 1143.917292] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1143.919722] EXT4-fs (loop6): get root inode failed [ 1143.919758] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1143.920390] EXT4-fs (loop6): mount failed [ 1143.949055] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1143.953960] loop0: detected capacity change from 0 to 264192 [ 1143.972450] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:56:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 35) [ 1144.008918] loop6: detected capacity change from 0 to 163840 [ 1144.017319] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1144.020958] EXT4-fs (loop6): get root inode failed [ 1144.021382] EXT4-fs (loop6): mount failed [ 1144.028507] EXT4-fs warning (device sda): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. 00:56:03 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:03 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 36) 00:56:03 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x400c6615, &(0x7f0000000000)) [ 1144.177875] loop6: detected capacity change from 0 to 196608 [ 1144.185399] loop0: detected capacity change from 0 to 264192 [ 1144.262331] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1144.271188] loop0: detected capacity change from 0 to 264192 [ 1144.277915] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1144.299002] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1144.308242] EXT4-fs (loop6): get root inode failed [ 1144.309066] EXT4-fs (loop6): mount failed [ 1144.715910] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:56:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x18, 0x0) 00:56:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 37) 00:56:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff97, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:12 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40106614, &(0x7f0000000000)) 00:56:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x4, 0x200}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000140)=0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x4, 0x200}) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:56:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:56:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x4, 0x0) 00:56:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 38) 00:56:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 39) [ 1153.674728] loop0: detected capacity change from 0 to 264192 [ 1153.685179] loop6: detected capacity change from 0 to 229376 [ 1153.702885] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1153.715623] loop0: detected capacity change from 0 to 264192 [ 1153.722346] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1153.725530] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:56:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 40) [ 1153.741485] EXT4-fs (loop6): get root inode failed [ 1153.741907] EXT4-fs (loop6): mount failed [ 1153.760770] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:56:13 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x401c5820, &(0x7f0000000000)) [ 1153.772325] loop6: detected capacity change from 0 to 229376 00:56:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1153.815295] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1153.823083] EXT4-fs (loop6): get root inode failed [ 1153.823907] EXT4-fs (loop6): mount failed 00:56:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 41) 00:56:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1153.934159] loop0: detected capacity change from 0 to 264192 [ 1153.947542] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1153.967914] loop6: detected capacity change from 0 to 262144 00:56:13 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4020940d, &(0x7f0000000000)) [ 1154.020132] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1154.021589] EXT4-fs (loop6): get root inode failed [ 1154.021998] EXT4-fs (loop6): mount failed [ 1154.028081] loop6: detected capacity change from 0 to 262144 [ 1154.039123] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1154.060094] EXT4-fs (loop6): get root inode failed 00:56:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffd, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1154.060625] EXT4-fs (loop6): mount failed [ 1154.145165] loop0: detected capacity change from 0 to 264192 [ 1154.154385] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1154.170026] loop0: detected capacity change from 0 to 264192 [ 1154.183193] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1154.513971] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:56:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x2, 0x20}) 00:56:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x5, 0x0) 00:56:24 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x19, 0x0) 00:56:24 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40286608, &(0x7f0000000000)) 00:56:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) (fail_nth: 42) 00:56:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1c, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2000, @fd=r0, 0x2, 0x401, 0x7, 0x1d, 0x1, {0x1, r3}}, 0x3f) [ 1164.932911] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 1164.941707] loop6: detected capacity change from 0 to 264192 [ 1164.960770] loop0: detected capacity change from 0 to 264192 [ 1165.013406] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1165.035473] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1165.046878] EXT4-fs (loop6): get root inode failed [ 1165.047655] EXT4-fs (loop6): mount failed 00:56:24 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305828, &(0x7f0000000000)) 00:56:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x6, 0x0) 00:56:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:56:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:56:24 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305829, &(0x7f0000000000)) 00:56:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x2, &(0x7f0000000000)) 00:56:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4b47, &(0x7f0000000000)) 00:56:25 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4030582a, &(0x7f0000000000)) 00:56:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1a, 0x0) 00:56:25 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x0, 0x1}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000008115"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xcc, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x90f887d94d221c62}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd61}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x62}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4070}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4005840}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f00000000c0)=""/22, &(0x7f0000000100)=0x16) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0xd97c3f3b4c9390c) r6 = fcntl$dupfd(r5, 0x406, r0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0xd08, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000, 0x3}, 0xe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) recvmsg(r0, &(0x7f0000000a00)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000140)}, {&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/240, 0xf0}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000840)=""/136, 0x88}], 0x8, &(0x7f0000000980)=""/70, 0x46}, 0x10060) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x20, 0x70bd26, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x0) [ 1165.968408] loop6: detected capacity change from 0 to 264192 [ 1165.972046] loop0: detected capacity change from 0 to 264192 [ 1165.995101] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1166.007297] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1166.011808] loop0: detected capacity change from 0 to 264192 [ 1166.017818] EXT4-fs (loop6): get root inode failed [ 1166.018784] EXT4-fs (loop6): mount failed 00:56:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4b49, &(0x7f0000000000)) 00:56:25 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4030582b, &(0x7f0000000000)) [ 1166.028740] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1166.078395] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:56:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1166.193139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1166.304098] loop0: detected capacity change from 0 to 264192 [ 1166.333835] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1166.345276] loop0: detected capacity change from 0 to 264192 [ 1166.356090] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1166.881835] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:56:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1b, 0x0) 00:56:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfff8, @none, 0xbb85}, 0xe) 00:56:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:56:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305839, &(0x7f0000000000)) 00:56:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x7, 0x0) 00:56:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x541b, &(0x7f0000000000)) [ 1177.740742] loop0: detected capacity change from 0 to 264192 [ 1177.748795] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1177.758909] loop0: detected capacity change from 0 to 264192 [ 1177.768719] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1177.778836] loop6: detected capacity change from 0 to 264192 [ 1177.807119] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1177.814041] EXT4-fs (loop6): get root inode failed [ 1177.814857] EXT4-fs (loop6): mount failed 00:56:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40806685, &(0x7f0000000000)) [ 1177.835727] loop6: detected capacity change from 0 to 264192 [ 1177.853700] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1177.867557] EXT4-fs (loop6): get root inode failed [ 1177.868345] EXT4-fs (loop6): mount failed 00:56:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5421, &(0x7f0000000000)) 00:56:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1178.010364] loop0: detected capacity change from 0 to 264192 [ 1178.034101] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:56:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x41009432, &(0x7f0000000000)) 00:56:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5450, &(0x7f0000000000)) 00:56:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1178.156872] loop6: detected capacity change from 0 to 264192 00:56:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5451, &(0x7f0000000000)) [ 1178.213202] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1178.228959] EXT4-fs (loop6): get root inode failed [ 1178.229835] EXT4-fs (loop6): mount failed [ 1178.278568] loop6: detected capacity change from 0 to 264192 [ 1178.317294] loop0: detected capacity change from 0 to 264192 [ 1178.326004] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1178.334127] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1178.341819] EXT4-fs (loop6): get root inode failed [ 1178.342682] EXT4-fs (loop6): mount failed 00:56:49 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6609, &(0x7f0000000000)) 00:56:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10040000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:56:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0xfffe}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:56:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:56:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5452, &(0x7f0000000000)) 00:56:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1c, 0x0) 00:56:49 executing program 5: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x9}, 0xe) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/28, 0x1c}, {&(0x7f0000001340)=""/163, 0xa3}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/80, 0x50}], 0x9) 00:56:49 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x8, 0x0) [ 1190.257699] loop0: detected capacity change from 0 to 264192 [ 1190.282672] loop6: detected capacity change from 0 to 264192 [ 1190.292093] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1190.313628] loop0: detected capacity change from 0 to 264192 [ 1190.320527] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1190.329070] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1190.333552] EXT4-fs (loop6): get root inode failed [ 1190.334339] EXT4-fs (loop6): mount failed [ 1190.368818] loop6: detected capacity change from 0 to 264192 [ 1190.399237] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1190.410794] EXT4-fs (loop6): get root inode failed [ 1190.411928] EXT4-fs (loop6): mount failed 00:57:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5460, &(0x7f0000000000)) 00:57:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x9, 0x0) 00:57:02 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1d, 0x0) 00:57:02 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086601, &(0x7f0000000000)) 00:57:02 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/247, 0xf7}], 0x1, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/244, 0xf4}], 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000001080)=""/121, 0x79}, {&(0x7f0000001100)=""/2, 0x2}, {&(0x7f0000001140)=""/115, 0xc0}], 0x5) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7]}, 0x8) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) 00:57:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1cf77668, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xcb09, 0x2}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 1202.838184] loop0: detected capacity change from 0 to 264192 [ 1202.847299] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1202.852331] loop0: detected capacity change from 0 to 264192 [ 1202.856274] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6609, &(0x7f0000000000)) 00:57:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1202.904129] loop6: detected capacity change from 0 to 264192 [ 1202.925222] loop0: detected capacity change from 0 to 264192 [ 1202.933666] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1202.933861] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:57:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x660c, &(0x7f0000000000)) [ 1202.940873] loop0: detected capacity change from 0 to 264192 [ 1202.948919] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1202.957024] EXT4-fs (loop6): get root inode failed [ 1202.958044] EXT4-fs (loop6): mount failed 00:57:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf0ffffffffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1202.993886] loop6: detected capacity change from 0 to 264192 00:57:02 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086603, &(0x7f0000000000)) [ 1203.028372] loop0: detected capacity change from 0 to 264192 [ 1203.029637] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1203.035364] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1203.043512] EXT4-fs (loop6): get root inode failed [ 1203.044352] EXT4-fs (loop6): mount failed 00:57:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:02 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, &(0x7f0000000000)) 00:57:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1203.280912] loop0: detected capacity change from 0 to 264192 [ 1203.297540] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1203.321530] loop0: detected capacity change from 0 to 264192 [ 1203.334745] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1203.344672] loop6: detected capacity change from 0 to 264192 [ 1203.395486] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1203.403896] EXT4-fs (loop6): get root inode failed [ 1203.404699] EXT4-fs (loop6): mount failed [ 1203.433246] loop6: detected capacity change from 0 to 264192 [ 1203.458074] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1203.469685] EXT4-fs (loop6): get root inode failed [ 1203.470652] EXT4-fs (loop6): mount failed 00:57:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xa, 0x0) 00:57:13 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x8008662c, &(0x7f0000000000)) 00:57:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1e, 0x0) 00:57:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6612, &(0x7f0000000000)) 00:57:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ea}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7a}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x7af817f4ae6efdf7}, 0x4000080) 00:57:13 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x188, 0x0, 0x25ebd5b0dddcf28a, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x20088081) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1214.482269] loop6: detected capacity change from 0 to 264192 [ 1214.496725] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1214.500580] EXT4-fs (loop6): get root inode failed [ 1214.501017] EXT4-fs (loop6): mount failed [ 1214.510253] loop6: detected capacity change from 0 to 264192 [ 1214.520788] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1214.524017] EXT4-fs (loop6): get root inode failed [ 1214.524455] EXT4-fs (loop6): mount failed [ 1214.551133] loop0: detected capacity change from 0 to 264192 00:57:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6628, &(0x7f0000000000)) [ 1214.582600] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x23000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1214.605005] loop0: detected capacity change from 0 to 264192 00:57:13 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80087601, &(0x7f0000000000)) [ 1214.641831] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1214.716182] loop6: detected capacity change from 0 to 264192 00:57:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1214.751465] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 00:57:14 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x800c6613, &(0x7f0000000000)) [ 1214.776171] EXT4-fs (loop6): get root inode failed [ 1214.777344] EXT4-fs (loop6): mount failed [ 1214.787258] loop0: detected capacity change from 0 to 264192 [ 1214.795544] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1214.806582] loop0: detected capacity change from 0 to 264192 [ 1214.813903] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40046629, &(0x7f0000000000)) 00:57:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1215.018970] loop0: detected capacity change from 0 to 264192 [ 1215.039201] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1215.058224] loop0: detected capacity change from 0 to 264192 [ 1215.070077] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:23 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x8010661b, &(0x7f0000000000)) 00:57:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xb, 0x0) 00:57:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x50b, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcb}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000041) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000003c0)={0x95df, {{0x2, 0x4e20, @multicast2}}, 0x336f56cf97dd1293, 0x5, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @private=0xa010100}}]}, 0x310) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000001c0)={r5, 0x100, 0x280000001, 0x101}) sendto$inet(r7, &(0x7f0000000100)="f66b2552e0457926b1c59398d03469d2e2543a597aa17ae4bd8d14f9767a35617f6d600123d94169d1f8a96da3d8975d24408c16d9c56820184bb5e67b2173b73f", 0x41, 0x4000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:57:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40049409, &(0x7f0000000000)) 00:57:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24080000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r0, 0x7) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="00954ca011e9ddad4d597567a2d180bc00"/27, @ANYRES32=r0, @ANYBLOB="046c653000000000000200400000009c"]) 00:57:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x21, 0x0) [ 1223.915375] loop6: detected capacity change from 0 to 264192 [ 1223.921056] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1223.922383] EXT4-fs (loop6): get root inode failed [ 1223.922920] EXT4-fs (loop6): mount failed [ 1223.928056] loop6: detected capacity change from 0 to 264192 [ 1223.942225] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1223.944575] EXT4-fs (loop6): get root inode failed [ 1223.945008] EXT4-fs (loop6): mount failed [ 1223.954046] loop0: detected capacity change from 0 to 264192 [ 1223.976664] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1223.986973] loop0: detected capacity change from 0 to 264192 00:57:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x27000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1223.998486] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086602, &(0x7f0000000000)) 00:57:23 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80111500, &(0x7f0000000000)) [ 1224.027488] loop6: detected capacity change from 0 to 264192 [ 1224.048083] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1224.064521] EXT4-fs (loop6): get root inode failed [ 1224.065052] EXT4-fs (loop6): mount failed 00:57:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1224.081055] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1224.150088] loop0: detected capacity change from 0 to 264192 [ 1224.154043] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1224.164861] loop0: detected capacity change from 0 to 264192 [ 1224.169484] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:23 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x801c581f, &(0x7f0000000000)) 00:57:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086604, &(0x7f0000000000)) [ 1224.303308] loop0: detected capacity change from 0 to 264192 [ 1224.308671] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1224.326662] loop0: detected capacity change from 0 to 264192 [ 1224.336521] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1224.357740] EXT4-fs warning (device sda): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 1224.799764] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:57:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x22, 0x0) 00:57:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:57:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40086607, &(0x7f0000000000)) 00:57:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xc, 0x0) 00:57:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="240000000100000018980000", @ANYRES32=r0, @ANYBLOB='\'0\x00'/16]) fsmount(r1, 0x1, 0x72) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfff9, @any, 0x80, 0x1}, 0xe) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x3, 0x1f, 0x7, 0x2, 0x3, 0x0, 0x36c, 0x40, 0x2b2, 0x101, 0x9, 0x38, 0x2, 0x3ff, 0x9ee, 0xf000}, [{0x1, 0x7ff, 0x9, 0x1020, 0x1ff, 0x6128000000000, 0x6, 0x8}], "2bc9d33685e563624d0ca04ffe9aa58620380020902e2d5fee7e1901d368b1aa9fe569f1682e9dd3baadd3ef3bbee89bff371faea360762e54e7ed1470e3731d9dc1d4a6a24ffde91906c643d447fdeb72ee69e53274221dd3f14ee7b11714c8d57a046010d337b1473f46968f0c826e8a0c9173cc775f2d10519bfbfff3eae3a8e2700865d3bd0e2167249df1adf3435a7a061fe7c617c557370facd4936d2450e6616f2c7746013ae9", ['\x00']}, 0x222) 00:57:34 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80811501, &(0x7f0000000000)) 00:57:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1235.391067] loop0: detected capacity change from 0 to 264192 [ 1235.421790] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1235.427324] loop6: detected capacity change from 0 to 264192 00:57:34 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x81009431, &(0x7f0000000000)) [ 1235.488953] loop0: detected capacity change from 0 to 264192 [ 1235.492914] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1235.498768] EXT4-fs (loop6): get root inode failed [ 1235.499541] EXT4-fs (loop6): mount failed [ 1235.503055] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1235.524018] loop6: detected capacity change from 0 to 264192 [ 1235.539272] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1235.545411] EXT4-fs (loop6): get root inode failed [ 1235.546449] EXT4-fs (loop6): mount failed 00:57:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6609, &(0x7f0000000000)) 00:57:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:34 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0045878, &(0x7f0000000000)) 00:57:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0045878, &(0x7f0000000000)) [ 1235.723621] loop0: detected capacity change from 0 to 264192 [ 1235.736779] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1235.760177] loop6: detected capacity change from 0 to 264192 [ 1235.776615] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1235.782290] EXT4-fs (loop6): get root inode failed [ 1235.782949] EXT4-fs (loop6): mount failed 00:57:35 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4008662c, &(0x7f0000000000)) [ 1235.811949] loop6: detected capacity change from 0 to 264192 00:57:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0046686, &(0x7f0000000000)) [ 1235.833868] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1235.841968] EXT4-fs (loop6): get root inode failed [ 1235.842616] EXT4-fs (loop6): mount failed 00:57:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:44 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0096616, &(0x7f0000000000)) 00:57:44 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40087602, &(0x7f0000000000)) 00:57:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 00:57:44 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xb8, 0x0) 00:57:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:44 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xd, 0x0) 00:57:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000002c0)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'sit0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000040)={0xfffffffffffffe01, 0x95, 0x2, 0x6, 0x6, [{0x7, 0x0, 0x1, '\x00', 0x480}, {0x3, 0x101, 0xfffffffffffffff9}, {0x1000, 0x7fffffff, 0x5, '\x00', 0x4}, {0x6, 0xfff, 0xe2, '\x00', 0x800}, {0x9, 0xa94d, 0xfffffffffffffffc, '\x00', 0x1f01}, {0x20, 0x3, 0x40}]}) [ 1245.518288] EXT4-fs warning (device sda): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 1245.527553] loop0: detected capacity change from 0 to 264192 [ 1245.534619] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1245.544863] loop0: detected capacity change from 0 to 264192 [ 1245.550952] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:44 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x400c6615, &(0x7f0000000000)) [ 1245.569333] loop6: detected capacity change from 0 to 264192 00:57:44 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0185879, &(0x7f0000000000)) [ 1245.586321] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1245.602883] EXT4-fs (loop6): get root inode failed [ 1245.603321] EXT4-fs (loop6): mount failed 00:57:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1245.623040] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1245.634029] loop6: detected capacity change from 0 to 264192 [ 1245.657406] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1245.660987] EXT4-fs (loop6): get root inode failed [ 1245.661402] EXT4-fs (loop6): mount failed [ 1245.662255] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1245.703272] loop0: detected capacity change from 0 to 264192 00:57:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1245.733887] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40106614, &(0x7f0000000000)) [ 1245.765327] loop6: detected capacity change from 0 to 264192 [ 1245.771316] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1245.775210] loop0: detected capacity change from 0 to 264192 [ 1245.776982] EXT4-fs (loop6): get root inode failed [ 1245.777514] EXT4-fs (loop6): mount failed 00:57:45 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0189436, &(0x7f0000000000)) [ 1245.803649] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1245.809039] loop6: detected capacity change from 0 to 264192 [ 1245.817292] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1245.820706] EXT4-fs (loop6): get root inode failed [ 1245.821136] EXT4-fs (loop6): mount failed 00:57:45 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x401c5820, &(0x7f0000000000)) [ 1246.383950] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1246.388756] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:57:54 executing program 1: clone(0x10080, &(0x7f00000000c0)="49f44b85cb169334779b9a3e86b9a77c263e50e2e675f4bd219f197b5f1d76fe01115ef8fbc9e7248e088206dcdd5ecd4146ae8f3e3a268ae2cf01cb8fdf55f08647f207636d14c6588b5c7f1b28f2d374e57971f2d3c480940e38452c38edef6be52cc239ea705ed5153d1b25678ac943dfe870c84c0e485566e46eb33d4587238b12bdddb94dfdd3a7f2a46de8ac08cdf75950e96c7a84fe9586d8059a2527da3b9a0825a03949316955f32cb4e4eaf5a2b01df21ff83ba243fb91034e2998676e55c146310997a248a2db6c63178519689bc0ab4d6c", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="345d9b74d6c996f5386a234f24438402303bbc53e89ee871a537170cf5c8e4a1f761b563ab90fb5a") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) clone(0x4000000, &(0x7f0000000280)="1490e54ac732720cbb802491e8746e17406a22f2747d67c010ded824cec383e3fa0cb017c0573bbe609c01e5bd059585bd316756c7379a3e4c4c4f037359b411586db3a7b5b072da1a6f65da8eb2a102220b7f1033bb5793e0b0fa89b25610a1802b18439c9a1991080f159e", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="c3f2016201c7e363d72ff6888e8f6756392f83433d38c4cde91a3ee7c1fccbda9bec7da258b99e49696b0b9e2cf9d3ff0c380a440ef6c50982fa9edabf31fecaabc23fb820a40b06617a1892968c8704e3078d6cab3bce8a61373ae1a8699302483d74dc272d1d724073f3d2b5df117ba5f2110fecaee6e4adbd57f85f47d00138f34a9140718bc9ab06400c") socket$nl_generic(0x10, 0x3, 0x10) 00:57:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @any, 0x9, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)={@rand_addr=0x64010101, @remote, 0x1, 0x8, [@local, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}, 0x30) r2 = signalfd4(r0, &(0x7f0000000080)={[0x3]}, 0x8, 0x800) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x9, @none, 0xa, 0x1}, 0xe) 00:57:54 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc020660b, &(0x7f0000000000)) 00:57:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4020940d, &(0x7f0000000000)) 00:57:54 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xf5, 0x0) 00:57:54 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xe, 0x0) 00:57:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6876f71c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1255.418148] loop0: detected capacity change from 0 to 264192 [ 1255.418528] loop6: detected capacity change from 0 to 264192 [ 1255.433094] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1255.433617] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1255.437893] EXT4-fs (loop6): get root inode failed [ 1255.438902] EXT4-fs (loop6): mount failed [ 1255.453950] loop6: detected capacity change from 0 to 264192 [ 1255.465562] loop0: detected capacity change from 0 to 264192 [ 1255.466055] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1255.469783] EXT4-fs (loop6): get root inode failed [ 1255.470188] EXT4-fs (loop6): mount failed 00:57:54 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc020662a, &(0x7f0000000000)) [ 1255.481040] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:57:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40286608, &(0x7f0000000000)) 00:57:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8c200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1255.587739] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 00:57:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x0, r2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000000c0), 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x7fff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) 00:57:54 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc028660f, &(0x7f0000000000)) [ 1255.648357] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) [ 1255.650021] loop0: detected capacity change from 0 to 264192 [ 1255.651978] loop6: detected capacity change from 0 to 264192 [ 1255.675921] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1255.684987] loop0: detected capacity change from 0 to 264192 [ 1255.686748] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1255.691487] EXT4-fs (loop6): get root inode failed [ 1255.691925] EXT4-fs (loop6): mount failed [ 1255.695127] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1255.710895] loop6: detected capacity change from 0 to 264192 00:57:55 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0286687, &(0x7f0000000000)) [ 1255.737294] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1255.752884] EXT4-fs (loop6): get root inode failed [ 1255.753361] EXT4-fs (loop6): mount failed 00:57:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305828, &(0x7f0000000000)) 00:57:55 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:57:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:57:55 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0406618, &(0x7f0000000000)) 00:57:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305829, &(0x7f0000000000)) [ 1256.361369] loop6: detected capacity change from 0 to 264192 [ 1256.363256] loop0: detected capacity change from 0 to 264192 [ 1256.375765] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1256.392020] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1256.402003] EXT4-fs (loop6): get root inode failed [ 1256.402528] EXT4-fs (loop6): mount failed 00:57:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x300, 0x0) 00:57:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xf, 0x0) 00:57:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4030582a, &(0x7f0000000000)) 00:57:55 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0406619, &(0x7f0000000000)) 00:57:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x230e000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:57:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1256.530590] loop0: detected capacity change from 0 to 264192 [ 1256.535519] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1256.544019] loop0: detected capacity change from 0 to 264192 [ 1256.549378] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1256.550997] loop6: detected capacity change from 0 to 264192 [ 1256.568669] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1256.574696] EXT4-fs (loop6): get root inode failed [ 1256.575271] EXT4-fs (loop6): mount failed [ 1256.582941] loop6: detected capacity change from 0 to 264192 [ 1256.597858] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1256.606246] EXT4-fs (loop6): get root inode failed [ 1256.606692] EXT4-fs (loop6): mount failed 00:58:07 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0506617, &(0x7f0000000000)) 00:58:07 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/43, &(0x7f0000000140)=0x2b) r2 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x1ff, @any, 0x9, 0x1}, 0xe) 00:58:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x10, 0x0) 00:58:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:07 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9f0e0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x321, 0x0) 00:58:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4030582b, &(0x7f0000000000)) [ 1268.598328] loop6: detected capacity change from 0 to 264192 [ 1268.602291] loop0: detected capacity change from 0 to 264192 [ 1268.617674] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1268.626235] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1268.635128] loop0: detected capacity change from 0 to 264192 [ 1268.638574] EXT4-fs (loop6): get root inode failed [ 1268.639203] EXT4-fs (loop6): mount failed [ 1268.654044] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1268.671719] loop6: detected capacity change from 0 to 264192 [ 1268.703314] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1268.709065] EXT4-fs (loop6): get root inode failed [ 1268.709890] EXT4-fs (loop6): mount failed 00:58:08 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f0000000000)) 00:58:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305839, &(0x7f0000000000)) 00:58:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2700000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00e0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1268.854917] loop0: detected capacity change from 0 to 264192 00:58:08 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0c0583b, &(0x7f0000000000)) [ 1268.874512] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1268.894036] loop0: detected capacity change from 0 to 264192 [ 1268.895977] loop6: detected capacity change from 0 to 264192 00:58:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40806685, &(0x7f0000000000)) [ 1268.909529] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1268.911948] EXT4-fs (loop6): get root inode failed [ 1268.912911] EXT4-fs (loop6): mount failed [ 1268.915563] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:58:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x35f9f7c900000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:08 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 00:58:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa10e0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1269.075019] loop0: detected capacity change from 0 to 264192 [ 1269.091752] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:58:08 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x41009432, &(0x7f0000000000)) [ 1269.121158] loop0: detected capacity change from 0 to 264192 [ 1269.136242] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:58:21 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) 00:58:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x11, 0x0) 00:58:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6609, &(0x7f0000000000)) 00:58:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x4f7, 0x0) 00:58:21 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="6ab806b5d88ab9b6d4fe186bd825b0f39ca79803768f1a194d88"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xff, 0x75}}}}, [@NL80211_ATTR_MESH_SETUP={0x44, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc0c}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x225}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x869}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8045}, 0x80) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) readv(r3, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000100)=""/118, 0x76}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000001580)=""/4073, 0xfe9}, {&(0x7f00000013c0)=""/78, 0x4e}, {&(0x7f00000014c0)=""/35, 0x23}], 0x7) socket$nl_generic(0x10, 0x3, 0x10) 00:58:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="268214d114bcea905db41fde73e42ab5f6d4a24cf93388d14d5f04b2694087ea962c25d0e7ea3c37acfbb1921e6c2e91d3a6ac56d535b71648757633502e5ebcfda4d29fd85c0adbfbd4a674b69e776f4f408feef03eb24b5046f84066e8de272f6f06ac1349c0a55ac664c9ced94ead02d13963d930954cf0fb00f1b6fa8cbb0ca3773a50f743c9f7bfbaaedcda11582d0a67d730ca70e0c9942d", 0x9b}, {&(0x7f0000000400)="f878833dc74732ac8a2e93f0efe62d3228784128a5ef10b4f1e980608353d70e4794962916a41a87792d79228eeec10678419bc05aaef349a7749175d4311a8f585830c94118c6c8d8a0bb07", 0x4c}, {&(0x7f0000000480)="a0830a10e30a34197116103ffdc2f65df1b80b92a0b6ed3eb5deae1a5fb7a18977efe031d132cd021a6f316afc8c90fe8f184661b1f88e2c0e4fa9fe8aa904a6afb85c196d984e074bd3ea3cad9ddc87fb8e39a4716d276bfd91", 0x5a}, {&(0x7f0000000500)="64375108b2ef057d4a9e13b8551d6a312f502e294bece401add4c1bd2503ae8b0d7bbbdaa67bef88ead5e676701c0c460490c68f29369e394ae09df9923a84fd756074f97f9b29bd59b8cbcbcd49bece96a509e6d20f775e0c81438b6094a3b751310c735187188dfd78fc4e7519e071b8f5e9c126b3b5b5b7df9c89d6ff8fc1d8c280ae5e07263a986946d3c083da0af3021ea6b543f2b43fe99c", 0x9b}, {&(0x7f00000005c0)="87", 0x1}, {&(0x7f0000000600)="232f3306081cf5a34577b3e26fd2c42e48401016a06798fbb8d1af77ea590e3715", 0x21}, {&(0x7f0000000640)="a3a9b986020443b5ad24e03b5529532d3033f73ab34ad6fdc3d8a79601d9167ef04184fe4d3011c113bddcd4b5c5be3216f5c32f6241c60c651946a31735b22f9feb56744da4bac2a8acdd852420a3d9721a4e5e5afe48b2d2890fa23459de42c0874da6084a8f7263b33e77bb43c43ca71559d1bf22ad1c18bdd823fcf521fcdd4a8f1f16540fdbb0fa31c68ed2b57d40fc5c3214d6a6c81d65424d4381562250064dfcc0f6d7b0db9bf8b819ea9b81f61e3a11c2bdf4d0df443a86ce376f2984ef18910f31d6c6fa8fb38ebc0d696baa9e74e9608a9cb84295b8d0dc2ffee24d5a8c70b30dce2f96b55f356e1ca7b643cf642750d0a546d25eb8f26071b9523f4556a9b0a9bb30d76eade6465c6f494aba4dd40d7b31bdd73b12a242ce6beeee8be2eb845abf67729809c1255a32464831594ac726d1cdc9d367377439d0ce162029dca07951050a2810a494cf4044d056d895292b53d5215f4e66fd1400d5aba5e75079ca2fb3af5e1a0d324d9f40f4b81579b458f48efc0cb7e42673a0dea93f64601d930deacab69a5f1e8b2ec66e4a71fb1da8dfec76143282cf41c2bbfa8a9a70ea6af411f94cb671778f6d3a23fddb0ebae6fa853ce816b392bf658a0ae1f3208732da0016e4d50116f76d0d62cfd0b68aa16c5bc470ef27873ca99328045740b52ed35b87d93ac2b7af3f76415adccffc14a172e6e7e66ca8c0a3bf4341486076c5e985b88a54a2b386256f07f725f23387a84bf2b0312e94a5639683e32393a8ceff0bc7cb3d3048f7115ea32d747ed9ea5c46d765ba2df058603a633dd59fc17a08409f8e01af77854f7035af1be1ae50f03c5f185f257f47efe4ed8adcdb996de100f9019ba39050413109a3df9a9b4fc8f38b57f51be749cb908178b663aac619074bd9e06daae5a6b6d36d6fc7a1e39f73031159b195d0bbceb1c5bfbea0d86a8798539a57a2731b35d549e9f56e331cc69a09efeaca56d12dc171a4e45949585d397a60d2f757fb0da063b2b342344ff2beef07d2f638f44a57f1efe70a9a7c1c56f5377ef93db9e98f85366c165bf6f0c1ca267e430ed28f7d8e569cc6d3c47c0ddf9fff5643419ade7d520a1e6a96c9caf21122d922b0aa5e20893424094da3daa53eed3bfe110e35f8cc841d458642a07f9b1a6047da5fb82f9e288ba819f2fc379a2849970fa40ac765256f67c1db9f5880622131d78fb68c59cb8b6a81c8aa0cffa582ef913a9e3b5eea56ca2bb93c0ca3dd72fb3f2fbdeb8e64f55ab63a8b94181b751a8f13c2dbc37d897b93e3dab21055a67bb4bcd6fd490f40f3e9aa9b14b5ee80d5158b258a5ae8eaf4ad8be7e6ba986ba248c6dabc9962c09ee6cc25b51721376a96c6e6d7eb593c4dd75569f05f86469735a44d04c4cf46501e1aa9584f255d25fe6295c9ed0d8fea86f230887706bfbcf8b4742af520d60b6df03c773b9d0db148f58d589d1182c0590165249231bfbcce4c7bd29dd93df86badada0f4281a472f12792fd714d590651214caccc62ae49139128c3881b2f0a10e1bdb4152ca9fbd1bb994ff9a3c2c1a00d9e3a343e8ed5752e55228dbeb59ed7966f3fa33e946a0df86dc7e8c5233b57378db3a934be685151dc2ce06b856d6f2847a3decd58459e25d3169674e51a18ea045c20973d554f251977b85f892bc3372db6288dbf6ecea6bf1def860302f48c2fb3a353570b903150166f456cbf5a78d828a4ae9add4526aba5735b2889172231ad0fe6a03fa183e9c3b961f5654232e4a5e096cec4d0911bccb65b3e6c4222b0309e4f518f4b02854888ee5fa721e46cbdf1979daf1cdfd5d206454f3d108f92b6206f3dfdf0a67313df65bdb1d927bc5f68988baca6eb02d85e00e8deb2a9cb472eb600e9287046916e1ae52acbb074b48c503e3ce21bf48f84fdda9e162d9425985619c2f3baa1031c56d01a927df79e3fa872a8736cf375d46468123b86c7715d45699f0ff001010a396a0d78f18b7c976925cf4ba0dea46ec4b3f98777220949d34afe31111fc5af50f68439dc53b6d0ca1837a5ebab6bdebecb96d5b8cf23d83b9b285a276c4bd6a62e1f9da55c2a1bc25c6aa583e73ecbcbf828531b43160fd4528dd913ef81e4c8f69c31d073c354618fa17bcf3021ac412b3392fd53ea0048420a823065bcc0c589d906036e1f18aba0ba4193b833d72829286590501644abcc2a0cb8a97c0e1023bbff7bd104d9a708aa5c5e2528b794433308782da4c3c20be5f187374fdcc312ca79482ecdad0105e712750f276a6cc3545dd437e510782fc97434cb569ce5a4a991dda15df6736a992bc944822b486c6020f4c72aaa2b6567602086d119a3eb22ed05860a02f1b85ab6a2ed724e634fbb2eb5ae57df45b23960647466cf9dcec4eb452b4735f3df2ca9da6119696222a691d81697f56f9f9d55fb0e292a944da32d34e872626ca59920c7ef551109d175572b58f56eca2aadcc81a0c7aa413957409abf11d35819e0b3bc3a8606d9d31f76462c945a91c6ded68546f871256cee7ac0b37c67bfb700a1414e5532d3d88e5535b701727fa740eb91ba177943e773913dc904b4df891140b86e1cc736993ade3128d0fb79d6ba2e4621de8aacf98565fd1e1e3b8286ec870d53fdab1b2f54fd2978cd0d0e8050f997cd8805ba03f538ba92398cbe173ca95a16c19bec12c5293493c1bd34615b4f9eed13f7d8fa3587dd542fc335c81c427308e4d1f2729dccb85ca4b003eae0dafd344b9d338e0b6b936a2ab81d72a44554f3f954aa2be4f27f6ac3ad4fb6c2d75aed7d60397cb51489664630680802fa5970d29d92b67929e4b645b7cbfbb59921d8f98e7b075a76e297f06e8489765e9b361f8c6e4ac0de72a408f51e465b01d371d9d70d5e1cebd9fd0d6e72c96cca71f115a74cbc42a739e48bb802e801380d9d24fb60f36623a15fd2d3ceea5cc4c2d075e3716c3a9ed443c8d9176d5225304a52e5cdc2db0b52048d328b2b52796e67ce2fa5e09c82b9d72e568d9d191cfcca14b334e425585b489168bdb8d1e4a1cba4b02ed2698598c0d6d548d823e542c614d1bf9812410a496d68c5decda974b7a4a83b1c02bdb58227f1df2bc99389b2e5a7f4ccebe5eb75f9a5c5fb0d55ea149eb86087dbefa3888a92d7d6f6d910bb90df0953cdb293cd613707e8d29c1bdd18c5dca9adb9ebb41071a5cf7833712a8a8678b5a38eafeeb9477026b25876a4175cce263600153a773620bde9eac2f205ad5b33260609c9d9fcc43af03562ecdb4bf9a3eff50261e27cfe002f57d8ab2bb9e4efd9778fbc56f85d9c08d92752be2edcd64a818ca6bead0e7ca6ee758a8ac71cd8bcd55df62710f308210e6fb6412cc8dd391137f66f2f0969f1d7b056e8f39c946b5d36364eee0d8e3e6a6b420cf88bb3495b1f6cbb011ffe9463aeb944e897a273a75e9d85b65e5a28dc536f9d5b7afa765369db44e74f700d03cb534251a1c071ffdbc3cdba88bba2c6e7775e00d749ba156eb882f83616e49523722a58bc55c09671dd0548ba047050efd2477cf1ce8d0246658aa598533861892fc4e1c002217b1e0b775649b211fb4c660c8d0916825bdb54aebd226101bf9cc2314aead991d97a3fe284b8c5034edebc56afd93035a570cd6729b397124b22e05d04c8bec8795b48925a8500fa78d8bb38be606e09ce2dd57422f403353aa210e12936274d2d297d15332674cb32248516f901dda72f7956eb45574e0a0470499d5e8ae5c9031e4554d1e8662463d8d5fe25bfdf3ba541c1ee51c61ec64c07804d6debf1d6eabaf24079eb7cc35744149cb644d23157eb17769d23b08f5926a6555b1e4605c867e71dc00291f97b7b9972e8323e433bd6fa2a4b47a1c89f910c2a92e4fca2156df02140b1080b8660c822493b25eb595758b24e20edf9c31704b40715141f874ba3ce4084660cad292dc80ffdc2cfe70d360d567203559bae221df149f4fc7dd1d50a74b82fb6ebd43b7a91d2b6c9355204d2ba5bbf9e13fa7f9b5ff3a6f2c962d2046f0286332e283ba629be6678a42d7bba382a0d347ba35331b17403ecb9bcd71cf449b66babdec97dbf5f6c37526790b335f1106f9e342a32722c37e3a0f95353bf8057837ce15b8587027adacb7500b242d217cdfd1ef48fe3059946cb5198ba4bfddef7edaeb5bf2a3426735391699f4ef6825b38e1deeba98f01a79f4e123869a544beef1f67c31e2847674dcec7061739f479a9c2549d1f8c9d9b796225d837d9860c33e19df4b6463e57c17218f1313f457baa4fb5a0c9fbaecd39f6ed0f10a849ca4d32a4502f018b677952909b0dc08179d7f06b7f79c07fc29bbadae0860214ca4d130c32e54af41a5b2664dd308bacc4ea6dfe8436f7934d4b02674d9ccedc008df641ec9d2e70a9492eed879cc23af7bc5dfd2d663bdfe186bfa4c203fa3bf880d1afd03ac7f66fc81e5b943f555b65f87e10145898f145b1924a157c0af45f3e5a9aca0bb251dd547e507d07569292a65d4e604e45cae42614075b4743dc8096a857b2e0511f577490c5bbbe4f2309aa0e8feee5518153acd0a6acb5c3b1c47fce08c7ed87363110f639578fb7bf493f38acc65e03e15a75831398fe8d5e68428fc07a4ceeb832dd4b5077ae56afc213c43efbe0a81d2902b3c292dcbe02accfbedc6bf59c3cf6a8416d8a32c127a2e0e3880f6e650753cf6070509dafb9fce5716353b1a813ab9985e5163827dab46b594d9f27e1ed09784b47a58e48873325a29047bf5cd2eca493b4a57e7ab89f1782aa48f1a14df7f4fcfd3e0c02dee810ea25fd2b28fbc6eecccd0b34075fd7a6b2efa11a2fc47441ad18c05c6f1c373a23e8b1e71f522697b66504712b991859bdf5facda2b52b403672bf7f9d89c0cad1f3781eb4be7f1191de4f7544884833e9ea0936f44dc9045bbdba0564aacee8637c3f3e5188e3bb4d93ec9dd6235ff8a9f08ae4256ae72a6449f8d7e73b2c3a8abe33c8c8debccf7645567b164b4b77470fb38fd635739475f59c657d4e8d60c9735930072b70ba7c4301995f093b9e9e9a85faf733cc44ca79d72f778016c258b6a637b5cc45129676979a821953cf4a0e82d05f439d1dcf6e1cffbe341ea5f95df3e55649ae8b913c88e4c3c43172db535a336e1a0ce381a2c55db83505c1cbe2c95a8d18b75a85880afe9d7ca6d87c599fcd9afb9781b9ad431d58d19cfaa2e5d4ec1e3a2f9aa67a495bf923f6a528b81fa97a5c9d38ff0401c34d2c271e9b9a83293e4bfe5a3dbe1f81ba85461eb80f59a3fe96453ec653d239b13d0929d3ca14d13d5415d75feffd0f50caa33cf877d4c82f973a7605530fe7923561aa9363fc3d45f2bf557ad1514f7a79d18988eb0c7993bd04c0d6d18caa47a6d1f3df09f0049f2daa145a31b3eb8886e89bf0a858bab16ac851611908d54b1388f99756880d312854b28e12098edec0bf5f6f1f04aa191041d8263f7514e8fa6bd39fc44b61889210d86e371c639f8047d2d4e53e9c027f4c524e341936e77093f04f4758f67064c25e511bd596856b25f959db413e51d0e827dae615aaa89a52284bc01b37d146852d66dfd57ae80d3ce638420db6c917b27ae25bf891e32c59a93560777c7c670130fda4727c8bec43b9b8e49c34673640eb576bba125092a62034b52a82afb58501fbc197d98998d3bc1974e44495a195b2f0204c5c1b9804d725ba5ee42a562ef0eb09d42b80ba8f1f908e21aee27142e5d83a50fed93b44b37cf0f9c13812de969f1646c1328fdacbd", 0x1000}], 0x7, &(0x7f00000016c0)=[{0x78, 0x11, 0x3, "77f5c083fe6ba33952605e55da6def8ab1c22fa124abd681842c90c76f9e0ba0afb4a0d92e7dd78d5efb82d8caa8b503461b2e3434421a70c2696de0aac99b22cf111463e1545b77329c8955fcd6840230f229ad542403a3ca98cd8283b5d16ac3d7eaff00"}, {0x1010, 0x112, 0x4, "40c59ac26cea06a7b6e54548b73df93bf06a326342c37540077a343b77b40cc66149f34fc9fa3d586894a92d3c3023ab181be1f9c823f195d2e90c663526a478f076b1289c472c57e37374ebf4edee0ab268386a1ee50f28ec54c4c2d397c3580124d3d8f4553d940b78f2df4ecdd2157a7c92aba13a76ffad0db70a3e7bc0b741f4a0cb2d6a4e8577d41a4fa6150080e4ba9ae85f2a97e38684f81e5cf2397e3399467c3ed0806417e1b2b68f53539046a45af96e65f90b0277dcdaa6db6746a9b8474251a1c7b8a7d96b699aa36f232323840ccd357e34f512070c881e625109ab8e1c9aee8c6a08fc49ad1ae35188bd92c968922d273788eff27aee1b71a1dd5fb9c9db4aa1c174c8f19be237769923fefe970723038fc9c46c28ba7e77f1406d9780b72c839c35cd9f177c0b2383cfa04ee7c4586143a48d79baeb95987a5e77b07eaedb090ea45466bac890d12d1e12fb6e2950c540c03549e2e84b9c6edd81cbbd8afa52a1a31302e9815db5f51d9bb72adf6b1d03041e88cd27769590dab61720f46580ea63bcc22ec5e0a1cae1a3f8eb1ed6954adec7f4d66823ae990d207b3236a474f1fde1b3fb2221b3f3ff800ca2222c1226c707ef6354d20c5e38379d63dc8853201f31d45f7fb5c8fafbf4f01752edb448e691425dce07b69720cfe0618fdb7aa4b7156f2950faa7c7c8ff6c111a0592c6bd695b9e8787d2db3980c16b8c3d04a9bcb57fb9ea8d261151910093f759222f20704ac9668bed79e03f2c33cc493d735133314cd283199ac05182fa620b88facfd157f413528f25b3c1cafb3ce95b050e3d5afc3ea067023d3562b07ede4cb47ddc3f4de2d20c12f3b8d567582ff87c26067e011fe2868cd910e50e80003a5a1bd84e7a9d8e23173f10eb80241dc48598ae4cc4fd4a22adabbbafdf44e5fb52d37023f8546a58924193cb95334a2e78be52b3e8c4562e6002468a9a1846cc6145c1a38792e679b517d25800f75fc11d9fb9e63e3026e787dacae23f9d5288012ed63b13db406d09ef9bc01e81a1732c1d00e1e973ce889a52bbb8408c26be0029b033cb1b8a79da610f7babe19b69a9a77020eaf2db17187f947930d085480720988f259551d4d0ca98d45135be11c9088cd9e56dd5ae109c644bfa684a7e3286593fba6b35d423464f6e1ce8ef7691f7197e71d865db4db87d295c296321e4f400b74817af424462f6fe3efa20a0c07c6e782185586b3010f24fdc8a5bbfc240932e388097d3c6fa70919c3a039c6f27baefcb85c111f2b78df8b0d9866069121168375a95c480255c395dbb4df49fa73a2aeb88269876a43c02f4e5f98befae08349b3361c50ce2cd0314946be7707448aa25e448dc9750cffc386c1562c63c27860db4c5b6c13df2ebd7a51e3cebbdf10501f37c0a4fade887def516eb51f411d74a0d226895baceedefe40118bce1dcac56edcf7e785a6db19dd8f4c130b096d374bcfe3a50501df756b924a66738f5f80edb5e4ccfc5baaf273fea07f85b4beaa7ed236ccedf7dc5dbd5e3ef3547f58390b512fd9d22b26188227ab533fa53b706f8aa4014cd7ae9b6992e0cde9974baa2d63ec193d6628af5971c4fc031c638deac72d24b6f3d251b25c8cf11f572e001bc993194187c6bf3a7c3fe6c407eaf031e14e7c5b48289349a358b6ea66d0ea7d8c19801b6880cb83c0702717ce6870dbd95388c2f7aa35b24de75b2f52d09547eb9ed9e1cc7dc8315cfc50248c3c248b3085f1ba83c4f2155309afa7488eb8458d673627decd22fbda070105be1e95a6c4c0e4be3787dbb29238faaa4a7f99ba13b836adc45690635b1625d7d85643e3d6684954bb26ea9fd991161ea97d5049aa485151b335c94a94126d53e7308d34f49683c6b85d931c8b31624f83c345d7675bebf8998be520294e318e67bc09e1a2eec5eac9e5d43248b245da31a3daae110c3bfa847abba3ce1352d77299950f3aa0e8c2caab4bfb4a9e6584c0baca5b35a836eafba388e66a4fa556a342c4b3690bd77e3869854e31e54f585beef8768f9629f42dedeb298bb19806f5eb626561a05faf8b4c707d8dcc87ee0f4080c6529c5497e7f562eb6e3a0b645246689ec5180e80fad631786b13eecbd388e470ac5fb17a9a1ec28a7b599ad0cddbf46191c5799beb64a8e7db140184a86cc728004c3b388e56d62b4b4133eb2d9432cfc66476538df5afd711c22d7a528ab488719fed56447ebdabe5f5f4e8871a589c95166c207060a02b3e52de4c64375fc4f5a981524f264ce47b4050b36cf874180de0b798e7787a2531a50c5f592d2ad6d98a747cb5e3c3637e6bcd5f4778efaa81b6014dda09d64dfe3496d226f3875ae4079d447dbd2f3aabca142a336b299c9202962ec75950d7156da414bedc5e25d342ee02a440fbbcf98514f483cc5e832a90d2f1a2c9477e0a49ab3f429008c6418addc5c82aa5e23279cfa4519d3b47e37743587a49b7cf686f49528252522231ee698647ba10bda841e7f6b6c3cac5cf18aaf9933d5865d3324401b1b849707b21d0d22cb6f86957f23bcffd1948908b990f22d2b4091412967096bbb2ec1e6ea05642d15626fcc371f6b9a67715e51e735a611b468400b595ad4d674f5fd603db3e3afd936c7a224f689c5b09de1485ea67b8ea1ad8ef2d65ea9b32f6b287d0349e7bef77ebc54b678cd4b59d10f14f22ef2fa390839cf4947a66dc97b299e2e307c473a3446a605b888e12a4287be177ce45a200c9ba7c1e19a7ed894290e88dfb3faaac797a2556ec0bd0c8cdf104a92db7e88883346f4f6f56a86e7a6f8f669b676c5e6d15915d111dd8e79f43773a4d98610425f070a7fe905f1bf860f01a624efbf320120f1dc5fca55705cb3e196ca1efdcf84292f7aa33e5af4a5a5be90cd8d77e56d4277b3939ed241dbb20dac16c2e9d247625efe04b107def9b3cd030e72845af775e1e0ac2dd2451a1367d21411902ce9210b23dda328af7b234cffdf47fddd10f6a50767b295ba0f19b8d7729af968b479e23c400f91221ee50b122e61fb04614305151083f65c688ec46982c619f5f0d9768d1ef6f6a2592913c7933ae514c7992f97d0181252457a05f13883513ce82cd4ea7fcc562792e1562da1d7beef544faccc176a061a140819026e2b814d1bb2f31b64538fbafa78b8915e39babebf1a03c9ea6cf98190c2590a4656142ac6b4a383f48115032834b047ebb55904ec1ca94c231fb88a89a63964939985cda457fa33284d8f37ce91e1c1c10f2db89f1d7b7ec3e00343264eb3edabf922efc612dc2ba7bd9e5fa5f45fe909996d47f66fff58431d84bc5d3127038ab30d00517e697608d153f46839fa00378fb39c076e3f8a8f49e0d40b6cadfb98121d843b441be52282362dc2c137c5f93e097ffd349c9f3b12a31b2ad776fe3f59a18d458baa0f80ccb1b84353932896972988c127f9e127856754f4405fb9d947a3262020f3036d440d0fb3822ee8a112b919de0c225daf2f6a386ff187d2bb42854de12bae568047d52e97185200c065a93ea1d12ac166be259fcfeca6aa8b9842f38e0861aa36b3e72220bef2d551808b5ad1cb6c2c651fc39cc240b095a20cc2f4acaefd43cbfcb4e1991186ed5f3d601d70fac6bbf034d96e481924bc3f499761ff931470e94ac7a93b1cb7696470e0f349dce4ee0836379296199939701adbcc4f00efe85e35dd0bcc5ed84bf24ae50f21425ac9415e42b0a84acfc41e355f38c636e9e2c9ea3e857ac9fd7b8910f88bc6b3f8ae84f4c312e0d06e4d88e21050e25c32a05042f19dcef8da8570c3b49802276b563c5311ccccaa26a83a27c413a9cd4bd6855035e278403f3e01d725b31cc6275bb603ff1c296b59a0829a7a6e92c148636d4152881e7b03b533b747e690e740bfda76a33dbc5c81d4c7da5a9a17185f48b75c607ec9e2b439e471ad098cbd9f31c249062c9c25b02b58a3bc7387a5b6ecf8bc46567e186d516d60fb1743587a14add116c9e9b213f418e18a7ccf63152b0e80eed3e700ab82f6fa08567b025cfedde2cc576c9427fdc0789ba6a8ec60d86f1e3960c6476185efc91fc8e9f94c120816c066b105c36be578188a671b758316d09610418a0b90d34cedfe5642b5acc2cc2d65d32db7a874ab00be9ea3dfa06b2353690740b978e7f52906c0e1b576bed5ff4ecff6fc65387ec405176c9e742790477a06c6aa5d38eec3cc81e858da206525404e263cd8511f5b60f837ac4addec31c1de613153de8b1a78a22f608476115d7d609479420fd5448d723af6c18b8c2fe7915084176cf0621cc110fa87ce1eb154bf289c8d818797ce2a80c10d76d059b9afca0d513d12bc9b7faa03651b62f4b64706eb2994f2addc42f2affa5b83ffade13cb3d45ac2202c4efa247ce93420bec08dab371b38ee965fddac93b1c404ec165e6a787d4cd36c721518c5f833bafba077dd0391b1bdcb77e63d170ebdf8597838f223a9469588852ed766b7f03fdf2a65474bda6aaeec926ab29ef7897668828a971b19559f499b8292e8d6a3b5e983a0792a92c2c27906afca13ab9ce0cbada842eeaf1e8de5487135dfd36a40f0c4d58ac99297268a036bcb21c45eeb9f0a4ba1c5e949aa2214f0e6303ea1ff11914dafb935efdcfcd4d4d0b1c767af2c763b19ea06c46e46b5de9032149d59fb92b7f9bf3e31040ce90de67fd703002995fe679d64a73bb49451db771075ed8225096b90ecb7814f5cc80e70a76deb12314bbc1fe0dcd93ec483b18971ffc1bc0962107baeb45c3744ad42dbd84ab2e9a074c790a8c9427b54ff0f6fddb7f1a111c78ac31c3abf5a12280111813e8a39140ec94a648cc80124f2fbeae82586e20c8b2d0b0534c265eb9b59e6e7a6c326dfd5e83d45e2c12aefef689081c3e1e2fda9875894b4fb4736fb5b02060f037c30e42569f4b28bab7252c2d32a6c0292d070142767c8a9f401bef44cb0697b817ad0665e1680967dccb8188deef2c3becdc2f41671e90848c5f3905253920b06514bc596ae5ff59dde8a4a8e86c6b67e2372a15268caca85b35352b8c25c185fc13d1431ad02fd85f442e807e5fc444f4fd1d7b8bcc00834eb409cb9644236cbe4565c4a1c0630237ebc4c858204ea4ca7ab8dccf4256a4c78ba443d16a1e6520c8e7a7d6c11d01e483e3411f98a9e71113c02491840976cfc150c853f3671a06c1f18c7d6d9d53f05158e1c7476f4d23f00375e3d12690bf4d4ec566ee7d2671ec06087cd2560105f0f17421a076483b48b0d0476347920079c821a5485b0f741682205a467206e5c4fc05335c10ba3f40ee8b61ab27d0291af6ad19022c57acbc394bd6efc502e22d825ac3cf048a5e7c11b40c8c56d28e77f570f17645b464965dd0d6b1033a3cb58db66f5097c8fa7cb75575971d8fc4ca99df62a6791632665605170f5b012f7e8322523034cdd344c06a7c8d38c00f0c063ad65d19c4f9bf196c00167e21c24d170db5b6453c81893109139f90205f74e6e13ed31316087c0959490626c1f2a09ed59db6f9c7809064db9ae701dba2c2fbe0b15fab3337079da67f054f42bbdd78c1dfb2cb896a9d7b0047f572831081386358a6088261dfc1f183b17502d8ea55e5e562fa4dcca2f3b0f3b2a5da5bda2ebf08ccdf004f87c1bb5cdb8b0cd1f160b5fd14526c2becb2b3e3f64c233965d614292c0fa20b1be584c43e3b4a2f58c9a52f61705d106f8cf99f130613bc97cbe0c530016287bd0ff61238aef5c17500fd8d3f94658efd0bd72c1"}, {0x88, 0x108, 0x800, "cc346a09e51c4b4f0f7cc8622dfa62d43a8dc81919eab2d1ec35e38f9e84c7ad9baa1d275f5059b9084d529f298f6a118f0708a90aafa80fb424c46d666aa513dd29bff02f96e18f42ddf5d9a3b054d32813fd5f5be71f737dc1afb5f3ce5eb51e37fabbabf612fd1436a408594a0305473197"}, {0xc0, 0x95, 0xce, "2fd1abc8143da563c8e8d2e374ff3d82b16b44aca7200c49a6e4f2b3e57a2b3e0241fbc634f56524ace32c9c4a9643e593e1d793021715a3c749247ad5b887923a20e91c965eadeea876e1e3093ac97e2392677f9dbe5241c14be1bed913b784cbb388d476969daaf7f89a6a635e83f187c111d661d9e2d6b4b95f7b8fa3819c7abb5b834f1c87e8aefbb9e00dea28a8c52668f8fcc469480d8af69871d3d8436c89c9dc73e3948738d81018"}, {0x1010, 0x113, 0x80000001, "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"}, {0xe8, 0x114, 0xfd5, "e15d08759e37a1211fa437f9b453a3f68ef57b63dc760c906059d0a76080beb6df309ad13d12412f1f744af5fb645d7b3c9f2d5deadbe72cfb0db7a3a460f2234792ae3ab506c9167d115294b6d19abcb5729edbb78f04bcc84b5bc565fcd62fe4a100a5caf1ed129e89202e5c66843a59fd7e5428927a3f3c92aeefaf1980a0493391685bc84d5130d89bd8fb39b07f8f3d97bfb2e0b0449e6cd3c4813aae99d6ef46819ee11732a598edfe7f105ec6f00465b5c4fcd6d824f3b4266e89f8b8a8773dd469565a0e56f099ca12e5bd17df7ac8bf339b4ff8"}], 0x22c8}, 0x8805) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x101, {0xc, 0x66, 0x100000000, 0x401, 0x1f}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB="cd974c57899b0102fd933804dc362d172ce342f6cee4c5efe6e75de6e4b0919ac37b8bbd8cb8f3295b4ea9cb4791fdbfa5499cb0cde3b654d86bf0c4ce1aabc7a1d21f89f398f0f0e7ef1861ab978e2bd96483c087dfd25e7702869eb0425ada4e2d047ff446b75ba21287fd710c526fd27ac862fc436b4d5af7bf4619a637e49bef3f88acdd0e337939df40268bfa8020b3c14114b9994f9e2c00"/171], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r7, 0x200, 0x1, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x100, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x20000000) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048814) ppoll(&(0x7f0000000080)=[{r3, 0x18}, {r5, 0x245}, {r0, 0x1700}, {r1, 0xe002}, {r1}], 0x5, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x80]}, 0x8) [ 1281.745961] loop0: detected capacity change from 0 to 264192 [ 1281.758834] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1281.767373] loop6: detected capacity change from 0 to 264192 [ 1281.774023] loop0: detected capacity change from 0 to 264192 [ 1281.782386] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1281.784497] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:58:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:21 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086601, &(0x7f0000000000)) [ 1282.254991] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1282.279922] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1282.292738] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1282.319754] EXT4-fs (loop6): get root inode failed [ 1282.320824] EXT4-fs (loop6): mount failed [ 1282.345463] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1282.354150] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1282.363784] loop0: detected capacity change from 0 to 264192 [ 1282.364300] loop6: detected capacity change from 0 to 264192 [ 1282.368271] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1282.374672] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1282.384134] loop0: detected capacity change from 0 to 264192 [ 1282.387816] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1282.402559] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1282.412811] EXT4-fs (loop6): get root inode failed [ 1282.413633] EXT4-fs (loop6): mount failed [ 1282.576882] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1282.590254] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1283.094742] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1283.099380] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1283.105805] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:58:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7}, 0xe) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x2, "d204d8"}, 0x6) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:58:34 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) 00:58:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x12, 0x0) 00:58:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:34 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80086603, &(0x7f0000000000)) 00:58:34 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x52, "d8f230d48135bc200fb8dc1db7ee655603c0cff332662324ea9f0e88079da0383151d46435251432590846a6e0376e4123d05f80ab604135450bd7097482dd48c3f68388c6a1cf98b77bf29a69d7a7054fbe"}}) 00:58:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x500, 0x0) [ 1295.592124] loop6: detected capacity change from 0 to 264192 [ 1295.597053] loop0: detected capacity change from 0 to 264192 00:58:34 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) [ 1295.622513] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1295.638196] loop0: detected capacity change from 0 to 264192 [ 1295.648409] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1295.653747] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1295.662644] EXT4-fs (loop6): get root inode failed [ 1295.663645] EXT4-fs (loop6): mount failed [ 1295.700948] loop6: detected capacity change from 0 to 264192 00:58:35 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x8008662c, &(0x7f0000000000)) [ 1295.711219] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1295.714380] EXT4-fs (loop6): get root inode failed [ 1295.715232] EXT4-fs (loop6): mount failed [ 1295.744977] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:58:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x53ef000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x8) 00:58:35 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80087601, &(0x7f0000000000)) [ 1295.932079] loop6: detected capacity change from 0 to 264192 [ 1295.957698] loop0: detected capacity change from 0 to 264192 [ 1295.977594] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1295.985998] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1295.986041] loop0: detected capacity change from 0 to 264192 [ 1295.991827] EXT4-fs (loop6): get root inode failed [ 1295.992634] EXT4-fs (loop6): mount failed [ 1295.996006] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1296.031805] loop6: detected capacity change from 0 to 264192 00:58:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1296.072071] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1296.081637] EXT4-fs (loop6): get root inode failed [ 1296.082457] EXT4-fs (loop6): mount failed 00:58:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x9) [ 1296.193596] loop0: detected capacity change from 0 to 264192 [ 1296.203619] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1296.232981] loop0: detected capacity change from 0 to 264192 [ 1296.235376] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1296.467731] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 00:58:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:35 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x800c6613, &(0x7f0000000000)) 00:58:35 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xd) 00:58:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x13, 0x0) 00:58:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000af3ee43677bb63067c83feb86577a82280eb59cf0f4b93475c4c7683b6cd20b2608c643e82d19e386d09", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) shutdown(r1, 0x1) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r8 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40884) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'bridge0\x00', {0x7}, 0x7ff}) [ 1296.579828] loop0: detected capacity change from 0 to 264192 [ 1296.591310] loop6: detected capacity change from 0 to 264192 [ 1296.607009] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1296.627191] loop0: detected capacity change from 0 to 264192 [ 1296.637553] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1296.654494] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1296.669593] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1296.671341] EXT4-fs (loop6): get root inode failed [ 1296.672132] EXT4-fs (loop6): mount failed [ 1296.679389] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1296.716006] loop6: detected capacity change from 0 to 264192 [ 1296.760935] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1296.774140] EXT4-fs (loop6): get root inode failed [ 1296.774968] EXT4-fs (loop6): mount failed [ 1296.933251] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1296.944773] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:58:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4240, 0x0) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0xffff, @any, 0x1}, 0xe) pread64(r0, &(0x7f0000000100)=""/107, 0x6b, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 00:58:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x8010661b, &(0x7f0000000000)) 00:58:49 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x14, 0x0) 00:58:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x33) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) ioctl$CDROM_DISC_STATUS(r1, 0x5327) 00:58:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfbffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x600, 0x0) 00:58:49 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x13) [ 1309.847507] loop6: detected capacity change from 0 to 264192 [ 1309.850601] loop0: detected capacity change from 0 to 264192 [ 1309.890622] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1309.896409] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1309.898077] EXT4-fs (loop6): get root inode failed [ 1309.898584] EXT4-fs (loop6): mount failed [ 1309.907165] loop6: detected capacity change from 0 to 264192 [ 1309.913519] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1309.920592] EXT4-fs (loop6): get root inode failed [ 1309.921085] EXT4-fs (loop6): mount failed [ 1309.938202] loop0: detected capacity change from 0 to 264192 00:58:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80111500, &(0x7f0000000000)) [ 1309.962321] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:58:49 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x300) 00:58:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xbfffffffffffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1310.020939] loop6: detected capacity change from 0 to 264192 [ 1310.027186] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1310.036717] EXT4-fs (loop6): get root inode failed [ 1310.037293] EXT4-fs (loop6): mount failed 00:58:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) readv(r1, &(0x7f0000001580)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f00000001c0)=""/253, 0xfd}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/45, 0x2d}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/93, 0x5d}, {&(0x7f0000001500)=""/97, 0x61}], 0xa) [ 1310.054087] loop6: detected capacity change from 0 to 264192 [ 1310.078137] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1310.085189] EXT4-fs (loop6): get root inode failed [ 1310.085720] EXT4-fs (loop6): mount failed [ 1310.086134] loop0: detected capacity change from 0 to 264192 [ 1310.091560] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:58:49 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x900) 00:58:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xcb00000000000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:49 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x801c581f, &(0x7f0000000000)) [ 1310.220651] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1310.961143] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 00:58:59 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x27415032, 0x101000) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @none, 0xfffe}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:58:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff070000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:58:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xd00) 00:58:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x700, 0x0) 00:58:59 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x80811501, &(0x7f0000000000)) 00:58:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x0, 0x121) sendmsg(r1, &(0x7f0000001780)={&(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0xab, 0x0, "0e1f4f3bae2f1e4629c89d359fb3e1d82ccf9615db2f4ebe905343d437b62f59447fa59e16590d9619e6f5ade17711a28c3f2910d1180ff52384678425e461", 0x2f}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="721e3c9fd38598c8a82635b864f08d69e2f1cb4d6a3c5298c84edadb29dc6115db5353f54510963b8f65d286c31a061ae836df6e61debaba683d09d799077dd752efbfce30a6d8cff6b36330859cb9679dc1dd5c6536450a58949b97f078030c177c05fc8f824a9004f2edd762712e4282de58dfb91641a21716fc47c0b625dcd9f15f16170044db4ba5d08a5e0e3768095543fd5a5b0631a18b5d9442544a0a35b16d795eea69a3212ea893f43b56fe78a05cb50d1f2083ee79c1", 0xbb}, {&(0x7f00000004c0)="69a5c637ff7580ed74a4a015873cbe59cd7c194191a6fabec743c327471e386aaeb4d6176d92f9e078a9f21636c02026bf0d840f79e9ee2833303e581ae193ef0b09eebd4104266ed2dbcfc7c90331b8decaf07b9c5b74dfa55977ac002da957427a23a1921d2f955f162e7084d04e2210c47b20860afd982a0628dabce3e291675a61b52fd112ee41f9736b4600d62c296cff1708bd035545050ee334b2f42cd1d26c18ccddecb8b817362b6d66", 0xae}, {&(0x7f0000000580)="3abecd14aa856c13b52394bbf119d19589ce85db85dd91daa001b2ce290b7386bbc83707e97822fd9a5a82c14cc5bacb147f37e3d17d7352de3ba6bddf0da8bc1f70a215653668b60b0b379c76b6c390232802cb8420ccf6dd28841a315da9b716ba19fddd8640f424c43ce4251e374773882bd89b7f3f376925f1a86c84555c1d35e232", 0x84}, {&(0x7f0000000640)="525d1dd38bc3c9fbbad633f989ca94cd67d15203afb96690d3e0b58ac80ef5348d22177ef6e74a5b807b00902f7e33a0ae3b6e52dc4fec39ab854f5b57c176731505b445c99166680905715c9798ac89d85417faf3ccd90616cede8799907ec7", 0x60}], 0x4, &(0x7f0000000700)=[{0x1010, 0x10d, 0x2e6, "1eed2c449b98a28196b3c3376637193e51816511069642cdff5f8e12c35abb1ba7a21af51b7e0b1feb7dc0adf43c63984c42de0a896831884bd9aa8706388f50f2f34dbdb247e97e2268d55d944807c27daa72d63dad5810b4d39c759ea5e780f9bafef90effe7e405120181e2849b626f0ef325cbdae8828690081a3015ddcb1c3fc994c6433355a050c9cc2833f68671d9f48285eac1ce5f91cfa25b912f0f04748cc6677fff20f933768faf97e9b550564b142bc867cf369918b50048fc69d92d379ebab54118d79abd9136293cfbe47263b67115b99aee819dbced50a2ee1d071ceb05e9b826758e14eb4685c0dfba17ac32db86bbe40f048b208bc0ff51a32e15a6282db5f30bd91827972abbe8f5969a2d7245f0e4fbb954555495cc795580f1eae154b953927b7f141cc0f3e522d07dd7d8fe10727a4d33f07f062aa592c0ad240b5f955af54af0b3450a8dd55601d78170a673ba518e81a23a8001bfdab4d6e03ca997dc4b72a1b0202411fb361d4fb9eb27d07c6ed498dd06bf16760270c0c24fd64e6e3d4ec81003a838da6576c18be08cfdff692088ac9da6a64964ac7fb26292937deecf34e50791f9e61b0fab283c1d438f4321354114cf64e09378da664589711fe6f1b216928689f08e9d6a1cc3d8ed888b60c5952db56973640a630b22f66a16b82363cf0194b1f54c3adba7afcfe473fca9879eb5db5328b10c1a5ceb41178fc5c58f542f81f58c74baac0b8e7388366f0b6947a5cbcb6a2463e8767c5e7f9b694b14ac17cb09e27e0ac5ba7c48bdc25804d817acc949cb3939ca70a3b104264059d4cd81fdce89f26fe4a92220a07ef68086a78f88a6acc2834573191227096e15c6e7d954bf524140c5dc767f77973cd984640bdb40b99d50126b37f647bbfa2f818c1a6a5863b8e07a492a805f9a48e8d5ce4893f92aceb23474d2ca0b20683f7d1df5a56924f4d783bc5fbaa247518a45d38aef12f3a01909ba27240249a245a217c6b031d3ee879ea6412d0cf7b0ef0be22c6f51a6305831315ff72e8ed9552ceec9243cda4d598de9f6e3c5caa887c6bf6031a3b569d8004227aeefdda7733936359f91a37ffc20462453114d29de7a8f9c2cebcebaab5867c1d08b60d02d9da071e2c6afdd87195a8c36f96d1c070702fdbab926ea9bf5cba4356e32506def1e9d6da903e2e66ca6f65f96132acc79608d804f71b807150dd7d814ab570ea81dd14a719c425db0b7b80af723c3c36b1b7da6cd14d2322ba73130d20a12bbeda124fec163891b27eb694769c1092e1f0093450fea23660586a9bfda54e4389b1bd8d669502ba534a41a46845cafe9e1b79df76543d9cab7bf65f797edbaf23b66f89cea4811f0d2f4e1f8a1701d3b23a9d7dd263443af49ed7c8f9c4a4678ff0f8b644ab71cf1e312be5df698ae6201ca94706da187cc0bef7b8961b399dc6dce515a17bfc515003c606a3e33ffdcb54d069980241c596266cf9572f83edbf50c16261c796b25c81b40ae5917c096c2ca56da562bba41933c51f64cb19180d60996aeb00660c542a59a88a86bdcd80ba5faf0965a10fd4257e80dee5bd8b920a8e1820cc32b6413a480600e83b7c1554ee89db595ff2bd32d1637a5616ed86f82e686884c1e97eda8efeef32b0eead39a6b6ec9fb9d548cca9c6d6ea91addfba0fe61ce025a081028a7493dd1d56adf2aa47f822bd371184db7424ff27175d1ba0b5d4aa6849fa72e3fdd8fd3c73f57464138558899235b0aeb29b49ca09fc73d143040df15bef9746ddc29e4321b4748a3848e18695065b6dcc97d5fd72b7ff770fe9562780a886baa1ed1b23edfaff7bd634eb8d9cfcf286162b4e178a2f47cfe386c6eacbaffa493dc8d22e74abe217b67cc4dd29c5627136e3d336ced858cee92b4a384472a8a1f16c0f439583f373a3a641ade61086a5389664fdf150f40458c931557304466aaf95b173a5249bdd4cc51c66f83ccd4740cc0dfb05561c630af4d921d198560630fa5c16876db6c3da0ad72e7146391dd5e214498fe0970071472ace109fa832a32809876933d89214ed3860a6f15e800bbf595df7e88b175151bc4888429d158ae6513b6dd904e61d9721cd9b046d85f12e7a28fb4e07c45039cdea3c10ec55154eabdcabfa05a82241a63461b44a23448310e1ccd37201e0cd4babe9df580fc61262c48b8e31deed6426e2d30caee63420c8ba47a46a893a8ac5fa8abc3b12002d3d21c9c4ccc59246daf1ef5a77c332f26d39ae6594985c51fe93fb6af15850a06eb956eb819fc5c333c6f9037a51481ca5ad1a626909251fa292fdf9e68d492bc662c946216dac5b0af6fba9614fc1df19af32f5e5fe4f146bcec379f0c83cd2481767320b8a187da07d3b155d756b0c037423f7f711beda60d382ab9fd1a85cafd1ca3a304609d6f82aa2360e390188e5952973c1e0c2d12feeb1e1396480f3fad5735cc714e2aab1bf05cb23f09fd10d4ec256076d4e92591b4c65836c7523ef68c624f4cea0ffe3932308cab32bffe059ac5609ebc5126746b5743ebec72190679fcf8db9fa138a82bd7ebacc24c5498a21a73ef7a387dc60dd45f09ccf215d3cafcc188e1e830468304b6afdad59e7371e3d960fc9904826e176a15585d1458efe22efcce14de8839a46d8bde0369dd171465291791bfac46f8fbe1c4e533083a809de4f4e10ad3f8fe08ffcb897335092110614e47345c696f5e2af08a3fd9e4b250dac7b13f1959425fb37bc000916ffbff0f4a562a5f4efd3b75ed16a5fa8f8177b9ac7f07846f40940d8681d5a9122ce4e990f4b3c7b3ee890bdcec30c8ab9b5411eb5df48182b7f288a309eff002b8fcfd209bbdc93476bc164fafbf794ac7929d16815c0da517583594e997d6f496d356605dbbdf422db3b6ddb3587499d74e81ed8fd831e4813f44a6e107f98502ad6df0bb65c02d55a9445b28600a753268d4c8ed55567654adbe1cb394a488ab78068b7dc7d40791c90703c5926932113e5b8417fd4b9db2b99e5d896c302527024d08a3cf9d262e2569ed0430b296fa3254ff59ffecdc10e75f24d071d8838029318da141b27fbcaf29029e5b8fd155ed6a85bbf6525211eb925a165edac03efbd6a0e69a7ecf0958e4bd82ac96002815fc6b7e9299ef86a350f6b87076a0b6120a0ba6a936640da9699f42e8023e7542bfae41a322824a038628ce8623f80afa3903321ae0b822c47656c78b656422719d84fba3907a894d13c610e601b8c939ae8bbc8f94375e1472bb5fe6b37a989b33f4d0df6602a31043cf6c0caa0cd6f65aafff8dc34ff8188753e68e5e2e5173fc989cd6551ddf94b2416cfc4c2fd5a93dbeed7e0a1dcf8a75115aa92107d7f7631589b6f904933dfcc702ca2c2e93b0faadab8c69a2e19ea6107690e52d1d02a2ee404bfb7512dbe8b6419cd2cc09eaad8d7c200dc03c1ab35239a43bd444080a1abde7c4b7356c89fea111cd72aab6ea038a3e6469bc2643f06e6f4ebcef3acaeb7e6fd3233c9536e72760c3aa66512d8d2b2bd892eb68683529c1aaf73d9b07eb157aa2356c0c75f21277f1234fd69106e29e0d91e075f31068a86bd548e4c1ea424b732318d53f375658fa616431bcf4af5af28eb6fe3b296c0a75833083e52e9341ffd5cc6c9bf49008f9e05f812b28a89893548caeed30ff35b74661e8e2b8a481107b4280bb9142d691172b4f949855650acbdaf6e46101e54713c273bfbf1afb232275041f5ea8319eb8da2e58c0d168f826b8491aaf207763047d159d8985dc70eae1254487186f15e8db8bf35d540179501e563711164b110535deb29ae2d397616efa3766e6de2ce64d4b9387e192ef56813d6f4e900a44deb1063a0100d5db17235b83cd5c9f9575bf3c436dba1c950248a6823a18daf6beddba51878d1708e9794a8c38a602442b206f28a92cc8f95fe4950f134ea1484711b95c4dfd35f01f7c73cf0a6e4268a9d11f84a784c11b7c7bfc93c1e3ed582376609d3a86494a783106f4f39ae2aa2c963a8e8cd7caa60c7f350bdddc93476f231e306dccca1ade5713d7bcb7232dc1409aeb14d28539333fb8d6821ca83ab388c9d4903be5e09319edbcf447029d104c70fe7c4fae328236e8c07e455cab36530e2228a0376b9b37fc1887bccb833afbd8c59d17482b690368792b16779e675bd7239033aa1f58e5d098a30d637be7ae729ca018ecf066ece30b911008e603ddb0601c3edb9782937d057219bd39d88eabb3e58d6977bcb5c96cfa5d42ccb377612a83b9b591a8de315dc3d7eaa600a88a47cda79bd844032c9dc5dce2d789332a89e591f0802ecb6e93b0251b14f3fdfcbde78b619fad46c0633e79bdff57e49c0a031758e45811b2e4bb22a798be74a3edc8665fdb36e0993c1eb445d9e8c79d25a4067aff1219f4281e55cdb79646b524130bd95cfa534b243f6423f976a602842e6046a951097ff02ddb17099ee545bd83eb2d749692541728febd86cd94329e91be4e83ffeed2dc51873e3c0bb87f36cac0338cf84a242c18bd7411e422dd906a1e27c46deabef9bc01a78ecab6f06f78f53e75f94ec932998855763d5a6e31b69b3c0e656b0b41b3c3aec0c0313570328537024fcbae2d25e97dc2b6ed2c3538c1fe5458e2fa51846a732aa83e6bbf7f853206afff1642730ee9f0dbde5b242aa03ffc463e3a9383a409c824d4c7b26b788047016c3bbd24bb6afac6f938fdbebc6779c208ca8ebfde0e32be932709c41fad5b2cfe94edfc9519667579c52b7bdf6e4854816cd2e221f970f957ef47516d00d9e4a8280777c09d15c850a2032148fbf9d96d23569282cccdcb952aaa09ef7bc2254e9c41d41a343a80fe827f43cc35a5a69d8747b10ba8e91c0722bf765c645a0234faafb8e4ceae6029e8ec0295da11e40b21e0e33bea35527f0ef263ef585b0325c14116643b5b17938a80aa5ed6d28fe70bbd7a9c2666c3ae58eb8064cebe454d2c89860f6fe514cf545e1069f1d3394be435e9f06db7bd8fb3c94d81ed6757c15b2567fb08da867f62fbf329a48beb8097b94fd68ad09e4e7afb3d1691a6e9294acca38c8a0da6d435e4f0470f02da7f71add6e1f4428971ad1e8b2734242e8c74c4ec02abc2aa20beabc37ab155395d5b57c4e73c190effc193d316b8b24b811e32afc5f882a424e1d4d842ed2fa5523cd92d92d59012c40d8a8e83e7a93f9ad161cf508124b167a02ec161d4d3d4d73258637bb2f3af23ec4be6a3a76b863fd9a6fcf7e490b0ba2dc7c6f15b7774f75d1904859b65f4154efcf7dcf1d5642f2f6044063561dc54043d52a999aa648316ee1c2d6eda415c500e6bd7d26d64e3ff34bb3722f4faf64deaaacfe8cdad17297d10c54c7a9d93051f1f44f5e91d5d77fdf25d0252d99b201de774455a5116bb17260f8ad29176eedaf1319f9edab4b23142a54dc82a0d7f31977925f612f46afd90524d4b3fdc44676927495ece88ad979753a4ab2fb5a7e5e0897c8d0729ddf92e5f2d530015df3d31f68060554f9fcf66aed718f86a24eb341213fef18614a2d7b98e1c566bd64c4c5889ef9be00f6094978c9b8a4bc2cb47f6fcaab209289040de823fb8d971644e6ebc01d268c52fed7ce1286c744f672b54ebfcedf212bcc7f567dee79f017f34c6cb3f1f9cfed4d9a29a64b696186f44f3d5cb438885c2e211d300f707fe0d2dcd6cbef800c4ea095168eed8c4dc94daa07d780aec2ab13f64213efc1db5c4460e29eb02a8c7e261df73aca4867f08b5fa55d9"}, {0x20, 0x104, 0x9f6, "40d049801257d17c626ba1661c"}, {0x40, 0x104, 0x9, "cd690b117783f8009666386b443e7ef10dff37611a933b54d05afa83a9b3be9688040b613ae27ff467cdf0d4"}], 0x1070}, 0x88000) connect$bt_l2cap(r0, &(0x7f00000017c0)={0x1f, 0xfbff, @none, 0x0, 0x2}, 0xe) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/121, 0x5e24362b50da1320}, {&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/10, 0xa}], 0x5) 00:58:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x15, 0x0) [ 1320.461841] loop0: detected capacity change from 0 to 264192 [ 1320.468062] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1320.484141] loop0: detected capacity change from 0 to 264192 [ 1320.485206] loop6: detected capacity change from 0 to 264192 00:58:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfd}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff, 0x630}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) [ 1320.493591] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1320.501763] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1320.505184] EXT4-fs (loop6): get root inode failed [ 1320.505704] EXT4-fs (loop6): mount failed [ 1320.519883] loop6: detected capacity change from 0 to 264192 [ 1320.533448] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1320.537349] EXT4-fs (loop6): get root inode failed [ 1320.537862] EXT4-fs (loop6): mount failed 00:58:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:58:59 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1028) 00:58:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfff7ffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1320.614356] loop0: detected capacity change from 0 to 264192 [ 1320.629581] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:59:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x81009431, &(0x7f0000000000)) [ 1320.680642] loop6: detected capacity change from 0 to 264192 [ 1320.685147] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1320.687602] EXT4-fs (loop6): get root inode failed [ 1320.688029] EXT4-fs (loop6): mount failed [ 1320.718620] loop6: detected capacity change from 0 to 264192 00:59:00 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1300) [ 1320.756704] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1320.762985] EXT4-fs (loop6): get root inode failed [ 1320.763409] EXT4-fs (loop6): mount failed 00:59:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0045878, &(0x7f0000000000)) 00:59:12 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0045878, &(0x7f0000000000)) 00:59:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:59:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x810, 0x0) 00:59:12 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x16, 0x0) 00:59:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x1, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x7f, &(0x7f00000000c0)=0x1) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x0, 0x1}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:59:12 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2000) [ 1332.811879] loop0: detected capacity change from 0 to 264192 [ 1332.820927] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:59:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffffffffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:12 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1814c00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0xe00, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0xab1eda4ce478facb}, 0x20000050) [ 1332.849798] loop6: detected capacity change from 0 to 264192 [ 1332.878475] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1332.883476] EXT4-fs (loop6): get root inode failed [ 1332.884390] EXT4-fs (loop6): mount failed [ 1332.939339] loop6: detected capacity change from 0 to 264192 [ 1332.948182] loop0: detected capacity change from 0 to 264192 [ 1332.964126] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1332.974828] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1332.994130] EXT4-fs (loop6): get root inode failed [ 1332.995074] EXT4-fs (loop6): mount failed 00:59:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x900, 0x0) 00:59:26 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 00:59:26 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2810) 00:59:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none}, 0xe) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:59:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffe000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:59:26 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x17, 0x0) 00:59:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0046686, &(0x7f0000000000)) [ 1346.922890] loop6: detected capacity change from 0 to 264192 [ 1346.924721] loop0: detected capacity change from 0 to 264192 [ 1346.936320] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1346.940080] EXT4-fs (loop6): get root inode failed [ 1346.941064] EXT4-fs (loop6): mount failed [ 1346.955782] loop6: detected capacity change from 0 to 264192 [ 1346.965715] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1346.969031] EXT4-fs (loop6): get root inode failed [ 1346.970328] EXT4-fs (loop6): mount failed [ 1346.976975] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1347.007924] loop0: detected capacity change from 0 to 264192 00:59:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffff7ff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1347.047741] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1347.162825] loop6: detected capacity change from 0 to 264192 [ 1347.181706] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1347.187863] EXT4-fs (loop6): get root inode failed [ 1347.188844] EXT4-fs (loop6): mount failed [ 1347.204584] loop6: detected capacity change from 0 to 264192 [ 1347.218716] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1347.231196] EXT4-fs (loop6): get root inode failed [ 1347.232236] EXT4-fs (loop6): mount failed 00:59:38 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/136, 0x88}], 0x4) socket$nl_generic(0x10, 0x3, 0x10) 00:59:38 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xa00, 0x0) 00:59:38 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:59:38 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2830) 00:59:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:38 executing program 5: clock_adjtime(0x5, &(0x7f0000000040)={0x200, 0x2, 0x9, 0x80000001, 0x7fffffff, 0x7fffffff, 0x80000000000004, 0x100000000, 0x5, 0x9, 0x3, 0x3, 0x7, 0x3, 0x9, 0xfffffffffffffffe, 0x7, 0xb7, 0x48a7, 0x400, 0xc7d, 0x7, 0x4000ffff, 0x7, 0x5a8, 0x3ff}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x6}, 0xe) r1 = signalfd(r0, &(0x7f0000000140)={[0x6]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @generic={0x10, "157f935efbdf0aed8e3eac5d0f7a"}, @generic={0x2a, "9c42dd9d859d0d4ee016ef491bf8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x3}}, 0xafbb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)='veth0_virt_wifi\x00', 0x7, 0x10000, 0x5}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000180)=""/182, &(0x7f00000003c0)=0xb6) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)) recvfrom$inet6(r4, &(0x7f0000000280)=""/197, 0xc5, 0x40000000, &(0x7f0000000380)={0xa, 0x4e21, 0x7ff, @private2, 0x8}, 0x1c) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x42, 0xb0a, 0x7}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x0) 00:59:38 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0096616, &(0x7f0000000000)) 00:59:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x18, 0x0) [ 1359.429268] loop6: detected capacity change from 0 to 264192 [ 1359.440088] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1359.459789] EXT4-fs (loop6): get root inode failed [ 1359.460863] EXT4-fs (loop6): mount failed 00:59:38 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0185879, &(0x7f0000000000)) [ 1359.483780] loop0: detected capacity change from 0 to 264192 [ 1359.503769] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1359.511692] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1359.557834] loop0: detected capacity change from 0 to 264192 [ 1359.567028] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1359.567052] loop6: detected capacity change from 0 to 264192 [ 1359.570779] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1359.589485] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1359.592755] EXT4-fs (loop6): get root inode failed [ 1359.593681] EXT4-fs (loop6): mount failed 00:59:38 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2838) 00:59:39 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0189436, &(0x7f0000000000)) 00:59:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:59:39 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1359.804932] loop0: detected capacity change from 0 to 264192 [ 1359.824320] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1359.844263] loop6: detected capacity change from 0 to 264192 [ 1359.844408] loop0: detected capacity change from 0 to 264192 [ 1359.863367] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1359.865133] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1359.868889] EXT4-fs (loop6): get root inode failed [ 1359.869706] EXT4-fs (loop6): mount failed 00:59:39 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc020660b, &(0x7f0000000000)) 00:59:39 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3028) 00:59:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x19, 0x0) 00:59:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc020662a, &(0x7f0000000000)) 00:59:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:59:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x90}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 00:59:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffff000, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/21, 0x15}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000140)={{0x0, 0x8fd9, 0x0, 0x800, 0x5aae3ccc, 0x9, 0x3, 0x9, 0x3, 0x5, 0x7, 0xfffffffffffffff8, 0x1, 0x2, 0x6}}) syz_open_dev$vcsu(&(0x7f0000000100), 0x6, 0x20040) socket$nl_generic(0x10, 0x3, 0x10) 00:59:52 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3828) 00:59:52 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xa9f, 0x0) [ 1372.918612] loop6: detected capacity change from 0 to 264192 [ 1372.950409] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1372.965322] loop0: detected capacity change from 0 to 264192 [ 1372.971959] EXT4-fs (loop6): get root inode failed [ 1372.972763] EXT4-fs (loop6): mount failed 00:59:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc028660f, &(0x7f0000000000)) [ 1372.997317] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1373.000242] loop6: detected capacity change from 0 to 264192 [ 1373.022626] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1373.028809] EXT4-fs (loop6): get root inode failed [ 1373.032324] EXT4-fs (loop6): mount failed [ 1373.036508] loop0: detected capacity change from 0 to 264192 00:59:52 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3f00) [ 1373.057490] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:59:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 00:59:52 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4000) 00:59:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff7f, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0286687, &(0x7f0000000000)) [ 1373.258104] loop6: detected capacity change from 0 to 264192 [ 1373.279293] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1373.281644] loop0: detected capacity change from 0 to 264192 [ 1373.285135] EXT4-fs (loop6): get root inode failed [ 1373.285983] EXT4-fs (loop6): mount failed [ 1373.297811] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1373.321507] loop0: detected capacity change from 0 to 264192 [ 1373.327735] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 00:59:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffbf, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 00:59:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1373.414030] loop0: detected capacity change from 0 to 264192 [ 1373.424263] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1373.438063] loop0: detected capacity change from 0 to 264192 [ 1373.454481] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1373.839111] Zero length message leads to an empty skb 01:00:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x1a, 0x0) 01:00:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/23, 0x17}], 0x100000c4) r1 = syz_io_uring_complete(0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x2, 0xff, 0x8, 0x5, 0x3f, 0x3f, 0x1ff}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) 01:00:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffb, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:13 executing program 5: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff5e}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x1ff, 0x8000, 0x4, 0x28000]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x96}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x810) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x4, 0x9}, 0x2) 01:00:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xb00, 0x0) 01:00:13 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x40000) 01:00:13 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0406618, &(0x7f0000000000)) [ 1394.543362] loop6: detected capacity change from 0 to 264192 [ 1394.546553] loop0: detected capacity change from 0 to 264192 [ 1394.562731] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1394.573309] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1394.575714] EXT4-fs (loop6): get root inode failed [ 1394.576613] EXT4-fs (loop6): mount failed [ 1394.604462] loop0: detected capacity change from 0 to 264192 [ 1394.616400] loop6: detected capacity change from 0 to 264192 [ 1394.620986] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1394.664080] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1394.672053] EXT4-fs (loop6): get root inode failed [ 1394.673042] EXT4-fs (loop6): mount failed 01:00:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @any, 0x0, 0x2}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:00:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0406619, &(0x7f0000000000)) 01:00:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0xe) 01:00:14 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x80000) 01:00:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x1, 0x3, 0x0, 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="a2fbdd1c492b23c02eee72e745ed1efd3ba82d9896e169a5da90880ac6981ded288bb06c03a1452576c6b9ba202f206afa7e70e0654036b4250454579e612c5fbb396696d7e7127c2962db5417bc70ed53ac699e8b0b223e762bb3588df5e862c04377f242df4deb", 0x68}, {&(0x7f00000002c0)="0c842f9a77778b51d83a03b9ca4c4abd75cf074dd30be2b7229b14cf01e8abf4f7aeb0ced93fca384e0ac45f5d86e392bfe8739eebe2ee6acde3dd1c9b143994a3b9204cc8f124267b4d1882615cbfeec83c420f48d1c82c4fbfa2619e8f3f02942e4586e585c20ea6f4d4de1d2827310b38f88b5685cd1a56eabdd6251939", 0x7f}, {&(0x7f0000000340)="5c2d70e56f1373b43c34bc19f863130e77845332f00b2238947da6bbdbe5c8e9dfe282ccd1548cddd060c9f5d4810e7f59d599cb14fffff537443b5dcbc4384ef1a0e13ed34ddc22d1e205825f2f61cf4a5a97a9b4b1c0a4eeee7d216bcb9546c252cdef6b4e6c9eef5352db9086e38ba48b1bd2421361f76338d31be026edf2104364515af81bea8d98a02165ec8f34bd3b80e379c400a4cb51ca9499c27e90b2f716edc3a61650c1dd439a4d029c8ff7c5368744cf1ce6cd82aec0b0a7f8628e3ab7edb0a0e85fcc15e8670d14329d0d48ac94ffc6f44484dfb17c0d1b8a20d1474fba1cd3d7ad18f61be14f03a91c2e8d1a6a", 0xf4}, {&(0x7f0000000440)="af1f8e3ad55f1d27cf6cd717d78c2467ee147768215f15c07fb4d4182efd01c2e456549048be2b118ee6e23a0b2e89cf9065017ae6ab0e2b3fbbd88842624fdad7705a16ee", 0x45}, {&(0x7f00000004c0)="ece5e6cd4305241e82243f56e1d1a451315ace580a2f8987c0970034a82862767856f1aedba66f7daf558a2a395c9e093ac22bf5c8cd879797c2b081404e78cbd1aaa2c7c300daa94260081363a4ebec860ffd6cef02c7fbbd30b20e66da1f0cbe542736ff54592a40db8076cee9f161dfbd12b250545a7efe633e07a675a2195800e418e2f1e35b27090cf9da740835ed4bf0fafb65a2e2c7acb8b9cae61998623884bf37e5d800f7fd4e2cfb3a83eb916da45231713f6eeb7d19dfc7d546b259eb07cde5a3e69e090f7c141e671e059a6e58ba05425907440baf8ba1b502cee0cc7dc53c5578", 0xe7}], 0x5, &(0x7f0000000640)=[{0x108, 0x131, 0x7, "0391b9e8403d71c5a15d4a500843afb58e823d1f9419e0783c6c9a5d5c0edc59495990007298ad5fcab3c71da33ec3f4531a2d0c3b70eefdaa239fe7c8a8122dfb46051f2588e81c45f8c61c596468f78ca555c15cf725a6436ddbc3ffd0e1879c66df27dc39dd27f03b3f3ddee9cda035346e953cef5719ecd0ebb115fe182f58a1e2997e3724328b011d9ec0f96d51b51a982c592ebee41bb65af552dbbe5fdc27da0061fb4531af4255f3808d705f4cd91fb7764d559eb96839fce67dcb49c7e3c6bdb8149e88849216d8889030c9c1b42dc971d6a91f218f12b4bfcc6c8cbd3dc4c5608193d526466aa52ab8d45af4"}, {0x1010, 0x110, 0x7, "0249bcd2bb1833be6cc1a6399bede9d1d50f2b62690ce4e0bc925c6bffe00cf5df95b7633df063e15b476386b78f13f8bfc54b2353c16bb8a5c0f24d8177f8b0c8e0879418859cd8591eca57d037b55228b7580d13a7e1f1134a6544c0a4875a15f731d5c20e7a2e36a849dd0c748773ffe182f421dd7e3783780e94ab7ffb6bc9c49e81cdd4de5cd00cb44549c8c8775a2ec453a35992fd81a2b8fa4f2753cea53658bb1dd2f66810f72ad860abdeb6359f953cc6733fccc5ede80b439d9f441cee3ebd226eb2b43fc434a27dd5b9bc922627584bbf95ccb71f98d1b03bd4e6715686f46ed1672acfe2cad68d380381f50fe7d6798597b1cdfb4dcc84cf21ab0c88f2648c14bffdb24e4bd960e8b0f79e0241b921e8136d41575314deee1e5b1144fba97c48d4ba276fec4773ccc6afdc7e9fc7df520fcb0060e2d1de71945551c60a57d2df6320ba73a1beca46b34e2817bcee4cc9d6d45fc2726786853aeed0722a4910a560ca3150bc2be61eefd76259a7e763444c9ac25088c119780ee4d00dbddc3d7a6d7ea91b256d5e5f47180e088793d5e802eb9841fab2ef6d67b03f0241f14eea5eb223098bd53f47ee70280a9e5048c328b8c5071dd11cce86a1b606811cd92c5267a8ffca0ffc7edddc2206bbdef356dd47f02e1b4e8f4ec06ad2913f56b1eda22f4aef43cb5cb25973a76bc3d8aa88699483fda0aff14493f9d3d1cd47b2a15f9813c9407f7cc625142c9af852b06533767300a3e992c922adde1bce8a8104aed12655f5dc987004f6e3a174c56b30759d2bfd180c6903de7a6fa9ea2b841c17d52c81f3b7f725dc3a80099b644bea7819095a4fc937dc0cb598e5e977078088429606fb0d54705710fefcd49356f5851d5d8ebcbb0bf214ce6d19bce5d7c726a7e125d640502c71cea91b30109ea932133f9c69a7e4570f10f8969ca01971c05c096298cbeaa5bf90689710559830dc72fd884e4b7ac6a1046759df615ec2f15e600ee52945a341868339faa2fa5764d5e0b693768ef7eaa7a0c18789b3d2b3ad53a574641757c51a9996e5e3af44eb23d203e993f3b080ffaa0027e1aba0f1798badd6015bd0fbc998680d94baf26d2585fbd4841d1b0a42036a581bc0631a733aa8a221be4c86b5d405731a4a16d066f1bf27a6186d57764c6a95e396d25b4580f6d3a6446c84d48a577f63b01ccee5d0794e778719d0e9c3726e28780ae72a675433b0b2e8d4aab8da9e0a601aeeca9ae91ad9fb73cb6854f9a550db2aafac8c4ad63088d1a2f04c0ce19c38e6932607c4f7b5b2e582c295b37203f002c9ed86e15a33ee98a53827b485e969ef46201e7cca1f5024938f0292e120faf9fb0ec2b9b3346a699e035e0f4043a6aa5cb3afe9d0fea2548711944016381d68d60ef10623f1d6d60ff9af28545d71b5be4bef4e5764d17f07041dda8833ce0ef60e2c5dd829dae220a80949516fa4d358b681a97ef2cfe272b2cf1985e6c00c5a1524500ad002faf82d49bf484c719dab0aa256f7316f7fb65846145c2507ec461b55348a845871e1ffe11043406b0066de4321a6c5ead76658a6589e320410b4e1ae11f9ca3ead2dfc83bbc51f8eac815b2a0b3ec679d496b2c686641f0e0eec142090c5b34a006aaf09c9bf108151c8dbaaa4563f33674c1199373866b94fbcbfa7fb7befda8e2002cc3018beed681cd348d5ab9210fa4e3e1d102c8c69f232dc261a891e8fa735928bd72537167f17599c7f75bf267e380c1d1bf4180bcc513ed9852a202b1322312dc451b5e1507b16aa5aad0849e5e608904cc86ece3212c8ad8719410a910f709b2d302064aa80f3977ba952f07ce68802e8aaaf319532b9c566d2c4961168f5ebc9bc7f3d25e23accb7c799c7eda199eed149fb1e244bffaf16bb0e89349950ee2bf80c69f20f181f3fc87e35d9708b0009f1eee15d7af28c19220196e5a0fec1b3ec592471353adc839516e648ef3167dbd68682a81fbc03cd2cfd1200896ab839a0af36df75ddd44836de21a277b71a9fac56e3dc9648d27d4b9aacb73bd669199be88288358c39f5730308ab77e3753b5890c9d59384287c865d7ae4a50618bb1b8ca757bccdc541f385925b0f8a8b31270162c52ca3a372affd90c96e8519feb82cff9ef25902d03bdc06aed5b7e5a0c841b7ab3d01f7058e9ba0ef1d0dbd1535325d1553304477a769669e2012027d4e2a1a60b843ad4aaf13bc8e804597422c505a8e49e1a3956575181e23fc350201d9e71333d340efa99d6fd7e651c1432ebbb1dd6f3a4d077b8d8d9138b72a775fc61a5f003c76f768a26055817ad4517896c23a14fb9b0a0bf2e308976f184699ac667e875a8ae7539811df7638f1af2748232db2c113fafe9b7cc958d07e155ea79c7dfaca125fcd8f4f02a259c75ddf185649bad96978433572120fe22e074ba0f93769e49d32c0b1b036a8fb9f3a5ae63d4a30be8f6643003210976b8d7ddb299b936cdd5d8bf53e85fc0a19534b42a8532ba0d648f9b2e364dddb08bc5165727cbb5e9a557ebf166b26b0a2e8fd5eb6aad37e85d7a2979e95ef2d3a1ee9a29f2590f1794acd9636119b30ace928b564a931b954c2220ad691f49b9d608b5a371daccd2267ceb690883a4f51c187b7e3296229de2eedf8f38256df769d8ab2fdeec3a51dc26648851e9d01d4e45b97c4709a5297b71f4a581f47de84637f00aa2cf4f4d9616ecfa1044bfe8339d4c5d7d248b9531251811b85b37865093aab466d6f2c62d8ce0988d0161947fc7621c79aac951909dadd0268c08da262b94bc175d03c46f28c7ada1b1310d0951b606f122e7246673349a7faa0670fd676c0dc8e5d07348bbc645500bc7b50a42e2c120811714025946916e0fcb424b9ffa12585e973725493945e9ba0b44421583ae7fab1479790c882c7c1e20926dd408d288c3e57a7025eff12833bf545f6397649f6e15db6bb3e5229922125bcde112a172ad6d55dc7721f9b9f0079b49c18b859d50f05d0f3a3aabd3f5ef234f18ac96f8e676420e3bc8999e2a0649d8cd3bd0f1241f4e9956ad0af243faf03513385b22528deffe2673307e79f8c75c68fcf5b3975d6976fc6e3e7bf274834863baeaceb051cf943bbeff1f36c0439a937f55c24ddaa7a69545b961909cd44be5b3d3c279ae80b11727d3e58ea3b62f3da4f0efb89ccd851fe7e5de3b28228172fc8c7ee9989fc2ebbcb5a8670d859befebee40a411e1a2e8a58e11f598df96503d6c98f03db839ff223b91982567b819917f86f3fc3ddeb98c90670ab82e24c6cf8331f6495e5ca517a32fd69dda9603827cb73bcfce70e455e32221ba683c2d26312dd62bfba42b07cd8269c3a780720b97d42caac1d567a5683787b083606018a341433aa5a4fb2b915e3ef00da31504073430ded3bc27a5a1f880fdb82872e72e2a003bb3eb72ca1e14a54eb992c06972fe3de7da122ed3dc5fb823dec0120c6ed0706983e6525576b220f7809bb3d1ed80e14e34ae73baf7147d3e3a2c45b34e320c9fa6de0b2da7a331addb29f5620add77932a02b5cca9c85366e9ee1f4857c03ef632d4721a082a9e136bcfddc069a0fa7ed9b4eafd6510dfed5e2936a452c5437a3f7e9371228f838a1897087cb7075251de55e7cf48c7aa625b835cd5a8dc9ac86b6696572e419817c18feaddc0a6292aafd1813f874d36578b41f2114b6287af188a4729b5eef9e6c4bb1efe46c234ea3e44facc75dd5dac0f478a9463e67b63d00b1ead8f1242cbf2a8e40e984e65ccb3a23d1797bf8ed15de1abf78cdb19bb4ef99c28cde5a7e54d1bcfe7869c4fdba777c0a5633037010c9aa561ec105b83c45144188ddc57537d905b97a9cfc0dd78be110e296c914446a9384adad3f7235c70770d59112ab707076826b472514b390d7b061feb9e31e2fe6240945d6b57915085e63b13c11ab342db14fbef1d987d2f42a0860aaf115bcf7ab88f2a02ca130573da1c9be12387e1a89c76909ffb10d4c44ce2c31c57d5fe5adc3f20b5e302e57dbbb4c76b508199384db55169584d8b5e8c355969caa9347c674caa4eb8ed9b8e46d7ee4acbe37b3de051ff747951f13fc54bab87c97d24f87b8736fffd242d67365e0e02b56428d90a1b57e2b9329987af1499ca60f0b96867409e87c41958b9d0477e4d5967616428aeb8aae82c234f8f5aff9000117a41f1056cc83b8fc27f9e37ccf3de918ea64d3618cb1d692bf6ac50158ceac3ddb8fee8fd0a667263d9a26c686caee76bad4f8f0ba2caef84161905ea0ed2ef79ee8650b4ae1536abd7992ac52a57d4a357e53ed2454569b0246235f3479fead55f49e57c48a17ecf84c962a6f23fbd1fa168497068377896c06afe89ca1b4fdd94f6de733046c92bf26bf02460f781db6065b9a6c3dff5c8b22784083e553ea0d1801df4479c3cbf9556b6c36cd58a76f4e6084729186dd898e367b7dba8e52a2f80a5a579b3e7e5726254cf3590608591af72e988de531bfcbffdf8705e48b10e71d6a6105e1fd8e0b5e0aca18be0db87391d79b93795aa88312d7dd5d8ab5982bf8b3667b372735cf57e54d664cb306888c34a46f6807a8ef57b857903161c130a33b17cab2877d985be92d18f93a7ec514d4eb9ce18bf7b7161eb39ca8093532a1aa8b6f1b48bbcd40eadcf4bfeaf5175229080458cf7513ac951d636f28a0544059a560996bdd8b23e9d56b530367d0919b649b15f9fddae3603fb38d8f56a7c3c30a3c4b7efa4197c2940d112a7f449692fce6944443212478e6653e5e41bf4b3150e65307bbefd4b4522e1a819b5dd6f2b8cb4cb7f602b5165e4c895053f74000b013c1de1b2a58f48db538a9db6962135909a88ac32652571270b9ebb61d0c028cc9bb3d0c7a187595901e7710ec3c33ffe6de96e55160f5a774ab06d42c3d35c22a6d313f1602f6839b953d939e4aeffafb9b4a2389890f61e5389b3abffbfc3477b23e7a0ed037e4add3bff162e62266abf34b016fe1f7903d2390c1f2cffc512d316c28fc2ffaf44a13be4bc01e2b580e324f41b17d3aebde0b630a066d1eadc0017fc9588f7bd3067b5a8c74b6cc0a7cf359d5a28c7cb881a92e93555f6241ccc2539423a1692b2d2947634e977eefb8358ce08aa037afc204b013e44fe0734f5151bdd6ce761e63af74dd95ac6f85a781564dde4e082d51dc70763ab59b7dd0b844048d2d25395a1d8467d78f4784279c2de4cb13f59641b212f848519517c69b68b0822899668a8e6ff111b779408c25475f84bb9b5be97a2c8f11cb81adc3b1d8ec51be97c2001c1a5434b0b0c64908f6c0759180b112ed37369ef8a28b3979f37149d57d6868ee91b532ed948919a8710a79ee573dc839e3a60ecd472848a88256607aac0f4e4bdc0352c96a90ca88daf03ad30c587effabe9447484a79035671f9896caa0379112eb963b128d15c8a96f2011e60c05683d8a30b0ce97bd0470f2308cb994b1bc27f4a72a4bfe2357ba0baa425406d3375f7a05f822ed0b01f05a20747c2c6fadfac8650e58e5cc1fc665696becda8e8c50c91def52d01f125fe171c824748054434008d5193792cab61fe7ed6cd9c6e9732b2a9b9983cfa5966f7b8da702a86c32568fdb4e7cac0adf8ad5fb0ffea5e9d02f3d43085f9493e03633390dca756b168a6604844dfa7aa8daa2671de34b507012953561c387272321196a1e35e9bbc9a198b151ab33c33c19c3a0e8ee2154a4aec2357a5d4557b5ec22ef83e85c4049cfe342cd2e06de8ed4b6552120ba551f"}, {0x100, 0x3a, 0xcc65, "bc934934346e8042da59f1a8a7f8afd8d3ccd2e793708a405443b73f58f694dfc4599f705216798b0806e0d4281cf7b8417d1ac3a37b78308f80b63aa5369e19928220993151301f5b42a1d75a605b38d3b8013584bb19e64ce91ff4e53ff256e819c57feaf9cfc379e7026ded81a61eafe7989f6a17e5f9e65ed9c051199a030e4cc2c3a88a51b85c85210fb23d6a07598016a6704f9ecdfec8b5594c1973ae19c765dbadc9afe1eae1bf853c665ea6e5e2513f018155063e7e3508c8a17701d0b848a1dcba8860b50cee340e0160e8fcb311f32ec917479c74bf425d07727c9146b6663b7606838cb63aa7bd"}, {0xa0, 0x3a, 0x2, "dfdecbe0934e17213dd5a954b9f04dd69df4bd3d8273e3699525f23141d6bfa7fa354ba2c7250f609d6a89ffbf7c1c8a32b15ebda59795bfcdc36b686cb87a5f220d5e665a80376b429444cfe42e3446000b80bb8a47fdb59ec47cc6941ed8e166877ada38a2fb98ed4abf4f3c4812d1e190bb0931dbf2455b937249754d81b6d3346b188e2782336245a38ec3eb693a"}, {0x78, 0x84, 0x5, "8952bbe5969653a9b6a6968cdfac170221e624ff551bbd946332214526a7fffee3e4542e7de8c140cb5288a9b1e7b3e925ea265838141fbc5d662374a1686074fbe2e33a60892ef725877cdb11a9cd1b5243ed41aa762226264aba515cac5c4cc083f9"}, {0x98, 0x108, 0x5, "c0d87a1335601fb2ea0a87b96d47b0316372ade73e891bb4d5fec015d6a8a1a9cc245ec78be39382f26b374f0f43af1331b442194c343ada61e1e79e81ad297ff1ff17934eab39e6813eb1e215bb7ba1f2c0619d855771c33243c8fc73ece1efeb71320db0fa039e1bbcbf7823823052d46cb91ca6e2acd252252548fb612770d10ab532e39c8cc7"}, {0x88, 0x112, 0x3, "e06067323f639acabd6a2bae52b4707f538423830c16b5f1964b8e01f6e8177fd003576ae0183c67a6b4581760387c9018c462ce4efd4162a84239400a50cf979b82c5553e3e32fa7e961eb73c0ea576ad36be8b6e8c19e6b418343ab94519024d31f9b33ddf7874eadb7f96d4c50ac623b29c30c3"}, {0x40, 0x6, 0x7, "a5bacb5237e175b92989bcc135e82732332af5891b43a3148a0baf49e5a90292c9d870bab9acabc98edff6926d4a"}, {0x40, 0x14, 0x0, "b49ccac66009917563d39ddec86ab55776a548602600067fe7cf4a851164644f87b9aa995108613f499290f03ef5"}], 0x14d0}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:00:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1395.003025] loop0: detected capacity change from 0 to 264192 [ 1395.033181] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1395.072243] loop0: detected capacity change from 0 to 264192 [ 1395.082124] netlink: 'syz-executor.5': attribute type 338 has an invalid length. [ 1395.090061] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1395.130003] loop6: detected capacity change from 0 to 264192 [ 1395.155603] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1395.161295] EXT4-fs (loop6): get root inode failed [ 1395.162040] EXT4-fs (loop6): mount failed [ 1395.181716] loop6: detected capacity change from 0 to 264192 [ 1395.196750] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1395.202950] EXT4-fs (loop6): get root inode failed [ 1395.203712] EXT4-fs (loop6): mount failed 01:00:14 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x200000) 01:00:14 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0506617, &(0x7f0000000000)) 01:00:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x1b, 0x0) [ 1395.536102] loop0: detected capacity change from 0 to 8 [ 1395.542243] loop6: detected capacity change from 0 to 264192 [ 1395.569462] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1395.574874] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1395.583992] EXT4-fs (loop6): get root inode failed [ 1395.584939] EXT4-fs (loop6): mount failed [ 1395.586028] loop0: detected capacity change from 0 to 8 [ 1395.592942] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1395.632731] loop6: detected capacity change from 0 to 264192 [ 1395.657149] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1395.669741] EXT4-fs (loop6): get root inode failed [ 1395.670473] EXT4-fs (loop6): mount failed 01:00:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xc00, 0x0) 01:00:15 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3ffff8) 01:00:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f0000000000)) 01:00:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1395.805921] loop0: detected capacity change from 0 to 8 [ 1395.811161] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1395.831268] loop6: detected capacity change from 0 to 264192 [ 1395.901029] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 01:00:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000140)=@type=0x2) 01:00:15 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x400000) 01:00:15 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0c0583b, &(0x7f0000000000)) 01:00:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1395.933074] EXT4-fs (loop6): get root inode failed [ 1395.933881] EXT4-fs (loop6): mount failed [ 1395.981126] loop6: detected capacity change from 0 to 264192 [ 1396.002513] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1396.008686] loop0: detected capacity change from 0 to 8 [ 1396.008979] EXT4-fs (loop6): get root inode failed [ 1396.009958] EXT4-fs (loop6): mount failed [ 1396.022327] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1396.039201] loop0: detected capacity change from 0 to 8 [ 1396.050856] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:00:27 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1000000) 01:00:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000180)=0xc) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f07000000300098b49066f5382e67ebcc41"]) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1}, 0xe) 01:00:27 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xd00, 0x0) 01:00:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x1c, 0x0) 01:00:27 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 01:00:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0xdce, 0x1f) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 1407.929153] loop0: detected capacity change from 0 to 8 [ 1407.932086] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1407.941560] loop0: detected capacity change from 0 to 8 [ 1407.945431] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1407.963107] loop6: detected capacity change from 0 to 264192 [ 1407.978888] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1407.991565] EXT4-fs (loop6): get root inode failed [ 1407.992681] EXT4-fs (loop6): mount failed 01:00:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1408.024046] netlink: 'syz-executor.1': attribute type 338 has an invalid length. [ 1408.026779] loop6: detected capacity change from 0 to 264192 [ 1408.032710] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1408.034709] EXT4-fs (loop6): get root inode failed [ 1408.035139] EXT4-fs (loop6): mount failed 01:00:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:27 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) [ 1408.146918] loop0: detected capacity change from 0 to 8 [ 1408.150153] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1408.202997] loop6: detected capacity change from 0 to 264192 [ 1408.209205] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1408.217300] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1408.226290] EXT4-fs (loop6): get root inode failed [ 1408.226912] EXT4-fs (loop6): mount failed [ 1408.411927] loop6: detected capacity change from 0 to 264192 [ 1408.415269] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1408.417294] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1408.418393] EXT4-fs (loop6): get root inode failed [ 1408.419851] EXT4-fs (loop6): mount failed [ 1408.763032] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 01:00:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2000000) 01:00:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xe00, 0x0) 01:00:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x1d, 0x0) 01:00:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3) 01:00:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0xd, 0x4) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @none, 0x0, 0x2}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x50, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 01:00:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'team_slave_1\x00', 0x7fff}) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xe7e, 0x7ff}}, './file0\x00'}) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:00:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1417.796075] loop0: detected capacity change from 0 to 8 [ 1417.803690] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1417.811350] loop0: detected capacity change from 0 to 8 [ 1417.814319] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1417.815527] loop6: detected capacity change from 0 to 264192 [ 1417.822211] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1417.827756] EXT4-fs (loop6): get root inode failed [ 1417.828194] EXT4-fs (loop6): mount failed [ 1417.845625] loop6: detected capacity change from 0 to 264192 01:00:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x10, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) [ 1417.867746] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 01:00:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3000000) [ 1417.874696] EXT4-fs (loop6): get root inode failed [ 1417.875190] EXT4-fs (loop6): mount failed 01:00:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1417.959936] loop0: detected capacity change from 0 to 8 [ 1417.996538] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1418.018603] loop0: detected capacity change from 0 to 8 [ 1418.026993] loop6: detected capacity change from 0 to 264192 01:00:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4000000) [ 1418.063677] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1418.091752] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1418.109988] EXT4-fs (loop6): get root inode failed [ 1418.110881] EXT4-fs (loop6): mount failed 01:00:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x8) [ 1418.142831] loop6: detected capacity change from 0 to 264192 [ 1418.151472] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1418.153950] EXT4-fs (loop6): get root inode failed [ 1418.154766] EXT4-fs (loop6): mount failed 01:00:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1418.219302] loop0: detected capacity change from 0 to 8 [ 1418.239790] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1418.254953] loop0: detected capacity change from 0 to 8 [ 1418.258060] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:00:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x8000000) 01:00:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x9) [ 1418.299559] loop6: detected capacity change from 0 to 264192 [ 1418.306658] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1418.309957] EXT4-fs (loop6): get root inode failed [ 1418.310776] EXT4-fs (loop6): mount failed [ 1418.317146] loop6: detected capacity change from 0 to 264192 [ 1418.324916] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1418.328196] EXT4-fs (loop6): get root inode failed [ 1418.329055] EXT4-fs (loop6): mount failed 01:00:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x43, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:47 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 01:00:47 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xf00, 0x0) 01:00:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x1e, 0x0) 01:00:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff00000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:47 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x9000000) 01:00:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xd) 01:00:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:00:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x13) [ 1428.097150] loop0: detected capacity change from 0 to 8 [ 1428.117607] loop6: detected capacity change from 0 to 264192 [ 1428.120799] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1428.140663] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1428.146724] loop0: detected capacity change from 0 to 8 [ 1428.150820] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1428.153993] EXT4-fs (loop6): get root inode failed [ 1428.154775] EXT4-fs (loop6): mount failed [ 1428.180355] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 01:00:47 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xd000000) [ 1428.209281] loop6: detected capacity change from 0 to 264192 [ 1428.254569] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 01:00:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x300) [ 1428.266014] EXT4-fs (loop6): get root inode failed [ 1428.267037] EXT4-fs (loop6): mount failed 01:00:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x112, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1428.341204] loop0: detected capacity change from 0 to 8 01:00:47 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x10280000) [ 1428.359394] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:00:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x900) 01:00:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1428.448506] loop6: detected capacity change from 0 to 264192 01:00:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x300, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1428.464274] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1428.470762] EXT4-fs (loop6): get root inode failed [ 1428.471194] EXT4-fs (loop6): mount failed 01:00:47 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x13000000) [ 1428.486809] loop6: detected capacity change from 0 to 264192 [ 1428.503698] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1428.515933] EXT4-fs (loop6): get root inode failed [ 1428.516342] EXT4-fs (loop6): mount failed [ 1428.529178] loop0: detected capacity change from 0 to 8 [ 1428.613504] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1428.672913] loop0: detected capacity change from 0 to 8 [ 1428.680801] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1428.951635] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 01:00:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x21, 0x0) 01:00:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x503, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:00:58 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x20000000) 01:00:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xd00) 01:00:58 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:00:58 executing program 5: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3, 0x3, 0x0, 0xffff, 0xc, "6b4d72036be37a71f6253c93abd8025a379128"}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @le_create_conn={{}, {0x1, 0xd290, 0x5, 0x80, @any, 0x60, 0x4, 0xc05e, 0x1, 0x4, 0x9, 0x25d}}}, 0x6) r1 = memfd_secret(0x80000) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) 01:00:58 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xf40, 0x0) 01:00:58 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/237, 0xed}, {&(0x7f00000001c0)=""/71, 0x47}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2fc, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc15, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc9d5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3b0e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4a66}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x308c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcb8}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xfffffffa}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d5a4fd2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2884}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ffe0000}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) [ 1439.526346] loop6: detected capacity change from 0 to 264192 [ 1439.536013] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1439.538473] EXT4-fs (loop6): get root inode failed [ 1439.538902] EXT4-fs (loop6): mount failed [ 1439.558307] loop0: detected capacity change from 0 to 8 01:00:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1028) [ 1439.584483] loop6: detected capacity change from 0 to 264192 [ 1439.585032] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1439.595177] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1439.599668] EXT4-fs (loop6): get root inode failed [ 1439.600118] EXT4-fs (loop6): mount failed 01:00:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1300) [ 1439.665842] loop0: detected capacity change from 0 to 8 [ 1439.669479] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1439.736648] netlink: 'syz-executor.1': attribute type 338 has an invalid length. 01:01:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xf48, 0x0) 01:01:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x22, 0x0) 01:01:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:01:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2000) 01:01:09 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x30280000) 01:01:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x505, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:01:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x200, 0x7, 0x8, 0x1, 0x6, 0x7f, 0x101}, 0xc) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x3b, 0xff}, 0x2) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x20) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4) 01:01:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x68c6}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 01:01:09 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x38280000) [ 1450.356290] loop6: detected capacity change from 0 to 264192 [ 1450.381745] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1450.386628] EXT4-fs (loop6): get root inode failed [ 1450.387012] EXT4-fs (loop6): mount failed [ 1450.447220] loop6: detected capacity change from 0 to 264192 [ 1450.463570] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1450.472555] loop0: detected capacity change from 0 to 8 [ 1450.473868] EXT4-fs (loop6): get root inode failed [ 1450.474910] EXT4-fs (loop6): mount failed [ 1450.478546] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:01:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0xff8, 0x0) 01:01:09 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2028) [ 1450.514197] loop0: detected capacity change from 0 to 8 [ 1450.526457] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:01:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x506, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:01:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1008, 0x0) 01:01:22 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000400)=0x8, 0x4) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000440), 0x2) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/215, 0xd7}], 0x4) 01:01:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2810) 01:01:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x23, 0x0) 01:01:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) readv(r0, &(0x7f0000000040), 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x580, @any, 0x20, 0x1}, 0xe) shutdown(r0, 0x0) 01:01:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:01:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3f000000) [ 1462.897052] loop6: detected capacity change from 0 to 264192 [ 1462.921087] loop0: detected capacity change from 0 to 8 [ 1462.940594] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1462.946399] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:01:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2820) [ 1462.958097] EXT4-fs (loop6): get root inode failed [ 1462.959113] EXT4-fs (loop6): mount failed 01:01:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x40000000) 01:01:22 executing program 5: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000080)='*^(\\\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsmount(r0, 0x0, 0xf) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400000, 0x2c, 0x1}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x60, 0xfb, 0x8b, 0x20, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x10, 0x0, 0x100, 0x9, 0x8000, 0x5, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xa, r2, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x87f448fb0094166a}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3f}, @NL80211_ATTR_PMKID={0x14, 0x55, "2842c2f250d8a3114bb7327853077bdd"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x401}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x58}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x1401c000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00cbb395", @ANYRES16=r6, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) readv(r3, &(0x7f0000000140), 0x0) [ 1463.021234] loop0: detected capacity change from 0 to 8 [ 1463.029157] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1463.049402] loop6: detected capacity change from 0 to 264192 [ 1463.078484] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1463.092190] EXT4-fs (loop6): get root inode failed [ 1463.093207] EXT4-fs (loop6): mount failed 01:01:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xf5ffffff) 01:01:22 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2838) 01:01:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x507, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1463.221107] loop0: detected capacity change from 0 to 8 [ 1463.228449] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1463.269634] loop0: detected capacity change from 0 to 8 [ 1463.285730] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1463.288147] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 01:01:22 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xf8ff3f00) 01:01:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1463.981735] netlink: 'syz-executor.5': attribute type 338 has an invalid length. 01:01:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1100, 0x0) 01:01:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) shutdown(r1, 0x1) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:01:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3828) 01:01:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x508, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:01:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xfdfdffff) 01:01:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:01:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/152, 0x98}], 0x2, &(0x7f0000000540)=""/4096, 0x1000}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname(r1, &(0x7f0000001580)=@generic, &(0x7f0000001600)=0x80) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="669541a2438d21bf61689c0830598151a2f0d80537f143499068384b86caf892a20b4bdc7b9fbd02f611f764fe28ec2a66276442db21fbff60d756794e1413dee9a5495348351b23aabcfb356b28e4608eb89f75a5a038134ceafb7144a02d90b59b23fe00fbecbe98c64710da40bc0acbfd6a42fbda5b6e13530e4f732dce6145bab7d54d9cd4aaf9db5e062673c2f9516edd9c825b14e9b808d617b0f5ad196afa5fd3624a39ea953e2164d1c358ab4ec7f069c43584b879b690241e18daae33370814749697bd7c814768ff4d15efdc7c58136c2e514c37c15b46f6ede022b5c90c7765088fb0badc4ffe7d7fe91149083c58817e5a7ad651f7ae5dc11493") clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f0000000180)={[0x2]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000000c0)=[{r4, 0x4000}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x80000001]}, 0x8) rt_sigtimedwait(&(0x7f0000001640)={[0x6]}, &(0x7f0000001680), &(0x7f0000001700)={0x77359400}, 0x8) 01:01:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x24, 0x0) [ 1477.720267] loop6: detected capacity change from 0 to 264192 [ 1477.731846] loop0: detected capacity change from 0 to 8 [ 1477.746549] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1477.749474] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1477.754342] EXT4-fs (loop6): get root inode failed [ 1477.755350] EXT4-fs (loop6): mount failed 01:01:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xffefffff) [ 1477.782750] loop6: detected capacity change from 0 to 264192 [ 1477.805302] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1477.813027] EXT4-fs (loop6): get root inode failed [ 1477.813877] EXT4-fs (loop6): mount failed [ 1477.815686] loop0: detected capacity change from 0 to 8 [ 1477.830935] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:01:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3f00) 01:01:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x509, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:01:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:01:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xffffefff) [ 1478.067291] loop6: detected capacity change from 0 to 264192 01:01:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4000) [ 1478.088748] loop0: detected capacity change from 0 to 8 [ 1478.103390] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1478.104689] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1478.115080] EXT4-fs (loop6): get root inode failed [ 1478.115758] EXT4-fs (loop6): mount failed [ 1478.137284] loop6: detected capacity change from 0 to 264192 [ 1478.156828] loop0: detected capacity change from 0 to 8 [ 1478.162085] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1478.169730] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1478.174133] EXT4-fs (loop6): get root inode failed [ 1478.174868] EXT4-fs (loop6): mount failed 01:01:37 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xfffffdfd) 01:01:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x40000) 01:01:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x2}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 01:01:50 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1200, 0x0) 01:01:50 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xfffffff5) 01:01:50 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0xb8, 0x0) 01:01:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x50a, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:01:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1490.944590] loop0: detected capacity change from 0 to 8 [ 1490.951919] loop6: detected capacity change from 0 to 264192 [ 1490.955579] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1490.971482] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1490.977712] EXT4-fs (loop6): get root inode failed [ 1490.978289] EXT4-fs (loop6): mount failed [ 1491.000538] loop0: detected capacity change from 0 to 8 [ 1491.005786] loop6: detected capacity change from 0 to 264192 [ 1491.011969] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1491.020390] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1491.024626] EXT4-fs (loop6): get root inode failed [ 1491.025058] EXT4-fs (loop6): mount failed 01:01:50 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file0\x00', 0x8da) 01:01:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x80000) 01:01:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1491.118252] loop6: detected capacity change from 0 to 264192 01:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa00, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1491.146689] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1491.151209] EXT4-fs (loop6): get root inode failed [ 1491.152126] EXT4-fs (loop6): mount failed 01:01:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x200000) [ 1491.193502] loop6: detected capacity change from 0 to 264192 [ 1491.240671] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1491.245713] EXT4-fs (loop6): get root inode failed [ 1491.246160] EXT4-fs (loop6): mount failed 01:01:50 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x140) unlink(&(0x7f0000000040)='./file0\x00') ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 01:01:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:01:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3ffff8) [ 1491.347748] loop0: detected capacity change from 0 to 8 [ 1491.354597] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1491.376385] loop0: detected capacity change from 0 to 8 [ 1491.377832] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:01:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1f00, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1491.501498] loop6: detected capacity change from 0 to 264192 [ 1491.534476] loop0: detected capacity change from 0 to 8 [ 1491.538056] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1491.566673] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1491.566970] loop0: detected capacity change from 0 to 8 [ 1491.570150] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1491.572505] EXT4-fs (loop6): get root inode failed [ 1491.572924] EXT4-fs (loop6): mount failed 01:01:50 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x400000) [ 1491.593318] loop6: detected capacity change from 0 to 264192 [ 1491.615766] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1491.624794] EXT4-fs (loop6): get root inode failed [ 1491.625209] EXT4-fs (loop6): mount failed 01:02:00 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x300, 0x0) 01:02:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x400000) 01:02:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1000000) 01:02:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:02:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x5) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)=0x3) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0xff, @none, 0x3ff, 0x1}, 0xe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) listen(r2, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc1}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000000000003200000008005201", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) close(r4) 01:02:00 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1300, 0x0) 01:02:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:02:00 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) r3 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000002c0)={0x9, 0x0, &(0x7f00000001c0)=[r1, r3, r0, r4]}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x7) 01:02:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2000000) [ 1500.772067] loop6: detected capacity change from 0 to 264192 [ 1500.805586] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 01:02:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file0\x00', 0x8da) [ 1500.819455] EXT4-fs (loop6): get root inode failed [ 1500.820298] EXT4-fs (loop6): mount failed 01:02:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x3000000) [ 1500.841185] loop0: detected capacity change from 0 to 8 [ 1500.882687] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1500.888743] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 1500.891900] loop6: detected capacity change from 0 to 264192 [ 1500.903683] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1500.908789] EXT4-fs (loop6): get root inode failed [ 1500.909792] EXT4-fs (loop6): mount failed [ 1500.912825] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 1500.939141] netlink: 'syz-executor.7': attribute type 338 has an invalid length. [ 1500.951995] netlink: 'syz-executor.7': attribute type 338 has an invalid length. 01:02:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:02:00 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x248, 0x0, 0x200, 0x70bd2a, 0xc7a6, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1f, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x401, @local, 0xfffffe00}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @local, 0xfffffffd}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "db0337d6b3c1b96cfc4c16e08bf570325039780136ed50c2bc2a6d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ec745bcc937e82f6d3c7cd0277d5a3fd249f484e82ecc3"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x840, 0x3a5) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8040, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_mmap}, {@afid={'afid', 0x3d, 0x800}}, {@cache_loose}, {@version_u}, {@cachetag={'cachetag', 0x3d, 'udp:syz1\x00'}}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x38}}]}}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x10001, 0x20) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4) connect(r0, &(0x7f00000003c0)=@l2={0x1f, 0x7fff, @any, 0xb7f}, 0x80) 01:02:00 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4000000) 01:02:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2fee, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:02:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file0\x00', 0x8da) [ 1501.154612] loop6: detected capacity change from 0 to 264192 [ 1501.170663] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1501.174547] EXT4-fs (loop6): get root inode failed [ 1501.175398] EXT4-fs (loop6): mount failed [ 1501.187022] loop6: detected capacity change from 0 to 264192 [ 1501.198835] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1501.204181] EXT4-fs (loop6): get root inode failed [ 1501.205060] EXT4-fs (loop6): mount failed [ 1501.355632] loop0: detected capacity change from 0 to 8 [ 1501.361445] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1501.443652] loop0: detected capacity change from 0 to 8 [ 1501.447890] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:02:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x5, 0x1008, 0x321, 0x0) 01:02:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:02:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x8000000) 01:02:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) 01:02:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2ffc, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1501.731012] loop6: detected capacity change from 0 to 264192 01:02:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendto(r0, &(0x7f0000000200)="e2ea98676936f3e1ae9fa2fd03e05c650b4cd103081e3ed1", 0x18, 0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x1}, 0xe) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r1, &(0x7f0000000100)="52e76e1aad8ec8c759ca5c2f8454964cb6aef69e4f2fcb98bba0c258dad3f5b3c702d0d925370d1264be23b1e2cf42058fa04573907d08ef301a55eadd0b8c54eb2184279c", 0x45, 0x8c0, &(0x7f0000000180)=@in6={0xa, 0x4e23, 0x20, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xbf}, 0x80) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/23, 0x17}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 1501.777377] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1501.782793] EXT4-fs (loop6): get root inode failed [ 1501.783208] EXT4-fs (loop6): mount failed 01:02:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x1400, 0x0) [ 1501.804597] loop5: detected capacity change from 0 to 264192 [ 1501.812882] loop6: detected capacity change from 0 to 264192 [ 1501.824132] EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz-executor.5: iget: special inode unallocated 01:02:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x9000000) [ 1501.831736] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1501.834242] EXT4-fs (loop6): get root inode failed [ 1501.835156] EXT4-fs (loop6): mount failed [ 1501.835999] EXT4-fs (loop5): get root inode failed [ 1501.836435] EXT4-fs (loop5): mount failed [ 1501.878693] ieee802154 phy0 wpan0: encryption failed: -22 01:02:01 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1004000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x209004}], 0x0, &(0x7f0000012c00)) [ 1501.944834] loop0: detected capacity change from 0 to 8 [ 1501.949118] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 01:02:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2fee, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) 01:02:01 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0xd000000) [ 1502.043763] loop0: detected capacity change from 0 to 8 [ 1502.050965] loop6: detected capacity change from 0 to 264192 [ 1502.060951] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1502.094735] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1502.100604] EXT4-fs (loop6): get root inode failed [ 1502.101011] EXT4-fs (loop6): mount failed [ 1502.120910] loop6: detected capacity change from 0 to 264192 [ 1502.132144] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 1502.135819] EXT4-fs (loop6): get root inode failed [ 1502.136214] EXT4-fs (loop6): mount failed 01:02:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2fff, &(0x7f0000000200)=[{0x0, 0x0, 0x800}], 0x0, &(0x7f0000012c00)) [ 1502.204623] loop5: detected capacity change from 0 to 8 [ 1502.210218] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1502.403918] loop0: detected capacity change from 0 to 8 [ 1502.416116] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1502.526694] loop0: detected capacity change from 0 to 8 [ 1502.642438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.165140] kworker/u10:1 (44) used greatest stack depth: 22960 bytes left VM DIAGNOSIS: 01:07:08 Registers: info registers vcpu 0 RAX=000000000058200f RBX=0000000000000000 RCX=ffffffff84b9b167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c78b4 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643cc50 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b99e9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e3000 00000000 00000000 LDT=0000 fffffe2500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1114e9f010 CR3=000000000de24000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000 XMM02=006e65672063657865080a0100010101 XMM03=006574616469646e616320636578650e XMM04=6578650a00736465657320636578650a XMM05=6f74756365786511006c61746f742063 XMM06=63657865090073747261747365722072 XMM07=6169727420636578650b007a7a756620 XMM08=69646e616320636578650e006e656720 XMM09=736465657320636578650a0065746164 XMM10=786511006c61746f7420636578650a00 XMM11=00737472617473657220726f74756365 XMM12=636578650b007a7a7566206365786509 XMM13=696d20636578650d0065676169727420 XMM14=616d7320636578650a00657a696d696e XMM15=000073746e696820636578650a006873 info registers vcpu 1 RAX=0000000000b0b46b RBX=0000000000000001 RCX=ffffffff84b9b167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c78b4 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643cc50 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b99e9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e3000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1113bbcc70 CR3=000000000de24000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000412139e000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000