0000001380)="965a4cb4d425791e1e3b70e9eda36488ee8521dfc2ab153a82e965990e76496cfa4ad6acbb53bdfa268126035601e1b788bcc4ec8d8f8ac7f0d465fa7eba91ee2988a9df9ae5ddad72e1db337dddb79212183d7c5e8eca576807c5da2dabaa58b00d64d799c8f8bb3a2d8ad20f2379dafdd707fbc143ac5ae38200c5947f6305a96a9741dec81706bdddb9f25967895305cd0829085a253e10c4fb4ef6cd7dbc0c6505bf7739141a53e99f3b1f24f7ae1bf87de79b80599d8c946e9eaef8d204ade4687088190d484b8e2401c62079fafa8265fb392eb591bef2977214", 0xdd}], 0x6, &(0x7f0000001480)={0x48, 0x88, 0x4, "9e551cc37fc90d4d20202f729fd43ce0cf9c333b8dfcfc2f26a0f6f3f12f2ae89a4c7081566a496b88c4295f9c4b10ccb9cf"}, 0x48, 0x80}, {&(0x7f0000001500)={0x27, 0x1, 0x0, 0x1, 0x4, 0x0, "c7d6d9a662c21212bcc87b4d1f099f1fb77fe29537acca4fe078471ed200038deef618034ece3fb93ff03814b91cd7620f0aea427fbff662b6277d0ed3fefb", 0x1e}, 0x60, &(0x7f0000001640)=[{&(0x7f0000001580)="fa2e26162d5ddbaf623b65a2426e1535f825c2dd86eeaa02701434043820c56cdb4010593994ae2f6e12dabd2f656b8a8cefb1a2bfcb9192c883872ce7bb9aaf5d45d66a967ac162571f014d8a984456a36dccfa18fac4491d1640aab55524992ce814b56cc08f90f10687c81f158ae16797d114abe1144fa79da6ff1cc12a69e236582134ea82e24775a86168c97549311b3a539f7573c29d17dc913eb108eb6928f4c7d9afb4cdc1c20be8", 0xac}], 0x1, &(0x7f0000001680)={0x30, 0x111, 0x2, "bbe0c48910f8149f44a115aa0286086ae614976e97c44fbc18"}, 0x30, 0x40}, {&(0x7f00000016c0)={0x27, 0x1, 0x1, 0x6, 0x3, 0x1, "0289d2ade5b6a5963db91de4dc2bd40fb5b6838b5b1cb51d4b57aba54aa778e8b70456e6848ffc20424fb44ff069750379709906e77ecfa2ff5ca0278b4609", 0x13}, 0x60, &(0x7f0000001980)=[{&(0x7f0000001740)="6993f65d9b122a7cbda2988e8ac73486ca3e9a75f1c43a7040e558a336e818544875fe48fdd5564e1ec8cd72257165e9c6191fe822b592727825944f68409ce272fe291c87bcc8c2c7da9136421e009ca8559807912f2b26e1cfeb53cf8eb5a9b457994bf83bb34e9af8d8bed7469122fda39f5d7d6b6317", 0x78}, {&(0x7f00000017c0)="85741e001f743b1f687d52abf5c1496666dc00f4fbafcc5180143e49e58f82059a0db48d6188f379a5b353ad8c3da0c36fbd7be31068359b1c1c046668f36e958f95b9962888ab30afea15c75a941635dc26c737b5e8a3bc88a187f6ae7d5a64017e772f5d13732198c78288d7bcd6c819c6a9ea92302d970f3b7607075e8f1feacd9ee2b99c905f9f0026c21dc1f38d", 0x90}, {&(0x7f0000001880)="d1352e911104319a0df912edca264f1a81056c7638c99b07f2974cf0479308d82b87697e6d230ada5c45f82039e1a72aaa85af32f560f87cee2720a893a72a266f024efd8b19ce297b94535aa214be6e05bc3658b2dedefbc6a6e743270b541d194eed0bfb0718f353ae13e415efff81fbe74797d0887233d823a68c90970d3c3e16a956a2b63991fd8d0910f0030cdb1db52519af88d93672346872ca7a436e1d57d7d12594df06f222ff003dda4c4eba9518539fc411e3de151cc02f589b7ed0a9d2bd8a2d", 0xc6}], 0x3, &(0x7f00000019c0)={0x98, 0x6, 0x7fffffff, "e85e9e4b897db6e8417899ec0ef4acd08c28d4d269be51c00a7fd47774d41d8090ccd272fff81a6d65fb9930a7a45c411aa62a02b095caa6aa32ebc480ef190abce514e65191846d097f449a712daab71eb1b2530b497dd07f43b34b28e0d75ae7e327844bf54cdf9f0884a7874aad3a79fe4cb32ed8ca33b09a83fd9ed996445b272cf8a53937"}, 0x98, 0x48814}, {&(0x7f0000001a80)={0x27, 0x0, 0x1, 0x1, 0x9, 0x0, "b014d3732a720254c5679b4733220c77c60bbe2140b7055c540353c69a08f817d1af701c1ed093548c1ad8be1420de71b739b8b11d3075fadab5ac46a4769c", 0x16}, 0x60, &(0x7f0000001b40)=[{&(0x7f0000001b00)="ad1595ab87fc1b08fc9ce83119ffbc834e2c26", 0x13}], 0x1, &(0x7f0000001b80)={0x28, 0x111, 0x4, "2fc7fbb888dc09b89dacd139daf267affdfbb530"}, 0x28, 0x80}], 0x4, 0x84) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/video2\x00', 0x2, 0x0) 15:41:24 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x28000, &(0x7f0000000180)={[], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}) setxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0x1, "c942fcb198c515282d"}, 0xb, 0x1) 15:41:24 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x74f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000580)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "3f4404f3ff5870"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001580)={r3, 0x5d0e}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x28}, 0x10) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000540)=""/7) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000025c0)=0x3) syz_80211_inject_frame(0x0, 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000002580)={0xb, 0x77, 0x1}, 0xb) fallocate(r4, 0x10, 0x10000, 0xa20) [ 627.885388] attempt to access beyond end of device [ 627.891198] loop4: rw=12288, want=8200, limit=20 [ 627.898814] attempt to access beyond end of device [ 627.903823] loop4: rw=12288, want=12296, limit=20 15:41:24 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c00000009000000020000000100000000000000004000000008f2ff0a0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:24 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) timer_gettime(0x0, &(0x7f0000000040)) [ 627.934146] attempt to access beyond end of device [ 627.952212] loop4: rw=12288, want=8200, limit=20 [ 627.969953] attempt to access beyond end of device 15:41:24 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20100, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000040)={@null, @bcast}) 15:41:24 executing program 2: perf_event_open(&(0x7f00000004c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)={[{@noinline_xattr='noinline_xattr'}, {@fastboot='fastboot'}]}) [ 627.988248] loop4: rw=12288, want=12296, limit=20 [ 627.998455] xt_conntrack: cannot load conntrack support for proto=10 15:41:24 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0012b1c5b801d1f60759291a8577d9e5f90ab613ce69755abdf9fd741cad9d9050f996b91dc1b60877af909dc1e44589a842ea90e2e88edaa7343c898b4defbb5a5c6cede2ed058ccc72cc4e513e054f2ae7792233fa0b92c9c42ad115a56a6a5da1dcf4b3f487f73efe711f8d496e49e782ec04a920516e053af2152a1f3b7f9bff54a4ed8398d2a5a4f6fce4b34c36a264a0a119b3a299f4d9cb2d9688a5bc5ff8acae1620aa5d1c3dfab165d5985aa2387b64b49a0ab55c96b510ef6c1d52ca9183006e59e7eb445cee5b56b2aadcae29c456b3f38ba62b41f517c3bb75cdad52"]) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x12, 0x1, @tid=0xffffffffffffffff}) 15:41:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) readahead(r0, 0xdd21, 0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 628.046492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.074518] print_req_error: I/O error, dev loop4, sector 0 15:41:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x80000000) [ 628.139225] xt_conntrack: cannot load conntrack support for proto=10 [ 628.162386] xt_conntrack: cannot load conntrack support for proto=10 15:41:24 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 15:41:24 executing program 2: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41f11, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 628.564399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:25 executing program 1: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) fcntl$dupfd(r1, 0x406, r0) 15:41:25 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100000000000000000000100000", @ANYRES32=r3, @ANYBLOB="fb2475ff"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x7f, 0x8e, 0x7, 0x5, @loopback, @empty, 0x10, 0x40, 0x9, 0x5}}) 15:41:25 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:41:25 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) syz_mount_image$ubifs(&(0x7f0000000040)='ubifs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="8132415ab90f8f372fd7efb46ef9fd57fdcbf1e1c2ed7952a6bf79cd03e93a79f22d783be67138849976678f36ea6f5767db10342986197bd830d652be6ff868d27730dff235d1a30b432c2d7d14", 0x4e, 0x80000001}, {&(0x7f0000000240)="a6e56a9eae1f63c4bd0731f2504220706162e0412bc9db07c57e218a3c65fb9c0c971a513a5aa57cb75410d4c05e5c73dd0773db75502e1db506c62d4149db3a684fdfa08f5d8e6d6ee42dae080c713851fe11460485925eece701c24041c74ee560db4437ca6dcf781fddfa4e29a77e2f2a23c94153df792ee4db16f945474f90fd9476311d2560db0091c5a97d6c1752b9767977067a71cb52e7561106e9d8ab7c1acca29cdad48882bfaabe648ef08bf863732343", 0xb6, 0x409a}, {&(0x7f0000000300)="a6ead2dd1d40a5a8ff41cb4b6ffed424151b1cf8e7469ee6b7efe860cfccdd554461e4b3f179efe4075f520b2f2cac1dff610dd8ca9ad6931e1922a71b0b35707610a50859c6cf2160400486b18baaa8d93343b28255ebd421d3a0b052f480c40509daaf0fc93ef713aec945f90223361e20b39b5facc2734d40fd2742037f034ab384b35c8dc821a89544dc3a9601545790627d6d2cdbd113", 0x99, 0xbfa}], 0x1050002, &(0x7f0000000440)={[{@compr_lzo='compr=lzo'}], [{@subj_role={'subj_role', 0x3d, 'f2fs\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '*(},:@'}}, {@context={'context', 0x3d, 'user_u'}}, {@hash='hash'}, {@obj_type={'obj_type', 0x3d, 'noinline_dentry'}}]}) 15:41:25 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6e73, 0x400, 0x80, 0xb103, 0x81}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x400}, 0x8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noindine_dentry,\x00']) 15:41:25 executing program 2 (fault-call:0 fault-nth:0): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) [ 628.837592] attempt to access beyond end of device [ 628.846340] loop4: rw=12288, want=8200, limit=20 [ 628.857212] xt_conntrack: cannot load conntrack support for proto=10 [ 628.900933] attempt to access beyond end of device [ 628.913070] xt_conntrack: cannot load conntrack support for proto=10 [ 628.915103] loop4: rw=12288, want=12296, limit=20 15:41:25 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x3e, 0x0, @tid=r0}, &(0x7f0000000080)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x68000, 0x0) 15:41:25 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x4800, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000001c0)=0x100, 0x912, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x80000) pause() fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="04023a100f07bef93f349005699335ec4ac0b3c352662aacb1ae68cd3aaa72c940bc86357c87bb8e06e368098e5c25ebe1"], 0x13, 0x3) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000001000)) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc, &(0x7f0000000a80)=[{&(0x7f0000000100)={0x18, 0x23, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x6b, 0x0, 0x0, @u32=0x3}]}, 0x18}, {&(0x7f0000000200)={0x90, 0x3d, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x5, 0x6f, 0x0, 0x0, @str='\x00'}, @generic="2e64b7558bcd72b9cf7f54a0edded9b6289eb50657d88c6a59881e4c41f16ecc572f277eab0ac3c3c18ac03e75fb93762f5213488dc9d550d165a86d6fe5e0f66856b6b12794a39c2b11c155f46e27cde21c49854a11ff3094f866df4b42074c4f2a342a1937df86345758ff53a4", @typed={0x8, 0x5f, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x90}, {&(0x7f00000002c0)={0x1e8, 0x41, 0x8, 0x70bd26, 0x25dfdbfd, "", [@nested={0x10, 0x25, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0xf2}]}, @generic="11656573d5eb1104ef83766e19b18538c53c172eac51c1022b502dba", @nested={0x20, 0x76, 0x0, 0x1, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@local}]}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r5}, @generic="1429ca09a197b71d7c5ff00e1882adbe7d13da6a4be46b6afcf730e50f29b875085250896e028ed3eb805c7342509f586c81825255d8648a5eea4ad7d21f0e510cc835d208c5a7c13f6a0113e286597778baf30d9040e52239db63edc146d1ab5bad848474376fb624055356c706df37414794d694eaf66e06fe26cce6de2c523b07669e69beb3ce24778094221089157741c1346e7b85febc9121db06f19d4428b53fc73d55beed1df4856e68da04dccbbe1a8c315e8b021e149d3a986e3f404fb2c998d62d", @generic="33a7073b513c72bd4be4c91a44991ea73efdf7ab5902114957ecdb891f45f3581df98364f9d262743bedeb12117eba361171ef588777b3eafea74b04d43d25f8e0921ddd55dd844adfa29fb3971019bf17dcb4d5238eb5bcfb7eccdabfb8f4f88bdcd3a38dec99ce02b0b4030b4739ec0d2df8b68d238b06e7a1f067b95be647570026fd73746518fce2366b74fa9040e8c3022801f2e05c53bfc4705a3678a5ee440a1c82332240e4a2c9c16013ac32f85835cafed638b5130a1fef"]}, 0x1e8}, {&(0x7f0000000540)={0xf4, 0x26, 0x8, 0x70bd26, 0x25dfdbfd, "", [@generic="b995d05c5fe688182d49b323d33a37a5ae703e75b9073c65dd4c2be2c00e8d45e789ce934c4f95a0cef007c87196eaf804c5be2c3624d317b793d1f3c4909ed20f7b0031349a0881e2637bb4e962fa6ebdeca117cf9929e3dca7fb8b0f876bc7af82a3", @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x9}, @generic="40aeadccfabdf1a314fe97a6a4affc7d13f3cf0200227a23b2e254b073efac37251f0233bf001678920da73e34ca60cf9f69919779990515c62193c3578d9c5988398fc13a888fe20584ce229277ef30f6dc84d5bf70f336bd0ba9dbc43270d6d45434d5f83b7491", @typed={0xf, 0x43, 0x0, 0x0, @str='/dev/mixer\x00'}]}, 0xf4}, {&(0x7f0000000640)={0x1ac, 0x17, 0x1, 0x70bd26, 0x25dfdbff, "", [@generic="103f12839e3548dcceacc04da7cee9d8a561a757ae6e14649443c810cf4345158e727797a2783b5690ccba193573cc202c0f2f10ffa8acd2ea35adca46e4a0cd0a13b5f8fe19570d3891530fa0fa1f278b31f3b1a0502daa0a959c3d0203e8b873b9a59bb9ca52", @generic="0458ba87908aa7bd581145efcbf638ada36f7b00ea3eb808d56d2f4231c44ceef974be4cd214497967ff3c029aa4cc0da5bb8a18d595333c0363a41f25f86adcd1bff8f1094b6497ac60caf6d0e94f6e2e76668f6d4684673182b91cdf3c518ecce5cb00138b7c6c710397ca61d0bdbd4ca978e1206fc63e2545711d138a200d5b862227aaf55d2a5b27cd1a543a8ef99e65e4e2e15d06d151236cf8ca053a6706fb3b133c88c463ffd7f4f96bc182bdf0cb6a2a010b19", @generic="190f82c1978d9bfedace197dcaa27d97875ebbef49a1680802d13c72d85a8a39dd38e784caea65701a377c26ec8121a95cb8ae286a9878db28cd43d24a5e6b2b574ec06b20c39dd9a3df50139b33c833e0a0542046ed0699f8897798531954420a4ab58a226ed177863393bc327c98743f", @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x52a2}]}, 0x1ac}, {&(0x7f0000000800)={0x250, 0x13, 0x400, 0x70bd28, 0x25dfdbfe, "", [@nested={0x4, 0xb}, @generic="8e38cfa1bfb4cd003505a01f5458483e517cf4e36bacaba021853ed132ecaf51ddeaf0acc418baa143fa72f07dbb9171e1d6e781d8f4a61c69ece8d7d5f28f8a41f56b5de38011d3ac7cfb210b80d0be9e31589145ff3f223d80aaf8163d694381ef26f9368544255b370208dd8fdba55d8d8889d774f9bf10e0c65b0e09523267c7c3fc78b9c29e8d65fe05c0dea4947dd42be51faa11a6e834f2b61a996cb355afe9d36d1ce8f5df8613cb6aab1cf6e4ed00073b0dc4a9a3a8822953eab61da0", @generic="175b27009ecfe775978d974cf6c2499028fc15c73c7fbce57cb19ba4f9d158d9a8d2871f328ac6de7d397e05428062e0b971a0cef0d232ef4c", @nested={0x13d, 0x41, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=':^^+{\x00'}, @generic="848141d45e89a2755212a8bcb9bcafa5b5210506dba7d3bb738b7ac050045ee76762eca1d11e6a90f1d1ccdcd0c15028e3939d4f19edfeb8d6e1a07b5c7d01092620afe97ca6f06a3351f4648e4aad1c5e2f3983869229d6f8e31534562ced6eba5556c5e231eac706d4586ccece", @generic="f54a63f065d5f9b94965163ac5f6504aab1dc0733863cf291c2e4be34be8ad3b3666c08103aa52c9670c40865608090d493682fe32bb068cd23be88a2540534ed84dec1ff091d14f3cbfb78e3a24b8f63fe8129beae73ccb7207c4bc6f327c88239bbb6652f9bf1d8d9f4b3087fcd942e839210a2674f99713a68818c8fead5d70cba3becc81d4e9327c1a", @generic="3900bcd4ab7d8bce0d55462ea8a505f14ed54451621722f8cdc9f3dc0644b8a6bfe8fe36dfe3e216232ae5d55e78ffe2821af18d"]}]}, 0x250}], 0x6, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [r6, r3, r0, r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xffffffffffffffff}}}], 0x48, 0x40004000}, 0x8000) 15:41:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000000)={0x200, 0x3, 0x8, 0x80, 0xffffff1d, 0x2, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="ef361f07000000000000025ed33900000203c1fe660bea1af4f6c7786f2c2dc7fadce3061f46ac6daea0ec4253ee97a71f0ab005a127c8ae1ebe9dff3c7dab44982b5f1bb8214705ddaa7834112441677130c7be961bc5d34e0a4124500899a167464353e1b4b2469c87a85f9a7d781b29811d2089334bd1a1aba4e1330f1c998cca36c6bc4a7e25680dbb54456ea45ea79cee7b16b54da12fa87daf90b04ef6b397079879", @ANYRES32=r10, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 628.945690] FAULT_INJECTION: forcing a failure. [ 628.945690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.963318] attempt to access beyond end of device [ 628.976893] loop4: rw=12288, want=8200, limit=20 [ 628.993218] attempt to access beyond end of device [ 628.998367] loop4: rw=12288, want=12296, limit=20 [ 629.022405] CPU: 1 PID: 22374 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 629.030333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.035872] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 629.039698] Call Trace: [ 629.039723] dump_stack+0x1b2/0x283 [ 629.039745] should_fail.cold+0x10a/0x154 [ 629.039760] __alloc_pages_nodemask+0x22c/0x2720 [ 629.039776] ? trace_hardirqs_on+0x10/0x10 [ 629.039788] ? _kstrtoull+0x134/0x350 [ 629.039798] ? _parse_integer+0x130/0x130 [ 629.039810] ? __might_fault+0x177/0x1b0 [ 629.039823] ? _copy_from_user+0x96/0x100 [ 629.039831] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 629.039840] ? get_pid_task+0x91/0x130 [ 629.039852] ? __lock_acquire+0x5fc/0x3f20 [ 629.064106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 629.067893] ? proc_fail_nth_write+0x7b/0x180 [ 629.067910] alloc_pages_vma+0xd2/0x6d0 [ 629.067924] __handle_mm_fault+0x25fa/0x4620 [ 629.067935] ? vm_insert_page+0x7c0/0x7c0 [ 629.124193] ? lock_downgrade+0x740/0x740 [ 629.128322] ? vfs_write+0x35d/0x4d0 [ 629.132030] handle_mm_fault+0x306/0x7a0 [ 629.136079] __do_page_fault+0x549/0xad0 [ 629.140134] ? spurious_fault+0x640/0x640 15:41:25 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="58146e"]) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) [ 629.144446] ? do_page_fault+0x60/0x4f2 [ 629.148400] ? page_fault+0x2f/0x50 [ 629.152007] page_fault+0x45/0x50 [ 629.155464] RIP: e590f67f:0x7fa14ab189c0 [ 629.159500] RSP: 118bf20:00007fa14ab17ca0 EFLAGS: 00000000 15:41:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') write$FUSE_STATFS(r1, &(0x7f0000000000)={0x60, 0xfffffffffffffffe, 0x0, {{0xfffffffffffffff7, 0x0, 0x31c0, 0x3, 0x5, 0x2, 0x4, 0x3}}}, 0x60) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0xfffffffd, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000300)={0x1, 0x3, 0x1000, 0x401}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r11, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) [ 629.184745] syz-executor.2 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=1000 [ 629.202660] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 629.225695] attempt to access beyond end of device [ 629.227860] CPU: 1 PID: 22374 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 629.238555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.242698] loop4: rw=12288, want=8200, limit=20 [ 629.248862] Call Trace: [ 629.248884] dump_stack+0x1b2/0x283 [ 629.248901] dump_header+0x178/0x82f [ 629.248914] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 629.248924] ? ___ratelimit+0x2cd/0x522 [ 629.248935] oom_kill_process.cold+0x10/0xa69 [ 629.248947] ? lock_downgrade+0x740/0x740 [ 629.248961] out_of_memory+0x2dc/0x1190 [ 629.248969] ? pagefault_out_of_memory+0xaa/0xc9 [ 629.248980] ? oom_killer_disable+0x1c0/0x1c0 [ 629.248987] ? mutex_trylock+0x152/0x1a0 [ 629.248999] ? pagefault_out_of_memory+0xaa/0xc9 [ 629.258337] attempt to access beyond end of device [ 629.259985] pagefault_out_of_memory+0xbb/0xc9 [ 629.259995] ? out_of_memory+0x1190/0x1190 [ 629.260009] ? lock_downgrade+0x740/0x740 [ 629.260025] mm_fault_error+0xad/0x2c0 [ 629.260038] __do_page_fault+0x93c/0xad0 [ 629.260050] ? spurious_fault+0x640/0x640 [ 629.260059] ? do_page_fault+0x60/0x4f2 [ 629.260073] ? page_fault+0x2f/0x50 [ 629.260082] page_fault+0x45/0x50 [ 629.260089] RIP: e590f67f:0x7fa14ab189c0 [ 629.260094] RSP: 118bf20:00007fa14ab17ca0 EFLAGS: 00000000 [ 629.261141] audit: type=1326 audit(1605714085.631:9061): auid=0 uid=0 gid=0 ses=4 pid=22397 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x0 [ 629.272643] loop4: rw=12288, want=12296, limit=20 [ 629.288530] Mem-Info: [ 629.311811] attempt to access beyond end of device [ 629.315816] active_anon:117221 inactive_anon:6762 isolated_anon:0 [ 629.315816] active_file:6445 inactive_file:81078 isolated_file:0 [ 629.315816] unevictable:0 dirty:354 writeback:0 unstable:0 [ 629.315816] slab_reclaimable:18248 slab_unreclaimable:122666 [ 629.315816] mapped:63801 shmem:6962 pagetables:1208 bounce:0 [ 629.315816] free:1282955 free_pcp:165 free_cma:0 [ 629.324906] loop4: rw=12288, want=8200, limit=20 15:41:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000203000408000300", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0xfffffffffffffe45}}, 0x404480c) [ 629.342340] Node 0 active_anon:468684kB inactive_anon:27048kB active_file:25640kB inactive_file:324312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:255204kB dirty:1412kB writeback:0kB shmem:27848kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 204800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 629.366801] attempt to access beyond end of device [ 629.391957] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 629.489367] Bluetooth: hci3 command 0x040f tx timeout [ 629.495257] loop4: rw=12288, want=12296, limit=20 [ 629.501749] Node 0 DMA free:15908kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.530575] lowmem_reserve[]: 0 2717 2718 2718 2718 15:41:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) inotify_init1(0x0) r4 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0xc2, 0x111000) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0xa4000960) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f5ab836569c6e8b6007092a2d146d6e65aaed89f48fb4823ca941c005214076c27b5554b5"]) 15:41:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="bab29051", @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x4, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 629.535786] Node 0 DMA32 free:1075068kB min:36200kB low:45248kB high:54296kB active_anon:468532kB inactive_anon:27048kB active_file:25640kB inactive_file:324312kB unevictable:0kB writepending:1412kB present:3129332kB managed:2788176kB mlocked:0kB kernel_stack:8128kB pagetables:4832kB bounce:0kB free_pcp:1152kB local_pcp:660kB free_cma:0kB [ 629.567135] lowmem_reserve[]: 0 0 0 0 0 [ 629.572718] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:524kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:41:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0700000067f7e2a62656bc1b8100000000000002030000080003d23274a870e3ab1fc691b0478f00", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 629.601787] lowmem_reserve[]: 0 0 0 0 0 [ 629.606023] Node 1 Normal free:4040668kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.634357] lowmem_reserve[]: 0 0 0 0 0 [ 629.638785] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 629.652752] Node 0 DMA32: 439*4kB (UME) 1094*8kB (UME) 537*16kB (UME) 593*32kB (UME) 258*64kB (UME) 164*128kB (UM) 103*256kB (UM) 26*512kB (UME) 4*1024kB (UM) 2*2048kB (M) 233*4096kB (UM) = 1077820kB [ 629.671103] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 15:41:26 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 629.687323] Node 1 Normal: 79*4kB (UME) 416*8kB (UME) 280*16kB (UM) 85*32kB (UME) 24*64kB (UME) 19*128kB (UM) 12*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 4*2048kB (UM) 979*4096kB (M) = 4040668kB [ 629.709540] Bluetooth: hci0 command 0x0406 tx timeout [ 629.738769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.761636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.775121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.785924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.806152] 25399 total pagecache pages 15:41:26 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1f0) 15:41:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x2, 0x1000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3a23f4df3470fc0000", @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) 15:41:26 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000040)="03caf89f", 0x4, 0x7fffffff}], 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7472792c0020f08fcbfa5c2a118d43f2be45863e0c8aa2f50807c7cc8beba2ac12fe14"]) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000300)={0x2, 0x6, @start={0x0, 0x0, "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", "9e5816b0aff8869edbb3a31ea82fa5b96f809fbf6cf1128d1a380bd0accba0f51c503754fdfe328af0562b2fedd96690bca9f8ad81a29caad633f9b49f99156d7a60e452178a14f0ad949d8f4501fa88eb0b6506825572805b5254929ee1226097e8ab94ed7a78a9ad48d39581ab895d6c2403290708495eed93b38cbc7b7be4eaad61d4dee24d5855ad38d99c421445df2a09e6e2a61cb00c5aff5fa25fc301b693332b8a6bdfeeec3d066e6095a90adbe6e24ba89002a9673b904ae01f9073f11de651bee697ad5c4df1886f30a9ee0a7c18c1843db7979696360fea964aaf55868ada0b5947bb448d8b0da8621a8bf8cd82ed52a6738af66129ef6fc7289befb7750a5fe21108d88faf4e5a75558c25db36d7939d081ca52fb3c7069683ef7f31b904371962986b6ae0aad1240876a06e07813cac9d5fbecb8ab88cf75282fc493bf708afcaab80ab466a03b02754ff52eca3c70735bab0fc577ad4e697c370fee2efb8a0132d88f06de544e06e3a8bc154ece1f3a00bcc7bc697e1ea7fc4787fa15ea23a3a6dc945fbec5df6be92cd8a861c743f8db04c0c19ec99e533c7d762828dbd396e3341c438d109db7e0fad39e191a18e11e9b848b52258c7855331b7930e46a6a771aeff1d8fabc537c0b7725451511b3950fb2a48ca0522d2630109831eba56810abd10d15cc61f8f2724e5b5b3e409370018d8b8a0682903fa453636c342187fe137424041b53eced00842b9bf8fbae4b4ee7c263bf3d0f6f62dbfabf7cbad2faaf0ab6036c9ddba4a6f07deed271f9ab6babfca0dbcb0a7e2fc4acaef38038d6b00ed405d215d2bdb7ce48296cf12e2c276b4acccb3fb73c5ac16039b9c4ea5106e541affaa7a9f06430fbd4ee1ca2d2d6694c11ab0e4d68a8bc31652ea147e9162f8abb470477b3b6e712d23003ee511a1c2fa9b85736438f2b1dc9ea788303b44ea9c5eed946e1fd23c6904e22fb9c9869656d7b22c3b15f858cdce0b1a37bf318bde37cee124f17734e09b168f059504618bd90a27aa226e184632349f738efd3303e40c1a68b28e0bef66c5d6068d64bc7073bb8a2145ba5711401ec4f8233d1f4618361133dfe12882df5345c1e61cc88c216146b1bfedef9478a626684001e005966b9dbe0172468030358344c54126bb4acd148d10d1f9e2e9476edbdf4446cc726fd63ba0af7e381c96ac8e83cc2adcaf2549f81a93f1efe279e11abb5126020641088798a0e3ed9739a46a4b3f211c21962d6a1f38fc14f56743639998473f933eb85b77f8934452fe87733d5cecb037acc3ca7885a96835d2caea65bde72cfd4badc7638bdf55a3a5dc43e0379b6570448457df1eb42c21a5f65d42b9f37b9ab72166c7d74c44aec2ac26033bf822bf214da69c71199382d551fdcedbff4ee9d0c9b977acf434bb72c14fc09b16209dca40e13f14"}, [0xf8, 0xd21f, 0x8, 0x3, 0x8, 0xffffffffffff177f, 0x40, 0x5, 0x7, 0x3180000000000, 0x9, 0x3, 0x3, 0x1ff, 0x800, 0x4, 0x0, 0xffff, 0xe453, 0x81, 0xab7e, 0x5, 0x9, 0x492f, 0x80, 0x180000000000, 0x7fffffff, 0x401, 0x7f5459f, 0x7, 0x7, 0x7, 0x1f, 0x0, 0x5, 0x7, 0x9, 0x6d, 0x3, 0x100000001, 0x6, 0x5, 0x9, 0x3, 0x7, 0x6, 0x9, 0x7, 0x6, 0x0, 0x1, 0x3, 0x7fffffff, 0x8, 0x100, 0x8000, 0x2, 0x20, 0x9, 0x8, 0x1ff, 0x1, 0xffff, 0x6]}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3b356b0e2991328f}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 15:41:26 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e655f64706e748b357279"]) [ 629.811393] 0 pages in swap cache [ 629.815120] Swap cache stats: add 0, delete 0, find 0/0 [ 629.822986] Free swap = 0kB [ 629.826257] Total swap = 0kB [ 629.830983] 2097051 pages RAM [ 629.834185] 0 pages HighMem/MovableOnly [ 629.838224] 363835 pages reserved [ 629.843076] 0 pages cma reserved [ 629.846571] Out of memory: Kill process 22381 (syz-executor.5) score 1005 or sacrifice child [ 629.869955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.922049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:26 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d6c4d17f866e5173313d5503c39703d16a524f9a5350b1fe0f0000de00676e1a626f"]) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="5dab202086bcd2e68124988c8a7e2c", 0xf}, {&(0x7f0000000140)="82342f10a9ba9288187d67a99fba713a9bb7835a422b610c5326de6bfa2da2f4092bd75e0a4c5d27a01ef62dfae69f55596cbb205be32b1908686ab534e637d4c80a8bb80cf8f6056004a063a7fc5e1bd5948f4bbfd577a6582191f2ba95fd399b0f9f549ef4daab35ea27e0214c917767e2e2e58b1666df08e54932d75a361d6909e19347c60b94", 0x88}], 0x2, 0x1) 15:41:26 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) socket$bt_bnep(0x1f, 0x3, 0x4) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x7, 0x2, {{0x9, '*$-(\'r/:}'}, 0x100}}, 0x16) 15:41:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:26 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESDEC]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local, 0x3}, 0x10) 15:41:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}], [{@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_role={'subj_role', 0x3d, '@\'4-{'}}, {@euid_lt={'euid<', r1}}]}) [ 630.057419] audit: type=1326 audit(1605714086.431:9062): auid=0 uid=0 gid=0 ses=4 pid=22397 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460d1a code=0x0 15:41:26 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000180)={[{@noinline_dentry='noinline_dentry'}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x0, 0x35, 0x62, 0x30, 0x38, 0x37, 0x38], 0x2d, [0x30, 0x64, 0x64, 0x31], 0x2d, [0x0, 0x9f, 0x38, 0x39], 0x2d, [0x66, 0x38, 0x65, 0x64], 0x2d, [0x62, 0x31, 0x66, 0x37, 0x34, 0x0, 0x66, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '.*#:^@#$\\/:['}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%{U'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x63, 0x64, 0x61, 0x37, 0x38, 0x32, 0x36], 0x2d, [0x35, 0x37, 0x31, 0x61], 0x2d, [0x31, 0x34, 0xe32ab09f1d5788e, 0x32], 0x2d, [0x36, 0x64, 0x37, 0x31], 0x2d, [0x0, 0x65, 0x30, 0x37, 0x65, 0x30, 0x37, 0x37]}}}, {@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat'}}]}) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) 15:41:26 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x42200, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) 15:41:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB='\x00'/20], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="49fc07000000000000000000020300000800", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 630.151375] print_req_error: I/O error, dev loop4, sector 16 15:41:26 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f201000b0009000000030000000c000000093409c1a9d885464a0040000000000000400000000000000b0000001e00000002000000f9ffffff010000000200000016000000000400000004000000080000000c000000100000001400000300000001000000026d99e236c48e2469bcbef7fb2111d624cc149b1a1a2579a6bc95ba91de92fb936e36e685ed3b8087871245ffd6be3ebd87f616d3267c6c78f58f59c2cee1ee35", 0xa9, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f696e6c696e65ee8b955f64656e8d72792c00b9bf57dfe3468f929ac9e2a19d4174a165adda187b01"]) quotactl(0xffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)="ddfb653a714d7f19") 15:41:26 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @val={0x4, 0x6, {0x5, 0x80, 0x5, 0xbcea}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f8) 15:41:26 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10080, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/86, 0x56) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 630.236536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.286046] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:41:26 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0a2d168100000002000000020000000200000016000000000400000004000000080000000c000000100000001400001000000001000000028121e41a23a6f3572668ba2f", 0x75, 0x1400}, {&(0x7f0000000180)="702c1d0231ed14a9a806b6324597aa7caf7af78f44091aba35dd3347b2abfd0964dfc88e22f64c9a3d1d78768bb6630a8b0e094704c445b6fb15361a69cf1272d1b64a92a3c726b4b27e01", 0x4b, 0x4}], 0x0, &(0x7f0000000140)) 15:41:26 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) syz_mount_image$v7(&(0x7f0000000080)='v7\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x81, 0x9, &(0x7f0000000740)=[{&(0x7f0000000180)="f877fca77e499f4b725954b9c2a1d84e8e44373f0c2fe1337ceb4db580c8d4e9bef887085355132adfce111fde25c22996131f7a9380ba63a0baf1", 0x3b}, {&(0x7f0000000240)="652df5e5392a571a1e3b2232850c4707d192df5a9fdb8a2df69f7613c73f68fdeb8c602ae8cf472d8a9a2eadf100c35898bae1b0579b60b0c7dbf2e21356b811c04b19954746354482d1f5bb76a146f328d1c572b07c8a58afe34c848ae17188fec128a5efea6b4b75c365c5a03c433e2f71444fa6a01c40652a7e320fb40ed4307fb4e9389e2b6a65452dce81729b89e79558a03fb4e5c245b643fa7d5a36c71f808eca9dcef036eb44b753ea8ed066a024802b63e08a657ebac8ace525917915534b4a886d382e22", 0xc9, 0x6}, {&(0x7f0000000340)="e9f2ea05f94d72d0bb85c7608ab31fad365e8e39d1e01be6803cbe73334c28434ec1eff561a35c36899be3ba24b824f59e6095567ebae06bb53150fb1a899a6c5cd363db6b2765d8a2a54e67325bca85c45888f62dc558f6a6eb2ecfd5952057320d06679d5547a139c8cc3d2dcaca14fc663c0aa9e5c68c5e1241e483abca73bc87128b7d4a2706af5c99fb7c81764fd1233600e3fdfba3113a", 0x9a, 0x4}, {&(0x7f00000001c0)="a858032d3894e4d7f6e54adfc3e3375ddcdaff7ee52ca95d4f2c21d0e7348df43ee04d6eaab4c50a1726bcb2cce2c8a7", 0x30, 0x6}, {&(0x7f0000000400)="7978fcdaa4f909b1beaec497e55804ce6a32f76351f4f3af2e2e477678fe1da8ddf5457e0fefb0a0835d5810903f694d653d9b8a2b78accfe47b96b22cadfff1d102d68af63a854d93af57de34d49cbc520c231282ba71bf1ba91c6518061759ebae927cb79c4b55e72f29acafca978294346d4873163118b5fc1fd635bfe0287a7bf4dcab699ad7b4a68c04e17a7bd9be7bd5edc75d9e73ad4537e535ae7426c6fcf263504c445d95b7cadcc59bf43b47a09bececf37430a0b16d4cb5d4654642d28f1f08c48847e1b07dd6dc6d2af143874d3c46b55bc4dd90d340d274661f7e06a4d64ba21c7bf13e8d32", 0xec, 0x8000}, {&(0x7f0000000500)="89f9f5d90dd32794a4ef369600d39d5ef9c00a996d5c77c23e410bcfc5fc86bc16820872e654b48250a37991d0f7979f95322321737eed17943f83d35c2755331ec4e01f374690aebba9ce93920b1dfcc60194643d1bd666117045a815fc53e42c01a4ce217af5ad250b87000a600da1522112e49bd57f46", 0x78}, {&(0x7f0000000580)="a2491661a93379b21ae8f8b9b44f4d72238cb11a0b9f021823a78f9bae41db7f8fca17d03642df5de5fd60fc157cee093af0a1ed359d3b998992e4fdc2a9b6161b7542e2bd2b0d4897a507aa6c979bb576875fd104048cd8731bad08ec9039c27ad2494da069a6aa9c3464d1dd725723d2670d8ed1e4f870", 0x78, 0x3ff}, {&(0x7f0000000600)="15b718e12d493618616bf406c634b5ea43fcb57ceb985172bcaa9e9330fc4f1ed549912dcf6d3f75bee2524644cd49e59567b2b1cbea81ed16357a70771ad75a82cc90fffc73fcd3433e9cd3ff7ef83d68acb81eff84b53b6280b4e6ba4fbeeade8ea97e2c83d0bfc3fde9bda4f0a04deeddc05393b95f4db1f375baf76db102940150412b124d7e644b498b5a326a6852e999be024409f184365ef650da79ead0", 0xa1, 0xcf1}, {&(0x7f00000006c0)="9d84cbd1b91418aa808d21143281b9b308388f71c3acafbd965103549fa0ecd0ac54266eb367cb2a11e7d7bd122e279bded9e00fcca7a014cd23dac29854432783e06ce52b14a9fdf42d6e8825170d234cb35f1f8170dabbd409ca2e1e0a40db9b", 0x61, 0x100000001}], 0x200038, &(0x7f0000000840)={[{'-}#'}, {}, {'/dev/zero\x00'}, {'f2fs\x00'}, {'f2fs\x00'}, {'}*'}, {'-&'}], [{@smackfsroot={'smackfsroot', 0x3d, '$[/'}}, {@smackfshat={'smackfshat', 0x3d, 'f2fs\x00'}}, {@audit='audit'}]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) 15:41:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="000300effeb6f24d40d8f6b6a74cac1c99e1fb25534ed660c4afd3df5223080db6c8d8bc275643b6e29f50edd86e8448eb66a29720b1b17331795c4444eafb66b369ace201922a59d9ebdac2ac766dbde4193961e87954dda9ea40f1871e0a292440c4162c7638ef738b918c9299b43d9259f8be24000000000000cd16ad899589f9da0e2ebf0e8eeca89200b3a52dfa7a63353230f3f11ca7a4185c5850b2d1140e91f6e70000", @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r10, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="1f2c7b979db966a7bdf0fcab432a19d6ccb2087f592487f0b384393a81cc"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c814) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r13, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:26 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000004240)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT]) [ 630.331359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.352141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.667627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:27 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1404}], 0x0, &(0x7f0000000080)={[{@noinline_dentry='noinline_dentry'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) 15:41:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:27 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x41) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x55600, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, 0x0) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/49) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:41:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000004c0)=0x1ff, 0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x80000000}, 0x16, 0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000030000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x800008, &(0x7f0000000040)={[{@test_dummy_encryption='test_dummy_encryption'}]}) 15:41:27 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e65df64f7a95d026d656e"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$midi(r1, &(0x7f0000000040)="6092947f629762278b3ac665143e0832404537beec8cbc7a94499d2a4ef023fdd47b001a5a171e5ab3d3e647adb9651196f341f0fa66ff04b4da3f06011f9c96725ed741e9ac14ef13bbbab326c7f5f09eea87c81feb918c12f984e117797cc35cee9fa83c374025517552861447c8fe5fb8874b17699e16c475fe5740780fa483d61e790eab3a1c9144d07a47dc15c2c04c889cf20b7c708618779eb06e2d7469eaf4b4739a73617cc36d25b3ab047c033461c2b1d74f5defc9762991", 0xbd) 15:41:27 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000002c0)={0x3, 0x1, 0x2}) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/54) [ 630.940244] print_req_error: I/O error, dev loop4, sector 16 15:41:27 executing program 1: setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000140)=0x1, 0x4) r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/60}, 0x44, 0x2, 0x1000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x3, 0x80, 0x5df, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x40, 0xc8}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000240)={{0x3, 0x2, 0x0, 0x7, '\x00', 0x2}, 0x0, [0x0, 0x7, 0x3, 0x2, 0x8001, 0xcf, 0x27a39803, 0x400, 0x6, 0x6, 0xff, 0x291, 0x1, 0x1, 0x6, 0x7, 0x0, 0x0, 0x6, 0x607b, 0x6, 0x7, 0xff, 0xda, 0x6, 0x7, 0x9, 0x0, 0x100, 0x100, 0x200, 0x384, 0x6a81, 0x8, 0x1ff, 0x0, 0x9, 0x101, 0x84f, 0x130c, 0x4, 0x80, 0x4, 0x11, 0xfae0, 0x80, 0x5, 0x1000, 0x37, 0xac90, 0xfffffffffffffeff, 0x5d7, 0x6, 0x6, 0xffffffffffff0000, 0x7ff, 0x8, 0x659, 0x0, 0x0, 0xf176, 0x5, 0x3, 0x1, 0x5, 0x4a, 0x5, 0x0, 0xfffffffffffffc00, 0x2d0000, 0xf4, 0x9, 0x8000, 0x1, 0x6, 0x5, 0x5, 0xffffffffffffffff, 0x7, 0x12886b2f, 0x4, 0x8837, 0x1, 0x8, 0xffffffffffffffe1, 0x4, 0x1, 0x80, 0x8, 0x2, 0x2d7, 0x9, 0x2, 0x0, 0x57, 0x7, 0x3, 0x80000000, 0x6, 0x9, 0x9, 0x80, 0x10000, 0x1, 0x10001, 0x5, 0x3, 0x1, 0x8000, 0x0, 0x7, 0x7, 0xcbc, 0x200, 0x8, 0xae, 0x2, 0x200, 0x3f, 0x3ff, 0x10001, 0x72, 0x0, 0x3, 0x8, 0x2, 0x6, 0x2]}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)={0x40002012}) [ 631.036432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.047444] xt_conntrack: cannot load conntrack support for proto=10 15:41:27 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noinliy,\x00']) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x3c}}, 0x14) 15:41:27 executing program 1: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) 15:41:27 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/55, 0x37) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)={[{@nodiscard='nodiscard'}]}) 15:41:27 executing program 1: futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000d80)=[{&(0x7f0000000040)=0x2, 0x1}, {&(0x7f0000000080)=0x1, 0x1}, {&(0x7f00000000c0)=0x2, 0xfffffffe}, {&(0x7f0000000180)=0x2}, {&(0x7f00000001c0)=0x1, 0x1}, {&(0x7f0000000240)=0x1}, {&(0x7f0000000280), 0x1}, {&(0x7f00000002c0), 0x1}, {&(0x7f0000000300)=0x1, 0x1}, {&(0x7f0000000340)=0x2, 0x2}, {&(0x7f0000000380), 0x1}, {&(0x7f00000003c0), 0x4}, {&(0x7f0000000400)=0x40001}, {&(0x7f0000000440)}, {&(0x7f0000000480), 0x1}, {&(0x7f00000004c0)=0x2, 0x2}, {&(0x7f0000000500), 0x2}, {&(0x7f0000000540), 0x1}, {&(0x7f0000000580)=0x1, 0x2}, {&(0x7f00000005c0)=0x2}, {&(0x7f0000000600)=0x2, 0x1}, {&(0x7f0000000640)=0x2, 0x1}, {&(0x7f0000000800), 0x2}, {&(0x7f00000006c0), 0x2}, {&(0x7f0000000700), 0x2}, {&(0x7f0000000740)=0x1, 0x1}, {&(0x7f0000000780), 0x1}, {&(0x7f00000007c0), 0x1}, {&(0x7f0000001100)=0x2, 0x1}, {&(0x7f0000000840)=0x2, 0x1}, {&(0x7f0000000880)=0x1, 0x1}, {&(0x7f00000008c0)=0x1, 0x1}, {&(0x7f0000000900)=0x1, 0x1}, {&(0x7f0000000940)=0x1}, {&(0x7f0000000980)=0x2, 0x2}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=0x1}, {&(0x7f0000000a40), 0x2}, {&(0x7f0000000a80)=0x1, 0x1}, {&(0x7f0000000ac0)=0x1}, {&(0x7f0000000b00)=0x2, 0x2}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=0x2, 0x1}, {&(0x7f0000000bc0)=0x2}, {&(0x7f0000000c00)=0x1, 0x2}, {&(0x7f0000000c40)=0x2, 0x2}, {&(0x7f0000000c80), 0x2}, {&(0x7f0000000cc0), 0x1}, {&(0x7f0000000d00)=0x1, 0x1}, {&(0x7f0000000d40)=0x2, 0xffffffff}], 0xd, 0x32, &(0x7f00000010c0)={0x77359400}, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="6c6f6992b00bc7f10c8a5420e1719e696c696e655f64656e7472792c008f3df89dbddc08bc9740486067767806438fc08e76b5c6cf0a0edd7bcb7f3b8786d44d1d214231563b7fec02c278b613958a6dfb613a9c3c873326214ed57873c4052236795720ad45ef583edddf07e787f6119bc8e2587fa22cc6d309"]) [ 631.095805] xt_conntrack: cannot load conntrack support for proto=10 [ 631.119797] print_req_error: I/O error, dev loop4, sector 16 15:41:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:27 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x4}) [ 631.239292] f2fs_msg: 190 callbacks suppressed [ 631.239302] F2FS-fs (loop5): invalid crc value [ 631.246389] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:41:27 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x8) [ 631.285252] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 631.298670] attempt to access beyond end of device [ 631.304560] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 631.306588] loop4: rw=12288, want=8200, limit=20 [ 631.320665] F2FS-fs (loop4): invalid crc value [ 631.324728] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 631.327719] attempt to access beyond end of device [ 631.353697] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 631.365339] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 631.376738] F2FS-fs (loop5): invalid crc value 15:41:27 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002610b2c83a86c47c80080ce168ff97721537e992307c7ff8f49a429bb5d9859aa5faaaf13649ac66db550ac81309637e4f40be0b35b95b3d7a31b5e37a711b59e69feab1ad46b319bfbf8a566c793e8a69b683c77e1312f4f902230e628ccdd4a1c5021bacfa5cc014191df3e98bc18cfe6a570800"/127]) 15:41:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000300000000000000ff010000000000000600000000000000100000000000000a02000000000000000700000000000000010400000000000004000000000000002000000000000000d9000000000000000600000000000008"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"79b38b3e1d86d5ba33c8383e4e88e544", 0x0, 0x0, {0x40000000004, 0x5}, {0xee, 0x10001}, 0x9, [0x9, 0x3ac6ac8a, 0xff, 0x7, 0x0, 0x4, 0x2, 0x4, 0x167a, 0x3, 0x5a, 0xe19, 0x800, 0x1ff, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000000)) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0O\x00\x00', @ANYRES16=r5, @ANYBLOB="070000001e00ee0000000203000008000300f6d37441409c8353630b4a92895a995c6cc62037c17cd665d687437f31802b67a6cec01d853d5b", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_VLANID={0x6}]}, 0x30}}, 0x0) 15:41:27 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e36e1d0c6d96f696e6c696e655f64656e"]) 15:41:27 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x3, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) 15:41:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x140e, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x44) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000240)={0xc223, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/61) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 631.376755] loop4: rw=12288, want=12296, limit=20 [ 631.387900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.391644] F2FS-fs (loop4): invalid crc value [ 631.402319] attempt to access beyond end of device [ 631.407451] loop4: rw=12288, want=8200, limit=20 [ 631.412758] attempt to access beyond end of device [ 631.419049] loop4: rw=12288, want=12296, limit=20 15:41:27 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) 15:41:27 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r8, @ANYBLOB="0a000900030004000000000008000b0000000000"], 0x30}}, 0x0) 15:41:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x60001fdd) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20008804) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x800000, &(0x7f0000000140)=ANY=[@ANYRES16]) [ 631.529572] Bluetooth: hci3 command 0x0419 tx timeout [ 631.539567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.617995] attempt to access beyond end of device 15:41:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000100)={0x7ce, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 631.642243] loop4: rw=12288, want=8200, limit=20 [ 631.656584] attempt to access beyond end of device [ 631.662772] loop4: rw=12288, want=12296, limit=20 [ 631.683153] attempt to access beyond end of device 15:41:28 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3, 0x10000}, 0x8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f696e6c696e655f6465f61740211c519701c3c5cb5cfd3abe6e7a72792c008dd87f65c170862ecfa4d440e5f28a509f6dc27d6c9c1b3e0000a88b0bb29a43435d154b730a280a9e3be56123984dccc3a8d441711edc906032ea9e32af98b7caa3792ef87d846eac6573895b72f56f7a3b3aa4db6d2dcce092bfb65cc1fa4ea038775c65284eb3e7cfc890eece3f57cf10453e1ba9de9cc910f8a99a2b6d1ffee123a1437b4078a771884b9adda84416ae6a780406f297aac0f806d74ae89ecc1b9746b35ad384ac5d5fccff34bb62e74f2bc92ef4eb054df1c70656b38bb41463878eb175c5c9603c0f09"]) [ 631.702530] loop4: rw=12288, want=8200, limit=20 [ 631.725673] attempt to access beyond end of device [ 631.742064] loop4: rw=12288, want=12296, limit=20 [ 631.798333] attempt to access beyond end of device [ 631.813177] loop4: rw=12288, want=8200, limit=20 [ 631.848502] attempt to access beyond end of device [ 631.857287] loop4: rw=12288, want=12296, limit=20 [ 631.867632] attempt to access beyond end of device 15:41:28 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6ed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 631.890858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="dbbbf8fc37d13a15a79054193a88d9b045c30cc1e75981cdd5b2dbb34f544d30c70c08d5e63f196a3217d6f465408c55e90f159e8848e1f9f62d790af90e52cb0c11f11b44d6c602c3428876650fab592ec44ab7ae78e9126afc9e1a6df24fc9bbf2a113e8e9623e848b5596b42b48b084dffb7f119b9937b03f375cd2b188292042536b58e79645551415887809a69886aeb03758830e13e013b2c5275be83e3dec94150aa6724a06685f5e51ea2dfc74a41356ac5fae3bde80572092bf68c7e06922842d15cd975fbc6b9d61e48d09fca3c9814091410525c310c5dae4909f4a9708cd71", @ANYRESHEX=r2, @ANYRESOCT=r0, @ANYRES64], 0x1f0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x4}, @in6={0xa, 0x4e20, 0x45a, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @loopback}], 0x84) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4b, 0x2}, 0x7) 15:41:28 executing program 4: ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000040)={0xffff, 0x1000}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x7}], 0x804, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e6a94c60200"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0xfffffffb) getdents64(r1, &(0x7f0000000240)=""/227, 0xe3) [ 631.939012] loop4: rw=12288, want=8200, limit=20 [ 631.957973] attempt to access beyond end of device [ 631.977140] loop4: rw=12288, want=12296, limit=20 [ 632.115809] xt_conntrack: cannot load conntrack support for proto=10 15:41:28 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nnq@,\x00']) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) [ 632.195325] xt_conntrack: cannot load conntrack support for proto=10 [ 632.210427] xt_conntrack: cannot load conntrack support for proto=10 [ 632.227607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:28 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)=ANY=[@ANYBLOB='\x00']) [ 632.360543] print_req_error: I/O error, dev loop4, sector 16 15:41:28 executing program 4: fchdir(0xffffffffffffffff) r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x105, 0x1400}], 0x0, &(0x7f0000000080)={[{@alloc_mode_reuse='alloc_mode=reuse'}, {@norecovery='norecovery'}, {@whint_mode_user='whint_mode=user-based'}, {@fsync_mode_posix='fsync_mode=posix'}]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x10000, 0x0) linkat(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1c00) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x2, 0x0, @identifier="4b5602ec161108170dd3cc52f3662207"}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000004c0)=""/4, 0x4, 0x7301}, 0x3f9c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="3dac0000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0600b300010000000600b300030000000600b300020000000600b30000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8c5}, 0x20044044) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x1000, 0x3, 0xb8, 0x4}, {0x3ff, 0xd3, 0x4, 0x81}, {0x81, 0x3, 0x8, 0x5}]}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) getpriority(0x2, r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000500)={0x3, 0x4}) 15:41:29 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="0886c71c0fb8b85c20809feaea74093f4db2a502c2d6623a567afbb539158f85ec049a5a87e2c5687b34232db5d6ea45832a0b99c6a9ce11df1bb057bfec929196485006a981d22d0470e152c865e7d5f27d40cc35e61a8071a17f24430c27f1669d4c54931e2955a2ef6464aa8028758057b96d7dd6d9a737180b5f65544335783285d5391eab246235b8fa22bfa6180fed876088437e3b91ac6bc03c4744162be21fab56ac7364c748221c221bd9500e55295e491916b75e46d27a6331044a1060d8a62e981341693edc02c0a14f55b1cba9331aca2635d58b", 0xda, 0x327}, {&(0x7f00000002c0)="787b50b9a8ee3f6b083a295e247aa14c8a1969d84e7a7bbbd1a8dd255aca051d07cfa62b410af58ce7ab8e1361680a0f8efc96aa6f3c9093458815565a73c86e87ea90c62252a05ecb1c172331a193286bfec9188dc10229ed2085b0a65370b41870fc3632920c220bf5a4e690ce6988390471327b1e70a817482ef1feddd8136a8f9a76602922dea8561e17fe265dbf905be4c5cb05e50e7d393479df0a55e0c64844afb0ede58617687133b5ae1e5b891e73a79a736ee459a2c8ba266f3826ff98ee", 0xc3, 0x5}], 0x2000820, &(0x7f0000000100)=ANY=[@ANYBLOB="6261636b6f686fa3c3d5f550d5a5cb6e0c58ab3e605adb72d8fb96270902cf2c97a130407ab49f3de8339a43275fc00f283e4113348738a92102aec9abedf2b45275a4d0222d1b35111aa3e1d6c5ac50b168af5156de672b0f79b81f34d3e88d5bfd209f5dbf8b623bc3535741d4381ca4f0573578b17afcf3dce39388b08d185254047095f80daab3b442f01908060edcc0e1395565c05649e396e021cb0b1bdcb865d55baa12e7a35631b4d9d923e00dab1699222b76b789b9"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) [ 632.558380] xt_conntrack: cannot load conntrack support for proto=10 [ 632.584568] xt_conntrack: cannot load conntrack support for proto=10 15:41:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400400, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) 15:41:29 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50086}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x20, "ac69ddc9d2b88525f4458af86b66d9a1e0a69638f834d278e9006d185e7b45a6", 0x3, 0x1}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x13fd}, {&(0x7f0000000140)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FICLONE(r0, 0x40049409, r1) 15:41:29 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) [ 632.654001] xt_conntrack: cannot load conntrack support for proto=10 [ 632.655220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.681406] xt_conntrack: cannot load conntrack support for proto=10 [ 632.695718] xt_conntrack: cannot load conntrack support for proto=10 15:41:29 executing program 4: ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040)=0x3, 0x4) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000200000016000000000400000004000000080000000c000000100000001400060000000001000400"/105, 0x69, 0x3fa7d3ad}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1ac, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f3838eb38a37"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xa5, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x40, 0x40}}, @tim={0x5, 0x81, {0x1f, 0x76, 0x40, "9bb23efed5f7997acc67afd32ac2bc90399a52098700997f85a328de70c4f4853e98b4da729f9186e3c92ce6a1969dd17a1fff746fb7920a89d93c5f6103147e1def11a0d11e080a8c56b889198da1e96dc99d3174a2d7295a89a6e3f09c8e8f8a575a67bc113287314e56987c029025aa6291617cb27312e2b06cd8d664"}}, @challenge={0x10, 0x1, 0xcc}, @random={0x20, 0xe, "67c28887cbb946c3b1f528c29c83"}, @supported_rates={0x1, 0x4, [{0x9}, {0x63, 0x1}, {0x60, 0x1}, {0x3, 0x1}]}]}, @NL80211_ATTR_IE={0xb8, 0x2a, [@mesh_id={0x72, 0x6}, @preq={0x82, 0x3b, @not_ext={{0x1}, 0x7f, 0x8, 0xfffffff7, @device_b, 0x5, "", 0x5, 0x2, 0x3, [{{}, @broadcast, 0x2}, {{}, @device_a, 0x1800}, {{0x1}, @device_b}]}}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x5, 0x1a29, 0x0, 0x9}, 0x1, 0xdab, 0x8}}, @prep={0x83, 0x1f, @not_ext={{}, 0x3f, 0x5, @device_a, 0x8, "", 0x200, 0x3, @broadcast, 0x7}}, @supported_rates={0x1, 0x1, [{0x2}]}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x3}}, @gcr_ga={0xbd, 0x6, @device_b}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x19, 0xb4, 0x3}}, @ht={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x8001, 0x6, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x3, 0x1}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000400)) [ 632.732070] print_req_error: I/O error, dev loop4, sector 0 15:41:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c096e655fc3a96e7472792c00"]) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="a162c44f8765c44d4e9ffec328586871458d0e459710ae02daa6f89ef46d6efc9d70dc47be4d302c611f81effab50ff8d68123119c710141d63d680e6232e70830c0d49e4a3e691b52101c6f3ddc721e8dd4a22e91854bc41000b415299df1a79df0e4503e1871e385d1a01b28f78d7d41d295ca1a24290aca78f84644781a8e535b06cb97b85df3fcb6a455484c87ab5cd1bb11974c9d220e87fc398ffabb8553e259047d88426807e83689f4d2dc", 0xaf}, {&(0x7f0000000180)="7de3441145ff7c373d3f669881859ffedf045eabed6e4a23badc", 0x1a}], 0x2, 0xfffffffe, 0x5) [ 632.787549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:29 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fanotify_mark(r2, 0x10, 0x8000000, r0, &(0x7f0000000080)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r4 = getpgrp(0xffffffffffffffff) fcntl$setownex(r3, 0xf, &(0x7f00000004c0)={0x2, r4}) [ 632.867833] xt_conntrack: cannot load conntrack support for proto=10 [ 632.910793] xt_conntrack: cannot load conntrack support for proto=10 [ 632.974555] xt_conntrack: cannot load conntrack support for proto=10 [ 633.001412] xt_conntrack: cannot load conntrack support for proto=10 [ 633.002705] xt_conntrack: cannot load conntrack support for proto=10 15:41:29 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000040)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\n\\\x00\x00\x00\x00\x00\x00\x00\x00']) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0xa, 0x0, 0x0, 0xc, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000540)=""/4096, 0x44, 0x1000}, 0x20) [ 633.035003] xt_conntrack: cannot load conntrack support for proto=10 [ 633.067739] xt_conntrack: cannot load conntrack support for proto=10 [ 633.093220] xt_conntrack: cannot load conntrack support for proto=10 15:41:29 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) accept$alg(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noinline_Dentry,\x00']) [ 633.135043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:29 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1f0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000040)='syz0\x00') 15:41:29 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="f1a06d0103453c0580f36d8308a985c96763a87a43f98e4e4a1dd07859e910482d062eb28257bc558fa6ce292810425915ce2b6df87b55115cebbd76e49d570e95aa251109bf710dbfb1cc352d7274966e81b1e04f913e0bbc29b370a8301e46bc412cc0f8f37860826ff065a6e77dc82376117d5467ec69315191eec55cfe1ab1e53353b8721732533575ee0fa67b8c7100ccc82e25441b32862972bbc7c4b2c54c937dd961c3b26b536ce5c3b7bf35e4dcf24eb656775b53b588861518e1613ed1b7f75d6c022e2e6452d962eb8b77b26e294def2028", 0xd7}, {&(0x7f0000000380)="3b2fa08e47d7a5760a1e15b836a9c39e5b230426f429da4fce07bab9578f5b34fffa1f521b084a11ca092722989864acc03f96cf8f14b25baacdb278a884a571d4760d812ff2c91000af2d4c71cb820f4b283b30fffc5f85bd3b66de72e88959648f348a661feece3293a9b712fd4739e0e97d0105f9b65e57b0394d1100939a27bc96ffe01a66287572b762b330d2cf7b44259ac5680e671084be42ece1deda994d10fba963bde28496620e0e24cb7d3240fc5f652986fc7b8c907cc4d682cdb4bd153d14cdc3719e8bd12180b2158d475a2f920497fc9e5636d4635ed08c6bdd4143860c694b2ba9b9", 0xea}, {&(0x7f0000000140)="43ebb99c2c806e1a626808b6cefe27e5e5b2c0fe2034222a101edac6b6f6136ad6b8bcc09471cd73cb522207ef", 0x2d}, {&(0x7f0000000180)="68fbb73b895816441b2f1ff4bf686b0dc37c055cb7ccec5d5a43a724f7fb3b6221b3cde5f5123257eea876b7e9c76623dbd4667eee4fee37d44a9a175cccfad1d6f33a76993c62b34da47f9c3cc04397ce1d41f6d896947c03afa5b6d3b4f2a8", 0x60}, {&(0x7f0000000540)="b1484ac5d9f699235f5af6765391f3001d30661cc9477e0ea2b96b46b1fd4ea248d42d35e3f36e3d1a92dc7b977b88ad04c15e5354be32e84f7c11b71f6b0f89f417de546efbd4ab0e844b018984874e03e1308ad4824e7451ee1d0f2d3cdbc9fdf08a4ed9c0d9285e4e294cc3e0407dd08428c14f30df5da9fd21abc45f957da861897e89cb479c5b6f401559391a28ae0ec6b0af9b11eaa3f5db3b2e9c5de22f7b5c36803818e59fe05000acccbb679cff40174b28f8216daa15dfc76178058c72d0ae4e9b2cfa9f8263fe", 0xcc}, {&(0x7f0000000640)="05a747e09da9095dd2c4a60af080b1c60f961f7c97c6dd4b54b82c1503a495754f5d7bbf308b8d9c728656f518d2f2021c3c162bb29cc61479aedef54d8b0c0b020b4718d9da8b5244f012d39ffaf803c7762ab2950e92587ebecf05dd12330d9acb83052c3243782c7981704e6420d5ed3c384cc472428d657cf93323b467a4ef727119e34d", 0x86}, {&(0x7f0000000480)="5c47d15d011d1eae0b99e110a53aaac3e70950d040ff0c570d228b50b6e728e9ad1c91162ea2bbd9cae17fd2", 0x2c}], 0x7, &(0x7f0000000780)=[{0xd8, 0x0, 0x3f, "efa80fc8c229ebeb05ecdb06cfe6c44cda7d720caf7675175bee4429a53c5f0e60ce7cd66e1b7444aed1393799a8e0864d819654a1db2c064322b21b15310ce1ea10b7a3e3c99daa49e31d508526dc6a0baec8e42488bbba74c6396e86a308ecef6218ff5244f527756c9f4cb0d8b591034cbaad9131eec203db4ff75fd40803880de06d3970aa1a576f3fdaf0f71d7970c88202092eb879f77bcf5f81b6c619e96a582c6fdb8acad7b4066d833307e5b97ad6c215683ac4071c8162ccc5d3ccc8"}], 0xd8}, 0x100) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) 15:41:29 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e747239a36c3ac62acafa2f620b81520000000000ff700fca1db9dbfb05173cd9be9506db429d2cd2caaf5558c86836a410d6f793996824b42ccc23faa2b0e063795ef6729f435a09892e6e91e80e7d7dbd0f0dfe7c4cc1d3c0c443964c0a24354cc43e1328099435a56e1f34f720d2abd040aed1ac94bfb9467fa2a22a042922071d7dc7c3f77315f8569d576a3886b850ae21b9807bcdc0996efa0bb454c955930dc7e6e3e32d63db6da7bfde01c5e36570ac"]) [ 633.284033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000080)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file1\x00', 0xf8, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4291549f2c05129cfbdcea8095fca200bab81e8fefe9588c0bde73ac", 0x1c, 0x6}, {&(0x7f0000000180)="f16c76656ea69119a4516f7354bf", 0xe, 0x81}, {&(0x7f0000000240)="baabe3c50503029177b79c8823d36caecb682b63c1cdc77602c43d1b9ad601f48b2570606bee5e1091465d89a77d1f0404f3c3c048500331344bad2309bc41b7c4e038ad9403ccda9290cf1b5db120aab7555a5f55c3e1be", 0x58, 0x8}], 0x20009, &(0x7f0000000340)={[{@fat=@codepage={'codepage', 0x3d, '866'}}, {@dots='dots'}, {@nodots='nodots'}], [{@smackfshat={'smackfshat', 0x3d, 'f2fs\x00'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, ']'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) 15:41:29 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7482792c00"]) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x1, [], &(0x7f0000000040)=0x9}) 15:41:30 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000040)=0x20, 0x4) [ 633.614889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:30 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7472792e00998e04f7392fb047d93fb49e4a102951fe0126469db079e76d6f"]) 15:41:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x40, 0x5, 0x7f, 0x0, 0x5, 0x9c, 0x1f, 0x1, 0x0, 0x3f, 0x6, 0x20, 0x0, 0xffffffff, 0x9, 0x9, 0x7f, 0x5, 0x3f, [], 0x3f, 0x3f}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f695e82396f6e6c1f00655f5d9cd64e88cb62ca"]) 15:41:30 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x1f4) [ 633.872415] print_req_error: I/O error, dev loop4, sector 16 [ 633.893662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:30 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="030000000d0500002b00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400004001000000020000400400000049b114917a162a4bf06ccb86bd09f67671ae048e2d080f6a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000240)={{0x0, 0x0, @reserved="9f7b0c03b3bcaa797b5b9cfdee1d8d08701e729a694460e3d6252e988a14fe70"}}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:30 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0e, &(0x7f0000000000)) 15:41:30 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) syz_mount_image$adfs(&(0x7f0000000040)='adfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x6, &(0x7f0000001600)=[{&(0x7f0000000540)="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", 0x1000, 0x5}, {&(0x7f00000001c0)="545e80f94c4ade3007367a87974e73c30e468c38186fc5ca7021d9bb768dfa7363b9da4384d91d9dfe0cd662c0c08dec884596e032", 0x35, 0xdea6}, {&(0x7f0000000140)="83830aee5a8982263196451637a26092b9f5c65cdc8cb5f99d0da7daa5b3e9eaf565cb536be7d2a04919c71c9df7ee6404d209f4d66456390aef10ef7808dc522fe467bce7bc9ec64190d87ee0675a979117786f290658e5ed006d30", 0x5c, 0x9}, {&(0x7f0000000280)="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", 0xfd, 0x5}, {&(0x7f0000001740)="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", 0x116, 0xfff}, {&(0x7f0000001540)="7848b99e8d88f105f0fd2904e4f384b416b5000ed3f62df8e8bff27b5b57012f4faa42a0894246e1625869f1d557777d63bf234158103823ea4abf35c3c9d7ed423200b1663c7eea98f899814ff940d85e88a51f6ca11952688c870349533d674e05b181dea603a12b53d94a6c965866a52e7404f987e61ff5ceca44edc418f8aa67a9905efae15874165d7e6b0bfd889030dfb411a989c6401284c51bdacf3b6ca5df9789", 0xa5, 0x1}], 0x60092, &(0x7f0000002b00)=ANY=[@ANYBLOB="6632665b002c00000080002cf52c2c24c12c6696075e90d55ada0f2b292e7b2c2d2a2c2a2829212c666f736e65723e00"/58, @ANYRESDEC=0x0, @ANYBLOB="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"]) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x800, 0x2}, {0x2, 0xc6a}], 0xee00}, 0x18, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002880)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002980)=0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r2, 0x0) syz_mount_image$xfs(&(0x7f00000003c0)='xfs\x00', &(0x7f00000016c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001700)=[{&(0x7f0000001880)="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", 0x1000, 0x1}], 0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB='discard,uqnoenforce,rtdev=./file0,nolazytime,swalloc,usrquota,qnoenforce,func=KEXEC_INITRAMFS_CHECK,uid<', @ANYRESDEC, @ANYBLOB=',subj_role=f2fs\x00,subj_user=security.capability\x00,defcontext=user_u,fsmagic=0x000000000000005e,dont_appraise,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c00feffffffffffff7569643c00b53d3edb5afe6bfdb18b4550406c15c0298537188cf98e9147076b39a9fbadf8b4bb694cca5187abc063202e75bd77a5bafc9baf4dacd84dccde98", @ANYRESDEC=r0, @ANYBLOB=',\x00']) 15:41:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@subj_type={'subj_type', 0x3d, '&-{((:'}}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '\\&+}]\x98[&(/,'}}, {@dont_measure='dont_measure'}, {@uid_gt={'uid>'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@measure='measure'}]}}) 15:41:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) syz_open_dev$vbi(&(0x7f0000000600)='/dev/vbi#\x00', 0x2, 0x2) r0 = socket(0x10, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) timerfd_create(0x1, 0x80000) setreuid(0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x12a00, 0x0) connect$pptp(r3, &(0x7f00000004c0)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000180)="69b998597766d9867d2c430e2f61084af1868ec44bfbd580cb2f991e85dcd3650066029d58f6ffba8be11b74f3396418820290e58ff43c4ae287d9037ea00ddf315655edc31cd834623388ef75cfc9b363eb873fe7214ef9b87f2454803cc34f4d10278d68db9306ef16", 0x6a, 0x90}, {&(0x7f0000000240)="cfca6073e7e7c7bb9e371c989becd29d8f86961784fba53ba709cfbde7c940bafabbca1c1e70058b035f1524181b0d9305eeaaea666bbe06ffab2381879b388feeb34abcc084c4d8b5871c0872927d8482df045eee6a7d9f5c81dc9528f748cb303fcd4da60052cc0ea18599b06b7a8e4264335d8427", 0x76, 0x8}, {&(0x7f00000000c0)="e4c77c0970b80b09454f2b1584e5b1d32d30811fee7bf71225aa26178c", 0x1d, 0x9}], 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB='f2fs\x00,audit,euid<', @ANYRESDEC, @ANYBLOB=',smackfstransmute=,obj_type=noinline_dentry,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2c646ff05a5f6d6561737572652c656ec2a1531a5f9375c03434", @ANYRESDEC=r1, @ANYBLOB=',fowner>', @ANYRESDEC=r2, @ANYBLOB=',\x00']) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CHAR_RAW_ROGET(r5, 0x125e, &(0x7f0000000500)) 15:41:30 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) syz_mount_image$nfs(&(0x7f0000000240)='nfs\x00', &(0x7f0000000280)='./file0\x00', 0x2, 0x5, &(0x7f0000001540)=[{&(0x7f00000002c0)="5e9c65ccf2c3a441003e24d3a4c40d01f73022c9bcb152b0103cb20f6b1500a628cbc6a6978d825f84776f9f8b80b54e36d32bc96ec0af41ad37f042fe3228d19a119ffc8af22e350b0fc924c134eb60dd1d6e7125608c", 0x57}, {&(0x7f0000000340)="0dfba495781a9d14659711864c4098e503e816873e3ca3ac2b14d922906022c74b83943f8ea16898b8bd50562929a2b284dc6719a72a7d470de4d889be312da2cb15a19be39b2813d8679a137bd485991772f277ec250785fe57fa4295bc4e3a4071b1e6c17d03182068b7a76134ca098b8154df8fa8e0e8752a053d2e95ea05e07f9c70530a2fd74c785f213429f57f8b01", 0x92, 0x1}, {&(0x7f0000000400)="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", 0x1000, 0x5}, {&(0x7f0000001400)="4b837f6fcdd3ed1cc9d9ebabcc77581acd4bbe01b43cedfcd74ab4682603afcf760407ea0cceb85aa139e29177711678c0a13c41273216fcb53e275240d1cab17fabb33f9692d86e573d0cbbde9a2c73979f594ab2db9c7081e2b6c9f52b3db1fe9fc8bd05b14f34d639ede2ee39b968c6ebc213de2d0b747c49d7dc8d148ae27060d7a6fbb698cf0565985025ba327241ea0621f25fc92cf1937dad6a06fb10ddb781fa2c2812b44ac09e1abec9", 0xae, 0x7}, {&(0x7f00000014c0)="f7e4c477feda86b3d518ab6f2a6cda788701df4dc9e01cf4bab62d12d00347bde6f86ff24690f6115c9d8a9a9ee24b67f41f4e78f9988eca613a6342a66d2ac902fba796473f0c5c9408d8278770f10d251284fb6cf15e05cd19f107fdf3f5b4e450fe8360b1a25f6309390ea47a89e2d549c4061ce97166c9a4a2d0080252a8", 0x80, 0x7}], 0xa0800, &(0x7f00000015c0)={[{}, {']'}, {'*\xb1+Z{\'\xce'}, {'@\\z):'}, {}, {'^'}], [{@smackfsfloor={'smackfsfloor'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '#\'#/'}}, {@obj_type={'obj_type', 0x3d, '('}}, {@fsname={'fsname', 0x3d, ':'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) [ 634.288051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:30 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x80) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 634.404528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nopnline_dentry,\x00']) 15:41:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x801) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250300008fc45af57851f1fda7922ee8aa8b1f2eb2bc69acb8bb0d1f2538f978d2d9002ee394957a4d7c917f32145001e7f8a9e9a0517669da499c5cb8390836db20386a6c157178316e4133d0050e475a5cba39dd2aeb3d16dc429d7711a504e30c5dbc6b7f80ae1315268c00"/130], 0x14}}, 0x4000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, r2, 0x4, 0x70bd65}, 0x14}, 0x1, 0x0, 0x0, 0x4004024}, 0x4025) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x140}, 0x4040044) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xbc, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4144) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1d9e0000", @ANYRES16=r6, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r5, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:30 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32, @ANYBLOB="fbdfffff"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB="fbdfffff"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYBLOB="fbdfffff"], 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x6e7669ea78803fa0}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}]}]}}]}, 0x478}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x10000, 0x8, {{0x6, 0x4, 0x3, 0xd, 0x18, 0x64, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, {[@end]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000000a80)={0xc84, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xb367}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfa4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xbe99}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffff9c2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x2, 0x40, 0x6, 0x3}, {0x3f, 0x1f, 0x6, 0x3f}, {0x442f, 0x8, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x5}, {0x5, 0xc, 0x0, 0x1000}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x2, 0x80, 0x3, 0x9}, {0x40, 0x9, 0x9e, 0x5}, {0xa6, 0x5, 0x2}, {0x9, 0x6b, 0x8, 0x7}]}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4f}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6c}}}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15:41:30 executing program 3: syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1404}], 0x4000, &(0x7f0000000140)={[{@quota='quota'}]}) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000080)={0x1, {&(0x7f0000000240)=""/208, 0xd0, &(0x7f0000000040)=""/27, 0x1, 0x3}}, 0x48) [ 634.567887] attempt to access beyond end of device [ 634.574419] loop4: rw=12288, want=8200, limit=20 15:41:31 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0x6) [ 634.614092] attempt to access beyond end of device [ 634.624276] loop4: rw=12288, want=12296, limit=20 [ 634.637124] attempt to access beyond end of device [ 634.653950] loop4: rw=12288, want=8200, limit=20 15:41:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001dc0)={0x26c, 0x4, 0x7, 0x301, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x7}, [@generic="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", @generic="c4a976b37c2dcd1f24d362ab5035804681b87bfe7a36282243cf4cdd15e4fd0b177c4b5292c176121653b038f9ab07116d", @nested={0xdf, 0x5, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast2}, @generic="8fe4d72d2b70f6e6f73b4083bfb2805b4fd1e7913e95f60823cacad0cfc29af0ec1cf2f1b750c008abc78f195bcf2a9ccc48230b0b1052e7cc3becaa9ec191e75a01d8d0b8c258", @generic="3bf82c402a50df6f6e4d1a47ec830d696df5e737c98e435602f9f8c853abb5c92f05307be194b757c50185e7d735a99ba67289125861f7ad1a45eb4e009f608e125719eb51c851e80b38b3992081435a66e90ff714e8b5d1f3237f97128a2d2beea1953199e3dadd6ea7968f3af318edb11e602f544f5ff79c27f52ff83df114289a76bb"]}, @generic="1a5b5bf35150d6d6a9e8a995b45eb8a4532d4db85323855577968cff1b408d670859e0f0cd2b6de8ca2e610e4f407ae85aebce", @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@mcast1}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r9, 0x4070aea0, &(0x7f00000001c0)={[{0xd3, 0x200, 0x9, 0x6, 0xfb, 0xa9, 0x7, 0x9, 0x7f, 0xc5, 0x7, 0x74, 0x9}, {0x5, 0x6, 0x40, 0x9, 0x3f, 0xb9, 0x8, 0xcd, 0x6, 0x9, 0x40, 0x94, 0x20}, {0x888, 0x9, 0x7, 0x0, 0x5, 0x1f, 0x8, 0x11, 0x1, 0xa4, 0x20, 0xff}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1a10, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xdbb, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1438, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x2}, {0x7ff8}, @broadcast, @device_b, @from_mac, {0xa, 0x80}}, @a_msdu=[{@device_b, @broadcast, 0x49, "5f4edfb5c9a1f1da672fc969c51fade28b47a1f4ae65e67a415541f18bf91c52dfcf7ef723360641c48bc0f37f6df50383c3217c99e980f5030b54dca400caffbec3e1f584bef314af"}, {@device_b, @device_a, 0xe9, "990ba9a89c86ba4f7352f6e2f6ed8833d1bc93e48b8818a4b498b39e35e61d58bcca68d8adda3b0ee6834218968d9c0d48155d9b3a009865c26e38d96e3b196d6471ddd6604d3c3fb78077e86b79fa72541b76e992d702d5670ec43485cd4ad5cf8242dde5dd167b77877896574457a2c75aa23d689c7385ea7cd6064e22be1e37d5273285c415fc2db4f14e9a6c7e315c424eec44453e9ac148fdf47093c62cbb1bbda939dcf423f8b48fb547c75ead6616c5bf09c3bf88b6903c15a77e01c4663276ff0f34f2280c5a7d464dd40de09f5f99bfa2d781782105206d37f894d7c8f558f813c4a3e26f"}, {@device_a, @device_b, 0xa2, "6fefff78c121c87ff99cb0be7e78e706d092f800e046a96e0eb82c2bf21b4fe24c530cc525a8ae9493f797b8945ef3bec32da756be932fd0ff0ff421f98820a0bcfae7bf5274ef03275341dd6814aab053d693d5fe43626a624a64bd5cd74f64cba33ba6850d19bb8202a3ff7126d461598184521b3f8b00b94ec5bf1cc592055fa2ed232aa056aa79b23833b2cee3a4546d11b4465e467cca6d8a939caf36872deb"}, {@device_b, @device_b, 0x64, "036f158082c4817b35d13cd1ed309aabad222e22a90067ae22061ca8fd1db15b67da3ccf3478b4a1d7ecbb4b5dc46534855d8254fe780b48b6b0ac4230dc692464c17f173e99a2820cf83ae3fbae947399a0334945a7bf51be03d6d44d746dc1b23897e5"}, {@device_b, @device_a, 0xc4, "f1a27dfde5f8207850e536a14f9c5becf22be73cc0493f958824d75a1e065a4a184c1173b9a8b1f05088425d7d33d6b435b04e27c3a89d62aec82346fa63bd14e1933c67ddc2d5381080c03dc1d26b1ffe8cf7d65ed4bd07435fe70958d20b626c7db53c46502eaaa076d276f6f6541cc2ea8d5241e6ffcb14185e025e72bbfb7823b75eb88c034d31e68898bc75cb64714062b62711e29946153030f9cb761e71a09b4fb576cbc450ac5438023b69e6afccae2609a7833e8525038ab8c49c34ef51f278"}, {@device_a, @device_b, 0x1000, "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"}, {@device_b, @broadcast, 0x76, "b417afc6864c2bdd95f94986b8ab52069fe5bf55558b4ffe13779d60145977cafd870cb3f4928c41a113573cfe7daa7975ab9444867c47d27b5bebbfb595c10108be36135794dbe0111128f6d62afb723078aaae74b7bb0b53b6a4a74fb8075f0e4dcc26d40ebd5ab2fbd66f16a8e00b0c3db65c9cda"}, {@device_b, @broadcast, 0x2f, "cd4ff45a1ddec4406ae2d4928f67134fe731d63bf4ec1baa8c18d12732a66a580e1a8446ee481784c418d0342dac4b"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x551, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @initial, @device_b, @broadcast, {0x6, 0x6aa}}, {0x8, 0x1, 0x0, 0x0, 0xb0}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7ffd}, @broadcast, @from_mac, @from_mac=@broadcast, {0x6}}}}, @ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x25, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0xd1a}, @device_a, @broadcast, @initial, {0xf, 0x3}}, @addba_req={0x3, 0x0, {0x6, {0x1, 0x0, 0x8, 0x54}, 0x5, {0x6, 0xff}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1a10}, 0x1, 0x0, 0x0, 0x101}, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r11, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 634.664410] attempt to access beyond end of device [ 634.682823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:41:31 executing program 3: ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'nr0\x00', {}, 0x8294}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0xa0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:31 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1f0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x2, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1) [ 634.721875] loop4: rw=12288, want=12296, limit=20 [ 634.741302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x195, 0x8182) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8400002}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="447950b3cb71"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r5, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:31 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) r2 = getuid() syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1ea8ad84e16b3e68e6ecf586ebac52def04ad76a380d5e144ae228c16fdd797b0a6b0400ef82f800e841256f2215d582", 0x30, 0x7fff}, {&(0x7f0000000240)="668edb56abd2edf6c7afd5106258d1fcac455921fa34a65ff4ec78c0bda36f620cba87a140e81db8dcba44a2665071e78200d476b1b3803f20395606d5a1639e3bc1746ebff417c56add52fb213c2e92cfbedba67deae8514e7cd4a673f258fb71596851377f93e3cac6aefdf3701e80d60d7e7893a8e70392ce9346fabdd947fdc8f9d1ae9adc2e3b328443c558ead46769fcb8fccc8d4502acd609c7667eea1c148ff1f2d631ce43f184be8cf01f836e5e142034c58713dbe08075615815c178e993d11d09d747e3b16fe3e19f28698cf3ac1c9ac7849bec9865f872fec21b5c8b40366c2ce836aea0b2ff12a9bdb5bd339631db7694", 0xf7, 0x101}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='unhide,check=relaxed,mode=0x0000000000000004,uid=', @ANYRESHEX=r1, @ANYBLOB="2cfe94cdf95125b3bcc72d5a54e1be73657373696f6e3d30783030303030662c6f76657272696465726f636b7065726d2c6c3ec858e2d6f32e0a7b2f352f5d161f2f605c87b34f64ebf8a7bffeeba7", @ANYRESDEC=0xee00, @ANYBLOB=',w0xffffffffffffffff}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 634.896540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.898799] attempt to access beyond end of device [ 634.938761] loop4: rw=12288, want=12296, limit=20 [ 635.196313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:31 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket(0x10, 0x2, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x23c8, 0x20, 0x4, 0x70bd29, 0x25dfdbfd, {0x1a}, [@nested={0x84, 0x8f, 0x0, 0x1, [@typed={0x7d, 0x8e, 0x0, 0x0, @binary="8f413527da82b3c13394c212b9bea0ee717a50f2d6b175c957fa07595c834b7458b3e36acd8427c2cbe87e34a4b22a66a4205321606dcbfa3cd734fa46469b0a28281f5e31c96b2064d2c4708130d9966b2881858ab4b3e91a0e97607780b0bab2760853774aefd9b769039ac138db2670cb278522c02d2abd"}]}, @typed={0x8, 0x48, 0x0, 0x0, @fd=r0}, @typed={0x9, 0x8, 0x0, 0x0, @str='f2fs\x00'}, @nested={0x2147, 0xc, 0x0, 0x1, [@typed={0x6, 0x5c, 0x0, 0x0, @str='%\x00'}, @generic="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", @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x2d, 0x86, 0x0, 0x0, @binary="2aaec8b3ab52f2fc0c248dec9b5115d1c4188026babfd9afc06dabac666b8e578358171730c1458474"}, @generic="9bf34ba74323319e44ed18cfb089eb9edae118edba9706d8a132dcb110882e71cdbdf417ebb1d65f615b6aceb4d19952b1d59312930216d911009d44000990f388edb8716c92fcb7463db2d79718f5510baaef3d0932b705b4eb14ba1750aa2321b2f6510da2f2eddf306836c16eda4e52c8b6f600fffb191d420a721376230ad3b64a6e8836277049b88d455b8ca6375973c18d123dd4ef936e29972479d52ce720a29b7b274fed50a58d491d6e6d3596db5152d1a50c6544753ea468b54cefb89855ca670bb278eb594d06464fbf2b53d3b3f4d5bd55aaa1b1a88a651788ea0ba79e7d2f1fee996a56cfe888c0668a52d18ffc207a9dc75205eda31d073e58eecba9ae8eb610ae1fd5b849127599487a7b400dd1d65ae99c1529178463e65ede31c7897ece58b1a258bb2669f5f6050f254d9b6bb10a01efb9b4fa6f56a89d8b70d7f5c9171ce9063177cf20f1b5d99fd0be6e1197f7b430dded050a60d42b6b037b8af5a76a042d69e57b957669585a142713ffc5fa6355c35bdbd989791860cba70df276c89018baf3c0f122a532b768a2e52a8aa31874fbd9d3c92cfd64386cc58617cafdbc7277af816d6a72eea73f7135d76e7509f2d83f6b74072d28e93192b1988cb7c84d19c6f32f6d8dfb926f9effa7ea198ed2a81d5e367896c65a15ed199a3e55d708fa767dbe888a656f91d437ffd70ef6c3fb8334c288a1c6b941e6858639b82af30c608b6290fb34886135f8968fb63509e7112a30d7f203779424faf417388ddee911eeb86c520f888cf97a34d1c054bdc6e5a7c2ba0ac7c927a574552b8abac25d656061dae4ff20e387ee268a5da05d7043eef3d2ad51cceb78029142353ca249ac9e8ff6ffaf0d83f13621fb800c360a1af503c3e836154e2c13c4d6255bbebf910fad73dc2aeef3de3a10084fd990b6fff3ca81152d2070da0f772641e95627d270ebbe7d090e28a9ceb9ced0b1a78731c7d1178d93a19e907ed8c95c543a5b0e00d94f567ff09f2792b093a6d50a578bda6a527860b2ddde2636ce5a624760ed78eaddaff03a1ca300566f2ee84532929bf793b47185122d505e4fc45f9b5044a1a330bd38a20b93b82a929efc9f31b0c941ae7fb3cddd2b9d034908a28e57ee587af00245d62a89f9b74ac2da3f8774770541575db726092899226b2aab8daf6d6729455d995923c6eef2f2ddbfaf0082689f33d2cbca9215a436397c7616ba56648d1b27cc0df949d9eb2cd252cb6031017554dee0d40d70047aad2264f23083ebfac8f75b63e997c4cfd7151572ba00655511689ac5e9a8522cf1560b07851fe57f5bb5fedfdeeba66fdb72c7432cddd1c0eae90d8ab29e7624d2fe1a8d03c63e3b70e7a8c9b29044d22db2179536e88a5268b74b97ad1a097923be90fd187dfd10842fc954c208b0d9e7cf5d2033b7a5e841e85cffa3bacb532ba05ff5b3000569825cb1f64704bed459b737dabcb9a9d058a76934bc2c45e25bec156625e036ceaa11236bddd3871cd8da4bacb525d011b75d5bc34323380c22cad4b50532ff8fa6c7ef8c5d0900a8192e252fc171f509efff9f80dea900a61de5e91f3b621363d3bb3300c228a55b6b43648841ea2e569092bcf007ee6011790bbc64b9199e5485dc6ada4e4241c4ce6ae9499af33ef5c2921f01d73ec34f899a727ad31bdb4a54314c22b40f33afcd4fc74ff679f193d027a176e16f2ddcac7dbb73e2bbd3d16ff76dfec0d49af73009083582078a27718536d4dc7766692eec71a9a5e35c667d56ab2ad2bd225853b4748ff1e2ff123da5a0a3633a2ef2c33ef730911e7623f1501105ce5c889b05d32891bd851893fd23fa427520ce1b29931346db9508ff50494791c76dbfebb86644a1419032ae2f5def019213a2e27e1f3a3825a0028001f17afec3999266f467fc6751fcc6b4012cd91cdcbc58c507b57f6ad165a1b341920b3338093c9fa3bd179ae97c119217a0995f9ec671adfefa9a52e0bbdb319b66bc45eabe3823ebb89230dbbf5af5b13c037303e865acef7af798b7021c84525beb42c8c631b62c494973fd3cba0e1c1ffcde3759466c2c446581a65b060dbb9c349abfba5b5aaefe481ca5e33128af50cb7a6ec44e471a95fb39b96e01531ecde91f6ca1463e7e435f2ca90b396dcf171b94d224ea14af5fbcfaafd6615ac83c847e8e0aaa09658a82230e63df600cffdbc3a444805b9a20602b58fcc0887ba5ecadd2b9f3fccd41294a2f65e870b69be1f4abd0e6e3aa49635c1f3ea0b7def8b1b10a43ec89b2dc406df0ca8843695df11db88eedbe07545db06756654810b22321219b91b27c3e903b247a36f95aabc7c85f7eec988bb8233c7a1f4bbba33b0c763225e2498849a75077b1cd928ef72a006822cb5aeec06e9862db4e01bca1c9617c04907edb15aab909ad0b0c83f2dbcaecc86c4f9c166884d610a08ec95020bf06ddb5b2af90cca76cd4b1979f778c3b8820ccd4656a6202354338b705192b1abcb0891db203de962cf763c3e53dcfc15e2ff0d0d8f1be334884558d9f1b39d0a405d3b86376aeb274a16a328169b265eebce6568720fe64dfe2344e5879fd9b973e3bb165a255e332e223310eb179c824382221e93feacf2e8bcc66c661c5b3b2ce293a971fd8553e1e51de5c7e9b15ec3935b0c8a90dd18c66ed7a947a63bf79412af3912fe51a357fea636b0bf49841f0b7ba4690846bd12c798643a13c8e351f69a4fecf5a65ccadce7a18923d9e89d4086168c282ccf07a31ce8409f5ed9afa89c0c2eb28bf942990502e96bda51ed5c998335a807b1eaa604d9e8e2514d429670f0cb3b15201e7a2b82f62afbe85788ab3ac4ae3ad6347054dfe5cbc77fac143b88df89b3ec19039e9f3088d2e03215c7897aa9c9698487bb61fd180978790e61d192164bb70029272ad9cf97129eb7200fcc9f8540e7bae25ceb60372204a169555cf3da448110ae49e24f36c60e686564661dc0e51343641fff7d0e6696a76a165496b94da67f99b7de2f698d79de2d9995419882ca079191ae0fd292096439a3b4acd1b346bc7fa796f3e0704fa9cc513f15b3d16f508650857b8c75134ec84fb70dab3d0ba9c30222496e85f1c0214ee612b79a36c64ac72ca4447e1765eba3da930729679be9b2c7526ad7c88b890141f9b8f16fa71a00251b7df41af8846d6c395a4f555a4baf965578492c0c1f3c830ef2b714ca346f33bd8e2e468c113fd539a5b5e30da9444285d2499c61c3178fb90fe1a1091f58abd6a0a32949f378d4264a643a454ffa8fb9c6d60f4df823382a63acb10915cc2cd5c004fde9d2291c9716429bf124e9c5bf28c93ec1e7b00b8d272e880c80ffec93fb01cea03395924f70806b5f81c7fceb92f155a3b4f92247cb31830f499b6b7b29b9eab56464f48078e2996d2fa82cd46ece506edcabb3aaeacfd69ba2073770bd64640ab016768d58e20392716178220dc007456d6c4e63f083f9d206392e8d749b688579a33c7b66a97f44bc02b0ee03081172626634b7abdd984f352158f359feea77b4ac0fa3ad00f005ddcacf7eaf9cff86aced65b2f67d06fdbe75c36f48ca3fc65bfc22295bcd840c7bbd930d961b7ecc92ad67f208bd58fff5e9d3a16f71f2286de1ca1ba2527aa60c08c486388e0fc2cd3920dbd8351a3f2f38dce0f7096c704ec35e4d4a7226ec8c0bf728ce178d9924a6c7476d4ac2e0d10aa58d2ec4dd7a4ac739bf793032169bc188bf842d179629be3f6ba8f51826c17ed006640bffb775471f7dfedb6aba3a235af29dc8610ab5310489d1509d7bba1b186406636fb9c439af9def6be084d584467e36bbccd96f162447726c2567b270ee76889477716bc1f307a1a6f39389e458880afe79961f0ee4d4fe20a100e65a1293700c7c4b262703066af29a07e6cc15497399a8b6c8e3b1c3750c61766663464bf3b2dbc7d663eb00f00216ca0fe0cf21e54a9a6105320ee9c38293ded39861d78bad716a607d307f2b704932b2bd3c3e8937fd8b39bfeb830d020984a63114327a4386842039728b1b3d8f65eeb59e452a23057bacc1c251046f4c5b4bcfb9755704a3aec8f9e07d0d40586c35238087c6cb269091da7049911a49517f47983962bd771b1f0dd479cfe33a68115128a6dc6349f7eaad71732abfd4808666f91af78ba23333c1c81adc6d51b2557fca313d45255779cfc6c6cc67686174c2283170055bf06f016594c7edbba72fbf5c7177ee482c6a8e09ce4934a64d2ef56f8241f5a3de0b138f5db7878dd0b9133e8151d07b58e6e9c1fdd6418e3c0f2e4cd2ade79458dd4f710aa588aed2d7de85441bfb08492414d7eb84f9d41d032e6e33cd5dc0040431ad758342d74fe1947664ef9d2fe3d0a524ec4cb3cf8e640ba0963d63afa227495398840d17d75f65bfb3df79ca337185fc68f8223b3ddbb214e71f59e95167defb2e1e986bb818eedd5f90d5c1365c30fbe93a56404e4608d4fff9c8f394826be6229c1bb0555a33ddc0c7627034543fe9acaeea225990fe322fa038d388bb38facbf5419c608c7d9fc7328524d6da0b1935559f5e32bd0afcf9060abf701eb38f3ff6fe8e04330d81ac6e979b85aeae6d1e99e0047d160fb5b07d67a5bd737a0bf899b3fed06089e7fd5aa300590f0fad50be450347ebd17734e4c19a3f928677a159c6c663c0559c738e6ac1037ef186e376caf06153b6550de8936c640b271c7982889d5e016bb6792236f3ef12f9069ba63443cd99f427f6716bd8460ad3bb9fdee6cba65a7945242fd62a7895e90cd8a4f5838e4a95b1a376bb4190a76c96fc6b1efc3b1e9ad40a21b9caee9376b8bea0a2774f407ab658fd123031b39ca017598398f2fb82375e27e7442d447deef33495a056866e7658144df6907dc6caf4ea3e40110f3f435c42b5b4805a7d8a0f2b319ce83045e2e6cbe623fdc0ba881675be0b83564d82c3b43cab514a9efd204a404ffd5bcb46e469d5a2ba8373183cf1d44815de4ea68213c76f805af4fd26a87e34753769a4ef890ce6342ad71a79be0ff758b7a602b47a1a1903ff594d3418c2284b35f8971c88ea6b2004d4965ec132621010a037ccfc20bfc6f204f555ae28c5bc5360edf86ed604ff029256ce2334050cd0c88589c6ecc4cf2fccd191e16d22dad4975bf31bc43ef7b806f3a25143d85b5cdfe9dd9e8ef475b57f482be64f3bff698cdea157f1cdcf2030ec3bf187e258d3c6efa5f62d0600d6e878eccb1911fd0eac1874c1d7996b66a80672f05c7cffcc462245c1ee8178266a2fc317157c2bc3241652b63c171c5f559b98a796e9a5c70d9583bc9d2c702ecca3b27cc5fc518c3b3d8c8ca7c13dcd20b1993c0a959a31299c0e56da19f6fa6d2fc727142de904006e56caf7501ab955b0e27844eec0e2d720e774add3c03f440c70090c32b463b4af18bf398a37c78e994422a6d65b58b7a4f5a4147009ce71e3303ed5bf882fc660a53491de33410e0d8f09ad0926464b5e38ab6f3f13feaff30503267be0de580d6a4b512c5755977e3b58a7d0f320611aea5ddcd7adf94efa6a7d51a52c11a1edc2610ae2ff9cc1e8caa473ad3d5b1ff600d85bd0d0b836dc927045458c5cfbcd5111ce6300e4828857d396cf6c7653c0485aec402f547370ab6873dab7958df9a8f1038f28d4bd569ad213409ac6a72e381c712aaa9308044c4b1ed62a208d5692a5ecced00cced3fd4605c8e7d3c3896573d0d515abac13f62edc612c08b771a05c4d7a87bdb56209f567353d18476ca", @generic="7aa984354ec14152d1f06d5bdfccd98aba47ab76a822e049f9901f67853456a9ac4c6b4aee394629422269f9c0ecb46def38ce6bee50486eb8dc6d658747c941239383e34b60d4e12408feb2ae735919359eb1929b1150a8f3396e10c877454651bb0a2db96fd80e316ebb78d93c4c90cdc729fadcb9cdf61c5cc497ed9e320d1e504822796e36a3ff09e491854d6dd4ae3730ef4ffc675521654d285844de69d82ddb62469c4f6619403c246ec1c89e408264815d1ff30df27977f6b9827f57934981cd94cda0e02ba1795488629da404aeb8f4405d43d67a9f100334cbfabfda5c885bbaf165802d793fc384b3d0d3c4bbdb22f1442a"]}, @nested={0x8c, 0x81, 0x0, 0x1, [@generic="91f6192f8612eaa12ed139bd6f033ebfc72fdcae41cac697a89ea18ca611e79e7481a661bc44f73050b169857f5885ddaee2a0cd54bc29df2d8d54dc960bcbdd609326fff8e352d237bccbedb8ee910acfaec0ef517b0d29f851951d2ade78922cd47cee2e835f9bbc10e9c2c9a59f6fe3dd3ec4bce80bd21b834c2cb5e65cfec914c57919c3cfeb"]}, @typed={0x8, 0x2a, 0x0, 0x0, @uid=r2}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0xffffffffffffff1e}, @nested={0x112, 0x38, 0x0, 0x1, [@generic="5d46fcba798a16513b2ea30878cd5c2023165d092a9a8eb8a38e5f4aa49f72ca77c74bc2114927cd5dcd3acf53724c97ae091056d9d7ca29913b7bb9cab6a210d601f15742ca70058f0d6852246758f1166830d85b3caa5da9f94a06821068b37a00c2836a5877df79878dbb3f48e1a1c8bb4195772b47bbbbbd1af91e715f9d81bcbd55bdf6f96bf55472ec7472557c62cbf323ed548887e15c9376a276ad64fe4ccc7777b1e5a3395a5d3f2015718163", @generic="b4f2b27608d9e770fd157253501fd4f0be87775870faa5063dd707ab32a858241c73a6c9c577c1f79d80fc8253cffd6a278069e9c9a90f25a13a47745847e4da866b553a1c81823b2607e0523f62779aa303cb157f9d9d34144f949519"]}, @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, [], 0x1}}]}, 0x23c8}}, 0x48001) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)=ANY=[@ANYBLOB]) 15:41:31 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) getpid() 15:41:31 executing program 4: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e01000000000000002c00"]) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 15:41:31 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xff, 0x6}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)={[{@noinline_dentry='noinline_dentry'}], [{@seclabel='seclabel'}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r1}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x63, 0x37, 0x35, 0x38, 0x33, 0x63], 0x2d, [0x35, 0x61, 0x61, 0x35], 0x2d, [0x61, 0x31, 0x32, 0x62], 0x2d, [0x61, 0x62, 0x36, 0x38], 0x2d, [0x0, 0x31, 0x31, 0x65, 0x0, 0x33, 0xc6a02ef7fae09c25, 0x32]}}}, {@dont_appraise='dont_appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}) 15:41:31 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x10000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x83, 0x59, &(0x7f00000001c0)="bdc4c5b741e33627ff15a18e1838ffafa78f08bc79639114f05751732975ec3723ef4e71377dcbcabb584f2aa4c7f8bb238369aa5e552c4536bb32b7220216c45491099ccff560334418cba4e3243c7e642fc597d6d71417f9d9712e15c325416811bb78a95310bbcaf94d56932f7119b1d7dfdc4adb1657865be70a3e4535351d3b18", &(0x7f0000000280)=""/89, 0x8, 0x0, 0x6e, 0x76, &(0x7f0000000380)="661293053a9746a700409e2612bb0c81785625c14552216b8dca98865ea93fc8b5f822c61564bf349b9c7f1a9aa850abe767c1b9df23cac94d0404dadc99ab261247302a02afe94b8c72d4410339f745cf10a9053d3ceac2ba1ee7223062218f86e77d0e47ce45cf6d3f6aefa1bb", &(0x7f0000000400)="a0f95e91e09abbd8a557302470597efd928b5d9b336c4dd01e293fedc6bfee488d4e0f9e2b30b1a85bcf050580ebeae5ab3d4c95ac828c92d8bf1c0b2f26d38c708e6f823b0efe8ca2e4985a41872eb98e15df941f71a528d551016f86b36e12854acea4aaadf2c2a529982025d2364fdcfd138ff6a7", 0x1, 0xa4c}, 0x48) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r6, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="bb7bf1265ac1ad770e8e2c83f2f6e3e806195d", @ANYRES16=r10, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r9, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 635.456232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:31 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40040) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noinliney,\x00']) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x200, 0xa770, 0x8008, 0x2, 0x3, 0xff, 0xffffffff, 0xfffffe01, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={r3, 0xc66, 0x0, 0xc58e}, 0x10) [ 635.518972] xt_conntrack: cannot load conntrack support for proto=10 15:41:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x6}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000000)) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000580)={@remote}, &(0x7f00000005c0)=0x14) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffff7, 0x6, &(0x7f0000000400)=[{&(0x7f0000000100)="0aa47e53ddb9f88c23e63431e36f39e3eeb2e0a7af77465932ae6c570286d7f1c9a77e20ece0d933f4f026e12d32870727bfeec4119ce6af89e700065b57b0c9cc233017236104428d5d68989201aa625ac4339a47c9e6ca24121a02217f662319876b96d062ad04", 0x68, 0xffff}, {&(0x7f0000000180)="6d83d49f7024daa2833fdb78c613fea2b0c73925c52a50b2b7e68cc0fc5c878e1166349c1ba8a4de085ba1a21422d1930355bceacd2a89c847ab7ebd1270c079308b", 0x42, 0x4}, {&(0x7f0000000200)="43b28fee23c958bd3ff3745628dafe9c93e71f53aa2fdd44ec1b402445de084079961ba590072ff61f0f60f55fd5d9a653520c18978a519b83e0b7d17c163ae5ab717ca54d357f12fc71a953869fb40f56df54e8edfb8f7feba731ab9c302b0352f393ddeca191980267bb0cbede30456f1a60953000078bf75418883d71913dd4b0da9ee444fa08cf905a7d77cd4be8b489e6fedaecd4ecfb8a857f4bc4f06e15b72023", 0xa4, 0x3b}, {&(0x7f00000002c0)="604a7668f8e5b351829e7b51", 0xc, 0x3}, {&(0x7f0000000300)="19679f1b81b68ea84759cd2b7e5001c4a65822e79deed7c5eabb7b676e80b531ac13574fd40e331811ed6b16de23129d7fe98793323e7b2ed7615a7159c8e2f081acba5ab23aa7da9a90e6cc4d1da284e30e10cbbd4d0927225cfa0b32deabbe8af6647d71d03ffc7342accd039bc63c19f1dc6f68be9bc4c54758e074a16c4216b961dbdc0ef8f18f5b0f3a2eeb26dd2ebffc", 0x93}, {&(0x7f00000003c0)="2249d0daf954076e8ed02d9ff1", 0xd, 0x5}], 0x4000, &(0x7f00000006c0)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB=',huge=never,nr_inodes=kO,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nr_blocks=5%282,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',fowner=', @ANYRESDEC=r2, @ANYBLOB=',subj_user=,hash,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c7569645a624fefdde9e550c51fc63d", @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x000000000000005e,hash,fowner<', @ANYRESDEC=r4, @ANYBLOB=',fsmagic=0x0000000000000000,\x00']) 15:41:32 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4001, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfff}, 0x8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0034d44d9c4b74eae55aa9f41767d62f3e43a7746b678fc14ccc4ed677e985"]) 15:41:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x4e180, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x140d, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000040) r10 = socket(0xf, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r10, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xdc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4d91}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) sendmsg$NL80211_CMD_START_SCHED_SCAN(r10, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xe8, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x98, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="5d95a5b150733cab44"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, @random="6913a8f89b74775d9526a6c057ffa9948ce88334a3d741"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5018d7955a82"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x101}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_5GHZ={0x8}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) 15:41:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f7e02"]) [ 635.700439] print_req_error: I/O error, dev loop4, sector 16 15:41:32 executing program 3: accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @default, 0x0, [@rose, @bcast, @default, @null]}, &(0x7f0000000080)=0x40, 0x80800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f696e6c696e655f64d06e7472792c203229e01b0dd7198404e986badd4001169265ec0a90f086d9c60f180f7f051f85d66862f0992d92a09b99a40f1d181b11c497951c23416b8e497df6f2ef77c1f63a072de0bed13e8f4353c3b2d11fdeb0d5d716bd25ff4b2e3b915acd72fbe3e2bbd4b6a9aff9de965c7382c9586a1fe7f312ca93928845e81a381f54c6aaeec61a97ea7f899eb1a96fe2cb25aa5dcd81d1c7b2f449bf34dad5e6ac733c5dee98d0b65c325e351050a1bce5923a81845680af8d20a54167a72e5f3e34714e554a2a6ae338818b4da4b83b332d03549093eb12d022bc1fda18805c96cea9b91d57d9f3bcccab29517140f49d7c17c9a3dcba0eaf6c3d223a72f6b8bfafdd1937720a503c7bf2563aab086046fcec83e3d89c4c000000000000000000060000000000000e29cabe6fa745cf54681e1771f4d47729261a1dd90e502276aeaee02f58a476b8866d44c489b0cfda09ce2f60b855e4c65e03f5c89a69184b527a849517af9528a6be9fc75c7df857a80e23e648619d470c99abc257d6fcaa4cfa72a0c0d44a8a9853f910a32a0d12e2a1057d6a096e8e6428ab0e653569f3fda1fec017231c174d2056499a90b764afe3cb0590ffba05f117abf09e17cc449a52f6"]) [ 635.790468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f696e6c7c6f00000000d33c00728eaa121e536cf13eec0bd58b5adf808b31d7f73c9b3ea0d4995dc5dc646125d7a146dc69b7d6f56b08cd11b2429e2b9fb55103bd363e00d366ec04d8147fc3b5690daa55e8ea8a5c5cd7eda4fc788962c44615d765ebe4e94e7e6eb7e545c6392bb4e814c5a41fdc40b8728ec6a9bc9d3e9d731dacf4f5988f8f1b15bc984c78e85c80827114b5fe362e0c9891fb12e61bede3ad71f4a9c2b7928a8683ddfb252f357ce49ac5704dc8281da56ce5a24e7456dfdcee6c0f614a5d70354104a22fec192290"]) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000240)="09d7af9c0357f4ccf78c4d5538e53231d138dd6e7446ad3206958045b9c0159771daa38ccf7116734aa413dd7ecb253f578f58082a736e7f961a5334982da96543ad42ef7a94be6273dd0eea4afa9a0ae3332657b5d32c2b9dc9c3133c5161db559d71b8d09858f244b91615b548f8b4ae8be6ff35b366cd777273c33b9112fc2e76aa9b92863add8db6752c7a32a066d961ecf4c8bdee6b41c11474bad9ece9c431f601ac503c67facc49c73e2f3274a135ca4c50a7d3c268a37ee619109560d4c32ade4b51", 0xc6) 15:41:32 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x7) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x248000, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000280)={0x1, {0x6, 0x9e19, 0x371b, 0x4, 0x8}}) 15:41:32 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x4c, 0x200, 0x2, 0x8, 0x4, 0x0, 0x9, r5}, &(0x7f0000000100)=0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r7 = dup(r3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000940)={0x0, 0x1, 0x10, 0x4, 0x7}, &(0x7f0000000980)=0x18) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r6, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r11, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 635.940353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.974287] xt_conntrack: cannot load conntrack support for proto=10 15:41:32 executing program 3: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xb4, "a81715496cc76a39a3553c5ac6d95bf2bb47d72af15415fece631dd0ab5d500d8ea79815432df6c3a305e477435bd8b6437466b0656fd5eff7383c7acfa7e5ab6933b23749981ff7d4f05c17cc3fd7e249a63729f845c568de5c4c36dbfc4d2baa16880730094cbb41b663e33a1a1c5c94394561eba9aa90f7458cce987a8355c3f2cd88e4a539f360b11b1b3f43ec4c4019e766f1dc367b5f1a6dc4e2917a095162ccfbbcbb8dbbc2f1279d57d9377e28bee645"}, &(0x7f0000000180)=0xbc) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x800, 0x800) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffc000/0x2000)=nil}) r2 = syz_open_dev$vcsn(&(0x7f0000001440)='/dev/vcs#\x00', 0xdf8, 0x400400) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000380)) 15:41:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:41:32 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}, {@adaptive_mode='mode=adaptive'}], [{@obj_role={'obj_role', 0x3d, 'f2fs\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsroot={'smackfsroot'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, 'noinline_dentry'}}]}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) r3 = dup3(r2, r2, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000080)={0xbc, &(0x7f0000000240)="33e8f7754a0b2f7b9e7ff8ad5729c15f45d04cff9d8579b3d0ee5e470964f1d0abb7ad6f0cc74513a76a66db4205745dcc393a92233aa746df0b10db6c4a72c23b0a70a6772079e7227968369ea0dfdd399f24fce45953dc4983b515f09e1ddc1365b40195de6f25cdfdf6ecff20e57c2b6590d44a6cdf683b232e0177acc7dccb8baf607b3a9d7ad49ad68d004994700bceb5efa40dc744998c4324a904dffbcf624f10ba84d2c10504ef9f00e3eed9e6917751a18a4b2cf74453c1"}) [ 636.249723] f2fs_msg: 253 callbacks suppressed [ 636.249747] F2FS-fs (loop5): invalid crc value [ 636.267633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.309012] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 636.329012] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 636.370946] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.390251] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 636.412346] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.422192] F2FS-fs (loop5): invalid crc value [ 636.425133] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 636.445752] F2FS-fs (loop4): Unrecognized mount option "noinliney" or missing value [ 636.465798] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:41:32 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000440)=@ctrl_frame=@bar={{}, {0x1}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0xb, {0xd, 0x4}, "bd7feecbb380cbdf"}, {0x0, 0xe, {0x9, 0x5}, "194a9b6ce2e51fb6"}, {0x0, 0x1, {0x8, 0x2}, "c017dcfd02b5e27d"}]}}, 0x36) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) 15:41:32 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x10080) 15:41:32 executing program 4: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000040)=""/8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000a004e2200001a15fe8000000000000000000000000000aa2d0600000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000070000000a004e2400000401fe8000000000000000000000000000aa0100001a0000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000300000000000000000a004e2300000000fe88000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20ffff0001fe8000000000000000000000000000bb05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23ffff7ffffe8000000000000000000000000000aaf9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2480000001fc020000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000007ffffc0100000000000000000000000000013f000000000000000000000000000000000000360a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e68d570600000000000000000000000000000000000000000000000000000a004e2300000007fe8000000000000000000000000000bb0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000263efc85dfa8cb6e0a1b2a181978fb2a2eca5ea34d91f30b06f0414a9da5c671ca8edab84a8ce3af0739335b9e179fe444d17b8951c5ea766d3cde8067f0a26bc0f58570ecc9260a47f60c1b9caf17a2179a3e8786bc96091832d427cb358ad971cec9818df0fb9a2263c0641693e42a0730be73f92ff11cc04d20461e14b1ec6c92169fdda7c9e61e0d4bfdf8562b8b65c8b3f6fc619270577500a76e2fa2f38325f0543f4b103ee3cfcdf2469a5e85fceb5ab54dcaf84843cef9b0590b51468f62bcff63c02ae26f6ac533a32c4f2e45b831c6c2bfdc026f8d"], 0x410) 15:41:33 executing program 3: lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '.\\\x00'}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e92a430cc92496f696e6c692e655f6465"]) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3) 15:41:33 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ec0000030200000009c647a2c003edfef09eeeb52ed01618189b98b37902fdcc9b37ea98cf4f316073ebe9aeb5155be2bf9085d2cb"]) [ 636.645932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.664429] attempt to access beyond end of device [ 636.700686] loop4: rw=12288, want=8200, limit=20 [ 636.723924] attempt to access beyond end of device [ 636.753054] loop4: rw=12288, want=12296, limit=20 15:41:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)={0x1, 0x2, 0x2}) [ 636.777164] attempt to access beyond end of device [ 636.780218] xt_conntrack: cannot load conntrack support for proto=10 [ 636.796364] loop4: rw=12288, want=8200, limit=20 15:41:33 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600002}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x28, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/16]) [ 636.826527] attempt to access beyond end of device [ 636.852436] loop4: rw=12288, want=12296, limit=20 15:41:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000240)=0x7fffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r7, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1171790de710"}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x388d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 636.888082] batman_adv: batadv: cannot create tp meter kthread 15:41:33 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r0) [ 636.941432] xt_conntrack: cannot load conntrack support for proto=10 15:41:33 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)={0x1000, 0xf42, 0x8001}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x20022, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x1, 0x1, r0, 0x9, 0x9, 0xffff, 0x400, 0x0, 0x6}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x44804) 15:41:33 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x9, 0x9, 0xfff7}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x3, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f8) [ 637.016918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:33 executing program 3: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/52) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x490880, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x164560, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x4400, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180)=0x2) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={[{@noinline_dentry='noinline_dentry'}], [{@smackfshat={'smackfshat', 0x3d, 'f2fs\x00'}}]}) [ 637.104232] attempt to access beyond end of device [ 637.109624] loop4: rw=12288, want=8200, limit=20 [ 637.158657] attempt to access beyond end of device [ 637.171883] loop4: rw=12288, want=12296, limit=20 [ 637.195993] attempt to access beyond end of device 15:41:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x149, 0x1400}], 0x2000001, &(0x7f0000000140)={[{@prjjquota={'prjjquota', 0x3d, '-%]'}}]}) [ 637.213795] loop4: rw=12288, want=8200, limit=20 [ 637.224365] attempt to access beyond end of device [ 637.236814] loop4: rw=12288, want=12296, limit=20 [ 637.247484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000040)={0x8, 0x4, 0x24d, 0x1, 0x0, [0x6, 0x1, 0xc962, 0x7ff], [0xc0000000, 0x2db5, 0x9, 0xfffffffd], [0x6b7d, 0x367b, 0x446, 0x8], [0x1, 0x9, 0x5]}) [ 637.321272] attempt to access beyond end of device [ 637.329569] loop4: rw=12288, want=8200, limit=20 [ 637.356347] attempt to access beyond end of device 15:41:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7472dd792c00"]) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3f, 0x101000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x101000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0x2e07e6ff, &(0x7f00000002c0)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="53d72e391c889c6b984f85b11094d719af689fda460b1e00cb5651d909b09c843b905d99c6f932f9213a1045533b68000c72528e5c07626a80a54b7547f1ff7ac965f7bc98de50b8fff6c97585d04d0da6218d7d5c3255451ec034570969247c21750fe9c55ffd21d5dfab9ff59ee6404f519071cf9611ee7437077ecd669ff50187e1c48e7e05999206e9db20e1e3b26a1e921cce7df9046dc7382613415820de79f43825af3c70517ca679e710a0e64ee96fe738564feeb4de4a20cc422668a4d94adc3e93ffcf3a0b123a5eee394ffd7ba16de560bf15", @ANYBLOB="187f22ed83f8b4afd486cc4001e5d779087d1f", @ANYRESHEX=r1, @ANYBLOB=',afid=0x0000000000000006,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB=',cache=fscache,noextend,seclabel,func=PATH_CHECK,obj_user=noinline_dentry,\x00']) [ 637.386985] loop4: rw=12288, want=12296, limit=20 [ 637.433168] attempt to access beyond end of device [ 637.457799] loop4: rw=12288, want=8200, limit=20 15:41:33 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x105200, 0x0) [ 637.483446] attempt to access beyond end of device 15:41:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x40002) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 637.505203] loop4: rw=12288, want=12296, limit=20 15:41:34 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e65b664656e7472792c00"]) [ 637.614158] attempt to access beyond end of device 15:41:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="050000004b78fe09000000000000000cadf4032cff27", 0x16, 0x3f}], 0x0, &(0x7f0000000140)={[{@user_xattr='user_xattr'}], [{@measure='measure'}, {@smackfsroot={'smackfsroot', 0x3d, 'user_xattr'}}, {@subj_role={'subj_role', 0x3d, 'user_xattr'}}, {@appraise='appraise'}]}) [ 637.642693] loop4: rw=12288, want=8200, limit=20 [ 637.657575] attempt to access beyond end of device [ 637.678064] loop4: rw=12288, want=12296, limit=20 [ 637.694685] attempt to access beyond end of device [ 637.725598] loop4: rw=12288, want=8200, limit=20 [ 637.735176] attempt to access beyond end of device [ 637.764178] loop4: rw=12288, want=12296, limit=20 [ 637.832679] attempt to access beyond end of device [ 637.847789] loop4: rw=12288, want=8200, limit=20 15:41:34 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noinline_u\f\x00\x00ry,\x00']) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400e40, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)=0x10001) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x9fe324bfe23cf850, 0x0, [0x81, 0x8, 0x200, 0x2]}) [ 637.876648] attempt to access beyond end of device [ 637.886435] loop4: rw=12288, want=12296, limit=20 [ 637.898902] attempt to access beyond end of device [ 637.903901] loop4: rw=12288, want=8200, limit=20 15:41:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x35}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000002) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8077}]}, 0x30}}, 0x14084) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r12, @ANYBLOB="0a00090003009400000000000800d8612c0e398b6a42a39e46aaf10bcfcaad55062391e771aee06fe97fbd2c66ccd4e2f86d667a237a69e514ad71a27f73392ce3be9e305889dc038864b46f520a2bd8861bc1c678461899823aa909825c00fa2895eb5b0a663fd661571fe5abd4e65c7f834eed750ff41431874b565d80413344e406d9aa159548cbf401f38b51642c5de85f45748e47a1c98fc3e68b4eed7b4f392385bed937"], 0x30}}, 0x0) [ 637.941882] attempt to access beyond end of device [ 637.955955] loop4: rw=12288, want=12296, limit=20 15:41:34 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r0 = socket(0x2, 0x2, 0xfffffffd) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, r1, r3) setreuid(0x0, r3) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1a1e004, &(0x7f0000000180)={'trans=unix,', {[{@access_uid={'access', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@smackfsroot={'smackfsroot', 0x3d, 'noinline_dentry'}}]}}) [ 638.044210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.072044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.094206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.112113] attempt to access beyond end of device [ 638.113197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.117077] loop4: rw=12288, want=8200, limit=20 [ 638.117167] attempt to access beyond end of device [ 638.158280] loop4: rw=12288, want=12296, limit=20 [ 638.163713] attempt to access beyond end of device [ 638.171859] device bridge_slave_1 left promiscuous mode [ 638.177437] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.185590] loop4: rw=12288, want=8200, limit=20 [ 638.195001] device bridge_slave_0 left promiscuous mode [ 638.205350] attempt to access beyond end of device [ 638.209671] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.218284] loop4: rw=12288, want=12296, limit=20 [ 638.226332] device veth1_macvtap left promiscuous mode [ 638.238763] device veth0_macvtap left promiscuous mode [ 638.248992] device veth1_vlan left promiscuous mode [ 638.254110] device veth0_vlan left promiscuous mode [ 638.282548] attempt to access beyond end of device [ 638.288841] loop4: rw=12288, want=8200, limit=20 [ 638.305619] attempt to access beyond end of device [ 638.327206] loop4: rw=12288, want=12296, limit=20 [ 638.343103] attempt to access beyond end of device [ 638.358387] loop4: rw=12288, want=8200, limit=20 [ 638.379772] attempt to access beyond end of device [ 638.395770] loop4: rw=12288, want=12296, limit=20 [ 638.520883] device hsr_slave_1 left promiscuous mode [ 638.542223] device hsr_slave_0 left promiscuous mode [ 638.578719] team0 (unregistering): Port device team_slave_1 removed [ 638.602005] team0 (unregistering): Port device team_slave_0 removed [ 638.623609] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 638.651191] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 638.717157] bond0 (unregistering): Released all slaves [ 642.457079] IPVS: ftp: loaded support on port[0] = 21 [ 642.772599] chnl_net:caif_netlink_parms(): no params data found [ 642.864160] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.873941] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.882944] device bridge_slave_0 entered promiscuous mode [ 642.894607] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.902623] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.913928] device bridge_slave_1 entered promiscuous mode [ 642.944460] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 642.957650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 642.993101] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 643.001842] team0: Port device team_slave_0 added [ 643.007778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 643.020165] team0: Port device team_slave_1 added [ 643.050517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.057196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.086226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.102690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.109412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.139202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.152706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 643.161961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 643.200425] device hsr_slave_0 entered promiscuous mode [ 643.206897] device hsr_slave_1 entered promiscuous mode [ 643.215895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 643.225077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 643.356168] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.362642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.369372] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.375769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.437729] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 643.446263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.460602] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 643.473044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.482171] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.492758] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.505919] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 643.516432] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.532557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.542282] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.548944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.571384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.583270] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.589759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.616202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.631561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.643404] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 643.654453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.665075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.676463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.687478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.706748] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 643.716086] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 643.727227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.737745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.752644] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 643.763821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 643.775831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 643.789712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.879725] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 643.891448] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 643.903451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 643.934382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.058801] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 644.066185] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 644.112828] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 644.129089] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 644.156299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 644.168994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.183150] device veth0_vlan entered promiscuous mode [ 644.206942] device veth1_vlan entered promiscuous mode [ 644.223222] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 644.242557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.250407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 644.268326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 644.289135] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 644.319165] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 644.340782] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 644.348993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 644.356940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 644.368857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 644.379201] device veth0_macvtap entered promiscuous mode [ 644.385377] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 644.399457] device veth1_macvtap entered promiscuous mode [ 644.405876] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 644.442490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 644.465477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 644.488248] Bluetooth: hci3 command 0x0409 tx timeout [ 644.489513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.528385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.537544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.567782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.576970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.607788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.616975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.627681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.640950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 644.652765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.667564] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 644.675366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.686827] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 644.695367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 644.722452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 644.742469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.753889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.769873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.782881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.794520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.808694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.821048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.832531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.843181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.853144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 644.864975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.876544] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 644.884527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.892366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.902103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 645.102129] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 645.112044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.134132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.175279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 645.198568] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 645.215077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.222806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.241951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.307368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:42 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x9, @empty, 0x6}}}, &(0x7f0000000100)=0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x0, 0x2, 0xe2}) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000180)=0x1) 15:41:42 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:42 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noin\x00']) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x20, 0x480, 0x690, 0x360, 0x5, 0x32, 0xf, 0x2, {0x5, 0x2}, {0x9, 0x9}, {0x0, 0x7}, {0x10001, 0x4, 0x1}, 0x1, 0x0, 0x4, 0xffffffff, 0x1, 0x8001, 0x7, 0x4f, 0x2, 0x1, 0xfffff8d5, 0x22, 0x9318e90240fe8c36, 0x2, 0x0, 0x7}) 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r5, 0x7, 0xfffffffc, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x30}}, 0x0) 15:41:42 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0x7, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000003c0)={r2, 0x15}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000680)={r2, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) fcntl$dupfd(r0, 0x406, r1) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 645.625532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:42 executing program 3: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000280)=""/125, 0x7d, &(0x7f0000000300)=""/132, 0x2, 0x3}}, 0x48) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="5f14eeec3778ffbe7dd82fc223769a86bf1d1e925bf1d662d0295114ae0b403e13aa4b34978f4f985c682bcde3ddfa02aaadf13b80327d9262d4e45f28b2105b57ba54e8446bdc356e50f5827e3750377bf9e58f22d37dcac62d749622d38799ba7a0071242b4b9b46692f57dd08b5e3d0e30ea01b60c4ddb2ffcd47a55ca6d421b3c2f2ac35ae71dc", 0x89, 0x2}], 0x0, &(0x7f0000000080)={[{@noinline_dentry='noinline_dentry'}], [{@subj_user={'subj_user'}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, 'noinline_dentry'}}]}) utimes(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0xea60}}) [ 645.721724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.746656] f2fs_msg: 100 callbacks suppressed [ 645.746666] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) [ 645.787902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 645.822781] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.823183] F2FS-fs (loop4): Unrecognized mount option "noin" or missing value 15:41:42 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noioline_dentry,\x00']) [ 645.850837] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 645.861705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 645.865769] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a003f4e020000000000000008000b0004000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 645.906067] F2FS-fs (loop5): invalid crc value [ 645.925788] F2FS-fs (loop4): Unrecognized mount option "noin" or missing value [ 645.941162] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 645.945967] xt_conntrack: cannot load conntrack support for proto=10 15:41:42 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0xfffffffffffffed0, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) membarrier(0x40, 0x0) [ 646.033687] xt_conntrack: cannot load conntrack support for proto=10 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x352e, @private2, 0x8000c12}, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x9, [0x9, 0x8, 0xc552, 0x10000, 0xd7, 0x5, 0x4, 0xbb99]}, 0x5c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:42 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f696e6c696e655f648defb7c0656e7472792c00201402ec5c61addf2a2ec2f54c2e7c600e5f5c5e7fc4b804000000f91969be01fa7fe712056ecdbef3d8db279d0e4fcb"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) [ 646.089858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:42 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) socket$nl_xfrm(0x10, 0x3, 0x6) 15:41:42 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000480)=0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xcb, 0x1, {0xffffffffffffffff}, {0xee01}, 0x9bf, 0x9}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000000280)="00000000000000000000000000000000000000000000000000000000c889421e639f6082f7d794f6cf1b71cee531736bdd2080dbaca497bba08cde3704fcffffffffffffffca39ec6098568716ed19c6096af7bc1bc288b12516a34cc52d3cc9af660af32659477bc378076dc64fc4aa5d56329928cc37aed112b35da28f494a45ddb043b16b1766d00da280bdf5acf225a3e4d0ade8714f69a70b23de27f2484c9cdb9d315eb341a0445bdc6b8bc6bb50eb0620326c6910273afc03d70000000000000000000000000000000076c111e90cc9060b7c7128c6c66eece754fd58185589f0883f4b0f1fa331c691e26ba1a2e0c774892b", 0xf6, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB="736d61636b6673666c6f6f723d66326673002c646f6e745f61707072616973652c66736340606f6e746578743d73797351036d5f752c666f776e65723d", @ANYRESDEC=r0, @ANYBLOB="2c667375756964e882af8d94030b3d32493939623738c1ac9577b7cc43b8240d51726a0a0932372d3534601fc0fbb392a822e66b01abe2e64cadc53f03f5debd35ed5054130ce6a370e7c939ea3bf8038e1466b9f5ec67c1c43eccf6e3dd4e508c2cac9e68b7c4eb24218e182d647d405c246b63e622f97d357247c95f"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x1f, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r2, 0x4) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getregset(0x4204, r3, 0x4, &(0x7f00000006c0)={&(0x7f0000000380)=""/242, 0xf2}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x5, 0x80}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30ff0000", @ANYRES16=r6, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r5, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 646.234980] batman_adv: batadv: cannot create tp meter kthread [ 646.277026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ptrace(0x10, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xf) 15:41:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x7, 0x1, 0x0, {0x2, 0x3}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffef}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:43 executing program 3: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="10378a19cee67e20f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00b1eb0200000002000000020000008200000016000000000400000004000000080000000c00000010000000140000030000", 0x69, 0x617b}], 0x0, &(0x7f0000000040)={[{@data_flush='data_flush'}]}) [ 646.541288] batman_adv: batadv: cannot create tp meter kthread [ 646.567747] Bluetooth: hci3 command 0x041b tx timeout 15:41:43 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES64], 0x1f0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000080)=0x6, 0x4) open$dir(&(0x7f0000000040)='./file0\x00', 0x101b00, 0x5) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000240)={0xfffffffffffffff9, 0xffffffffffffffff, 0x949d}) 15:41:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 646.623521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.731742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0xd9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c28d8347f69ee97e5000000010000000000000000400000000000000b0000001e0019000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000440)='g', 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000500)="45dbacbf5eaa793c5637258f99d9380bf93d3300034dbbef9373996f", 0x1c, 0xfffffffffffffffc) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000680)='/dev/nvme-fabrics\x00', 0x101000, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x0, &(0x7f00000006c0)="7c9abbffe769068e6c835bdb137801ba939507764e85f3b1c0a8", 0x1a) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r3, r5, r4}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={'cmac(tnepres-generic)\x00'}}) r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r7) setreuid(0x0, r2) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}], {0x4, 0x1}, [{0x8, 0x2, r8}, {0x8, 0x4, r10}], {0x10, 0x3}, {0x20, 0x6}}, 0x3c, 0x2) fsync(r0) 15:41:43 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0x0, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x3c}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:43 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vmci\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x3) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000100000000b00158b1e00004a415cabf812bd83063d000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002c484f81f24190df7e2f0d2befbd31ab0c0c908146731a8a3e0472cf293240023e814e355c6f5a51063741a6a7645c589ebcee378131782b9187a94e797b318b8cee92b09d0058e81212d1e4e3185456984eef410c020c6edef5ba2a5c1ef8926eafd786a47ee46824a5a66548eaf8ccb35855fdb46453873986241af0181b28ac4bee98c", 0xf7, 0x80013ff}], 0x1802028, &(0x7f0000000040)={[{@noquota='noquota'}]}) [ 646.983872] xt_conntrack: cannot load conntrack support for proto=10 [ 647.020889] print_req_error: I/O error, dev loop4, sector 16 15:41:43 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000f8e8000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000040)="e55c4e366ac94a97f47ace6df3d0248871314006b00241475d06b0ceb5535e8be1bacd2aecfa408682c23804942ede40bf9261aa90238f136de0f7b7cd7215d206aa196338be252e168c923dfc3067b636a3e6eddfcc77f89cff5c78630781", 0x5f, 0xfd}, {&(0x7f0000000340)="68fa909fd2df9ef817578a9f52fd78488303da642554dbd9a301fe6b1bc3185e6724d474a802e529cf72a7cb46b135975c69058c6db573fff1093a5aff8e5a8f39e40fb7111f1cfc71ba16f232e4", 0x4e, 0x101}, {&(0x7f0000000240)="3e84b109099ae5018774806f061aa7813d8a2ee7e1563c6d9264b7e1a4658b33c848425ce5c88d00864429baf3edbc39452adee5d59e3e33d1a067b8c6649d0a8b3182ccb82d274538fd1168e61f8075429965132ef819a92288ab2346a1dbee90e1226f88ab5d13a26052d774143371080fbc7a4193bcdd70d51669fb6fb7a86cccf7974dc707d0483745e4a3f34ec2581df5435aba8a0b1d1388239b7674cca75ce26ab888488ce0d3aa6a4a6ec24665414b59a8e581f2d2f50a34f84c0a47f6d32ee8dada838e93ba0fc467", 0xcd, 0x8}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7b25e4ff90b7a0be705fc4"]) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x105000, 0x0) ioctl$CHAR_RAW_SECDISCARD(r2, 0x127d, &(0x7f0000000400)=0x4) fanotify_mark(r1, 0x8, 0x301c61d807905bcf, r0, &(0x7f0000000200)='./file0\x00') [ 647.045167] xt_conntrack: cannot load conntrack support for proto=10 [ 647.059569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:43 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00e71c57afe3ac9274e0bb2af3cbbe2d177c71629da0ab770f7ff299b240174b589062e0ab1c2bc08097ef498b123ea4e4056587483c90323b722de311cd91f156fbba0d79e0ac1094a960bdcc3eb4e533a1b83387948a796ec7425425b255910325b8a649e1d341e41787320547587aea0921260ebb6771b6a09d05"]) 15:41:43 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x208040, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@private, @private, @loopback}, &(0x7f00000002c0)=0xc) 15:41:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') getsockname$tipc(r1, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x161102) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x30, 0x20, 0x4, 0xdd}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f00000001c0)={r11, 0x3}, 0x8) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 15:41:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x808400, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:43 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) 15:41:43 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, [], [{0xffff, 0xfffffffa, 0x1, 0x2, 0xfffffffffffffffd, 0x400}, {0x80000001, 0xf88, 0x9, 0x8, 0xe, 0x6}], [[], [], [], [], [], []]}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x8, 0x5, 0x5, 0x6, 0x7, 0x2}) [ 647.253354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07000020000000000009000000180800030064a7fe421a495fe237acd18de89ef5860f9f449be5cf2b0942ae9ed4a6fa225f7b2283d6e1d433cd390fd629572f46556ab0ec21e8124a18b3303c6ebe4f9b45148b2fd577991dc0ed3d8d3922f3935b164271425672a3f1d5ebc1a95fab30910620b1ce3abcfd0a84ce18f877728d1340a918b5496d81a65bc021e26bde43dcb5003f6b921094311a58aa0427ba3762c4dac61e00f731e44a6f719f0e3cc2cdeee91b1cb15764bd499230eca0020513c44454cdfac3172dfef0722dc8f80210a9d0cbe9063a78e232be2ac5d300000000000000", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ff010100000000417700", @ANYRES32=r7, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 647.318142] attempt to access beyond end of device [ 647.333769] batman_adv: batadv: cannot create tp meter kthread [ 647.343752] loop4: rw=12288, want=8200, limit=20 [ 647.362937] attempt to access beyond end of device [ 647.382609] loop4: rw=12288, want=12296, limit=20 [ 647.393606] attempt to access beyond end of device [ 647.404250] loop4: rw=12288, want=8200, limit=20 [ 647.416492] attempt to access beyond end of device [ 647.426327] loop4: rw=12288, want=12296, limit=20 15:41:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x7e, &(0x7f0000000000)}, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2c, &(0x7f00000001c0)="496f3c0790d24c2c5069ec52c6df4d7b3e4cff01395a1af90324bdac2a6506e043e55ea04a8112c9b73af635718b72182b056afb468b432a0a1e4e262d", 0x3d) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000008a7088090000000002030000", @ANYRES32=r4, @ANYBLOB="0a2109080000008eff00200008000b0000000000"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000380)={'batadv0\x00'}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x3f, &(0x7f0000000100)=0x4) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000200)=""/180, 0xb4, 0x42, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="722dfe18", @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32, @ANYBLOB="0a00090003000000000000aad4e64aece72979ab69751cfc86a2e53f95e5b7179545b637b5ff7be6932a062678f7f8a1ec7758209b7456a0e716dda18ead73715e1472c58ed0058bf6fd68b4fbd9e8e8537cbf25fef7bffb64893762d6ac960d26684c8735eef4dc0f2ce35e5888fdf4e71f56d88938a2dd5edfc18f8bfc"], 0x30}}, 0x0) [ 647.431814] xt_conntrack: cannot load conntrack support for proto=10 15:41:43 executing program 3: write$usbip_server(0xffffffffffffffff, &(0x7f0000000180)=@ret_submit={{0x3, 0x1, 0x0, 0x0, 0x20}, 0x71a0, 0xec, 0x5, 0x3b3, 0x8, 0x0, "e88a7531ab509627ce57279e55a87ed7e841e6c33cddf672fe04201f8b0b6b75df386498d31b48749547690be4a67498361abe2888d1a9238e2fa5743e660e4cd03bfae741d8c4fc57c452860b5aecf6eb193fac502caba8abc412e8e86d9388b961def1369ba6506763610b23599e7e44e9dc1eb9cab5dc37ad13041c16425018bad959be482fba9739bafeb183d9c8a03a880c2755edb7b05570faf5b8115453f22bfb00cf8a3cf93217766af92dd1a2dae841bf814a53d3537b46d3b68d84f44b97fcc4460eb53b1960a30653961cd643b2ccd6831837649407144f53b865bccafb050d31d49b064fb4fe", [{0x8001, 0x3, 0x6, 0x24c}, {0x0, 0x0, 0x8000, 0xffff}, {0x0, 0xe5ea, 0x7ff, 0x2}, {0x4, 0x7, 0xffff, 0x4}, {0x8894, 0x81, 0x3, 0x20}, {0x0, 0x1, 0xfff, 0x20}, {0x4, 0x1, 0x3}, {0x3, 0x0, 0x5e0, 0x1}, {0x0, 0x0, 0x8, 0x1000}, {0xed65, 0x6aa, 0x4, 0x1}, {0x9a2, 0xbc4, 0x10001, 0xffff}, {0x5, 0x64, 0x4, 0x88de}, {0x3, 0x4, 0x4, 0x1000}, {0x7, 0xf7}, {0x9, 0x0, 0x1000000, 0x7}, {0xe3ed, 0x7, 0x20e6, 0x2}, {0x1, 0xa133, 0x0, 0x6}, {0x3, 0x1, 0x0, 0x4}, {0x10fa, 0x10001, 0x86, 0x81}, {0x20, 0x48, 0x83, 0x7}, {0x3f, 0x1, 0xf142, 0x9}, {0x0, 0x2, 0x5}, {0x7, 0x1, 0xc2, 0x3ff}, {0x641c, 0x1, 0x80000000, 0x10001}, {0xc, 0x0, 0x7fff}, {0x800, 0xc2fb, 0x2, 0x50eafd4c}, {0x6, 0x9, 0x6, 0xca}, {0x0, 0xae70520, 0x8001, 0x800}, {0x4, 0x9, 0x4, 0x4}, {0x7f, 0x81, 0x8, 0x8b4}, {0x8, 0x1, 0x8, 0x10001}, {0x0, 0x0, 0x8d1, 0x80000001}, {0x4, 0x0, 0x9, 0xffffffff}, {0x3ff, 0x3, 0x7, 0x8000}, {0x0, 0x3f, 0x0, 0x9}, {0x8, 0x3f, 0xffff, 0x7}, {0x22, 0x401, 0x23b, 0x7f}, {0x4, 0x2, 0x3}, {0x400, 0x4938, 0x7ff, 0x2}, {0x80, 0xffffffa6, 0xfffffffc, 0x20}, {0x3, 0x72, 0x4}, {0x5, 0x9, 0x6, 0x100}, {0x7f, 0x7ff, 0x3, 0x81}, {0x8, 0x0, 0x7, 0x7}, {0x1, 0xff, 0x2}, {0x8, 0x101, 0x4f64, 0xc00}, {0x10001, 0xfffffff9, 0xffffffff, 0x7}, {0x9, 0xe4d, 0x3, 0x6}, {0x10000, 0x8001, 0x401, 0xfffffffe}, {0x2, 0x10001, 0x9, 0x9}, {0x6, 0x3, 0x65, 0x1000000}, {0x8, 0x4, 0x2, 0x30000}, {0x3, 0xf7, 0x2, 0x7}, {0x5, 0x9, 0xfffffffd}, {0x8, 0x200, 0x0, 0xdbf8}, {0x8, 0x5, 0x3}, {0x0, 0x0, 0xb0f, 0x6}, {0x2, 0x9c2, 0x81, 0x10000}, {0x5, 0x1000, 0x2d88, 0x10000}, {0xdd7f, 0x92c, 0x5, 0xff}, {0xec1d, 0x8, 0x9, 0x401}, {0x80000000, 0x0, 0x1fffc00, 0x1}, {0x7fff, 0x8, 0xd7, 0x1ff}, {0x3, 0xa4, 0x8, 0x20}, {0x9, 0x401, 0xffff, 0x8}, {0x0, 0x6, 0x0, 0x7fff}, {0x20, 0x2, 0x8001, 0x1f}, {0x5, 0x6, 0x1, 0x3}, {0x2, 0x7f, 0x6, 0x3}, {0x6a5, 0x800, 0x7fff, 0x1}, {0x7, 0x8, 0x6, 0x3}, {0x1000, 0x91, 0xdc0, 0xff}, {0x4, 0x5, 0x5, 0x5}, {0x6, 0x5, 0x1, 0xff}, {0xfffffff9, 0x5, 0xffffffff, 0x1b}, {0x6, 0xfff, 0x9, 0x1}, {0x6, 0xfffffff7, 0xffffff2d, 0x7}, {0x4, 0x4, 0x10000, 0x8000}, {0xf695, 0x3, 0xff, 0x8000}, {0x800, 0x4, 0x1, 0x4}, {0xfffffffe, 0x2, 0x1, 0x15}, {0x2, 0x3, 0x0, 0xc000}, {0x1031, 0xc290, 0x1529, 0x1}, {0x7, 0x4, 0x3}, {0x8, 0x2, 0x8, 0x10000}, {0xffffff80, 0x0, 0x9, 0x7f}, {0xee0f, 0xffff65ce, 0x1ff, 0x3ff}, {0x5, 0x1f, 0xffff, 0x8}, {0xfffffe01, 0xfff, 0x1, 0x1}, {0x6, 0x1, 0x834, 0xffffffff}, {0x80000001, 0x618, 0x1, 0xe000}, {0x4, 0x8, 0x9, 0x7}, {0x7fff, 0x3, 0xf0c1, 0x1ff}, {0x0, 0xffff, 0x0, 0x2}, {0x1, 0x40, 0x7, 0x5}, {0xd3, 0x8000, 0x4, 0x7}, {0xd6, 0x9, 0x0, 0x8}, {0x0, 0x7, 0xa0ad, 0x1}, {0x6b4, 0x9, 0x2, 0x8}, {0x1000, 0x3, 0x6, 0x6f7}, {0x6, 0x7ff, 0x2}, {0x9, 0x1, 0x1ff, 0xc0}, {0x7bc7, 0x2, 0x5, 0x5}, {0x5, 0x80, 0x8, 0x5}, {0x7, 0x7fff, 0x4, 0x1}, {0x9, 0x1, 0x400, 0x5}, {0x81, 0x2, 0x7b13, 0x20}, {0x8e2e, 0x5, 0xfffffffc, 0x400000}, {0x1, 0x1, 0x4, 0x66}, {0x0, 0x3, 0x0, 0x1}, {0x4, 0x2, 0x3, 0x40}, {0x4, 0x2, 0xfffffff7, 0x30ec}, {0x4, 0x80000001, 0x7, 0x6}, {0x101, 0x6, 0x6, 0x8}, {0x40, 0x9, 0x1000, 0x81}, {0x0, 0xfff, 0x7f}, {0x4, 0xd31b, 0xfffffff8, 0xfffffff9}, {0x8, 0x1, 0x3, 0xd9d6}, {0x5, 0x7, 0x1, 0x2}, {0xe1, 0x7, 0x80000000}, {0x400, 0x3ff, 0x80000000, 0x7}, {0x4, 0x9, 0x2, 0x7}, {0x558, 0x1000, 0x9, 0x2}, {0x80000001, 0x1, 0x8, 0x3}, {0x38, 0x800, 0x8000, 0x8}, {0x4, 0x3, 0x5, 0x9494}, {0x1, 0x8001, 0xfffffe8b, 0x7}, {0x4, 0x27d, 0x9, 0x8001}, {0x1, 0x8, 0x10, 0x1a88}, {0x7ff, 0x200, 0x10000, 0xef}, {0x9, 0x7, 0x3f, 0x9}, {0x5, 0x9, 0xf1c3, 0xfffffff8}, {0x8, 0x6, 0x3, 0x200}, {0x7ff, 0x3ff, 0x6}, {0x933, 0xf4, 0x333, 0x6}, {0x1f, 0x200, 0x80000001, 0x58}, {0x7, 0x7, 0x0, 0x9}, {0x2, 0x8, 0x4, 0xfb3}, {0x52, 0x5, 0x3f, 0x5}, {0xfffffffc, 0xfffffff9, 0xa8ae, 0x6}, {0x401, 0x6, 0x6, 0xffff}, {0x8001, 0x8, 0x10000, 0x10001}, {0x8, 0x7fff, 0x8, 0x1}, {0x4, 0x1ff, 0x5, 0x647}, {0x1, 0x3, 0x1000, 0x2}, {0x2, 0x7, 0x5, 0x19f}, {0x80000000, 0x200, 0x3, 0x88d2}, {0xffff, 0x9, 0x80}, {0x100, 0x3ff, 0x0, 0x43c7}, {0x10001, 0x8, 0x9, 0x1ff}, {0xfffffffa, 0x2e2c, 0xfffff798, 0x6}, {0x1743e8d3, 0x7ff, 0x6, 0x53e1a000}, {0x10001, 0x7, 0x7fff, 0x8}, {0x1ff, 0x7, 0x0, 0x5}, {0x9, 0xa4, 0x4, 0x1}, {0x1ff, 0xffff, 0x7, 0x15d7}, {0x8, 0x3, 0x4, 0xd5ed}, {0xc8, 0x800, 0x3f, 0x1ff}, {0x8, 0x3, 0x100, 0xffffffff}, {0x6, 0x100, 0x4, 0x4fa7}, {0x4, 0xe3, 0x2, 0x5}, {0xe9, 0x3, 0x0, 0x1}, {0x40, 0xfffff000, 0x80000001, 0x7fffffff}, {0x0, 0x0, 0x4}, {0xffffff01, 0x2, 0x3, 0x5}, {0x80000001, 0x4, 0x3f, 0x1}, {0x5, 0x6, 0x0, 0xfffffffd}, {0x6, 0xfff, 0x1, 0x81}, {0x7fff, 0xfff, 0x9, 0x413}, {0xfffffff9, 0x2400000, 0x3, 0x1ff}, {0x800, 0x81, 0x9, 0xfff}, {0x7, 0x20, 0xfffffffe, 0x800}, {0x5, 0x8bbd, 0x9, 0x97}, {0x8, 0x4, 0x4, 0x41cd}, {0x4, 0x7b6, 0x7f, 0xffffffff}, {0x2, 0x2, 0x9}, {0x9, 0x401, 0x9, 0x2}, {0x798, 0x4, 0x8001, 0xf2}, {0xfffff670, 0x1f, 0x0, 0xffffffff}, {0xffffff7f, 0x800, 0xffffffff, 0xfffff40b}, {0x9, 0x8, 0x383}, {0x100, 0x5, 0xdd4}, {0x80000000, 0x7, 0xa6c7, 0x1}, {0x10000, 0x2, 0x5, 0x1}, {0x2, 0x3, 0x9, 0xffffff55}, {0x1, 0x34ff8b93, 0x83, 0xffff4994}, {0x1, 0x6, 0x0, 0x1f}, {0x0, 0x8, 0x13de2703, 0xeb}, {0x5, 0x4, 0x4, 0x3ded4fde}, {0xffffffff, 0x7c90, 0x0, 0x5}, {0x384, 0x59da, 0x7, 0x2}, {0x7, 0x8, 0x7fffffff, 0x1}, {0xf4e, 0x1f, 0x9, 0x3}, {0xc0, 0x401, 0x2c0bdc53, 0x6}, {0x3, 0x0, 0x8, 0xfffffffa}, {0x20, 0x1, 0x80, 0x10000}, {0x9, 0xfff, 0x80000000}, {0x2, 0xfb1, 0x5, 0x916}, {0x8, 0x7, 0xbf41, 0xbd9c}, {0x48, 0x0, 0x100, 0x7}, {0x4, 0x4, 0x101, 0x360}, {0x2, 0x3, 0x9, 0xfffffffb}, {0x0, 0x8, 0x40, 0x1ff}, {0x3, 0x852, 0x5, 0x8}, {0x81, 0x64, 0x0, 0x80000001}, {0x0, 0x7, 0x5}, {0x9, 0x7eec, 0x5, 0x5}, {0x18000, 0x0, 0x100, 0xff}, {0x20, 0x4, 0x80000000, 0xa3}, {0xfffffff7, 0x8, 0x3bf7, 0xc7f}, {0x592, 0x0, 0x10000, 0x400}, {0x7, 0x4, 0x8000000, 0x8}, {0x9, 0x3, 0x581f, 0xc13}, {0xff, 0x73b2, 0x1, 0x5}, {0x7, 0x4, 0x833c, 0x3}, {0x7f, 0x7, 0x1000, 0x20}, {0x8, 0x61b, 0xfffffffa, 0xffffffff}, {0x2, 0x8, 0x5, 0x2}, {0x1ff, 0x5, 0x8, 0x589}, {0x2, 0xb0, 0x757, 0x1ff}, {0x9, 0x3ff, 0xffffffff}, {0x6, 0x6, 0x5, 0x4}, {0x7fff, 0x8, 0x81, 0x2}, {0x3, 0x4, 0x1ff, 0x6}, {0x4, 0x7fffffff, 0x2, 0x9}, {0x100, 0x3, 0xfffffff7, 0x81}, {0x5, 0x5, 0x580, 0x3}, {0xfff, 0x3151, 0x7, 0xfc}, {0x1, 0xfffffffd, 0x3, 0x7}, {0x7, 0x7f, 0x3, 0x5}, {0x0, 0x6, 0xff, 0x8}, {0x20, 0x80000000, 0x400, 0x29ce}, {0x1, 0x1, 0x1ff, 0x3}, {0x1, 0x1, 0x7, 0x4}, {0x6, 0xf2, 0x7, 0x53}, {0x0, 0x5d, 0x8, 0xe0}, {0x2, 0x8000, 0x6, 0x6}, {0x8, 0x6, 0x0, 0x8}, {0x1, 0xf6, 0xffff, 0x3}, {0x462, 0x6, 0x1, 0x4}, {0x8, 0x9, 0x2, 0x20}, {0x7fffffff, 0x3, 0xe0, 0x8001}, {0x8, 0x3, 0x3f, 0x9e5}, {0x2, 0x0, 0x1, 0x6d}, {0x5, 0x4, 0x80, 0x800}, {0x80, 0x7ff, 0x1, 0x9}, {0x81, 0x9, 0x481a, 0x6}, {0x7f, 0x101, 0xfffffff8, 0x40}, {0xe6ce, 0xffffffff, 0x8, 0x7f}, {0x9, 0x800, 0x7, 0xc9e5e466}, {0x5, 0x1, 0xfffff266, 0x7f}, {0x1, 0x7fff, 0x672}, {0x4, 0x8, 0x1, 0x100}, {0x20, 0x4}, {0x0, 0xfffffff9, 0x1f, 0x6}, {0x6, 0x7, 0xfd, 0x2}, {0x3, 0x80, 0x200, 0x9}, {0xfffff66d, 0x2, 0x80000000, 0x9}, {0x3, 0x7f, 0xff6}, {0x2, 0x5, 0x101, 0xdda5}, {0x0, 0x0, 0x2, 0xfffffff9}, {0x5, 0x83, 0x81, 0xb694}, {0xa72, 0x39, 0xfc, 0x94}, {0xe04e, 0x9, 0x5, 0x80}, {0x6, 0x9, 0x5, 0x5}, {0x7fffffff, 0x8000, 0x6}, {0xd46, 0x9, 0x80000001, 0x3ff}, {0xbbc, 0x6, 0x0, 0x79c}, {0x1, 0x1, 0x1, 0x8001}, {0x8, 0x2, 0x0, 0xfffffffb}, {0x40, 0x0, 0x3ff, 0x4}, {0x400, 0x46520f35, 0x7, 0x828e}, {0x6a, 0x3, 0x32, 0x63ae}, {0x4759, 0x401, 0x200000, 0x50}, {0x44d8, 0x6, 0x2bd, 0x80}, {0x4, 0x8, 0xffffffff, 0x3}, {0xee, 0x10000, 0xffff, 0x6}, {0x351, 0x54, 0x3, 0x7fff}, {0x80, 0x1, 0x9, 0x10000}, {0x2, 0xee, 0x912, 0x8}, {0x8001, 0x1, 0xa11, 0x1b30354f}, {0x8, 0x4, 0x10000, 0x6f}, {0x3, 0xfff, 0x9, 0x6}, {0x1f, 0x7, 0x0, 0xace8}, {0x4, 0x81, 0x2f76, 0x10000}, {0x2, 0x3, 0x80000001, 0x9}, {0x0, 0x3, 0x6, 0x4}, {0x100, 0x985f, 0x5bc, 0x8000}, {0x5, 0x8, 0x5, 0x10001}, {0x7, 0x40, 0x5, 0x4}, {0x6ed, 0x40, 0x8e00, 0x20}, {0x19f, 0xd1e, 0x4, 0x8}, {0x3, 0xffffffff, 0x10000, 0x8}, {0x100, 0x74, 0xfffffffe, 0x5}, {0x1, 0x1ff, 0xaa, 0x4}, {0x9fa3, 0x3ff, 0x6}, {0x0, 0x0, 0x2, 0x1}, {0x5, 0x9, 0x0, 0x7}, {0x5, 0xa8d, 0x1, 0x6}, {0x8, 0x9, 0x7, 0x7ff}, {0x3, 0xffffffff, 0x5, 0x1200}, {0x3, 0xacd, 0x38, 0x1ff}, {0x7, 0xffffffff, 0xff800000, 0xfffffffa}, {0x80000001, 0xc1d3, 0x4, 0x62e65ec}, {0x58c, 0xffff, 0x9f2d, 0xa9f}, {0x4c17, 0x40, 0x9, 0x400}, {0x4, 0xdd8b, 0x7fffffff, 0xa3}, {0x2, 0x0, 0x10001, 0x9}, {0x5, 0x7, 0x5, 0x200}, {0x101, 0x1, 0x7170, 0x6}, {0x8, 0x0, 0x3, 0x7f}, {0x5, 0xfff, 0x3, 0x7fffffff}, {0x7ff, 0x7d9, 0x2000000, 0x8}, {0x0, 0x100, 0x3, 0x5}, {0x400, 0x4c0f, 0x3, 0x80000000}, {0x20, 0x80000000, 0x0, 0x3ff}, {0x7ff, 0x0, 0xcf6c, 0x9}, {0xfffffffd, 0x6, 0xfffffffb, 0x2}, {0xe767, 0xffff, 0x3, 0xd10}, {0x4, 0x20263c3e, 0x816d, 0x2}, {0xb1c, 0x9, 0x5, 0x92f7}, {0x1000, 0x20000000, 0x5, 0x80000001}, {0x5, 0x162, 0x4}, {0x1ff, 0x5, 0x2, 0xfffffeff}, {0x2, 0x3, 0x7fffffff, 0x3}, {0x2d, 0x5, 0x7, 0x1}, {0x2, 0xb0a, 0x2, 0x92}, {0x20, 0x80000001, 0x8, 0x10000}, {0x2, 0x5000, 0x9, 0x3}, {0x6, 0x9, 0x0, 0x7}, {0x200, 0x100, 0x6, 0x3f}, {0x2, 0x0, 0x5, 0x3f}, {0xdc, 0x0, 0x1, 0xf89}, {0x80000000, 0x9, 0xc68, 0x373}, {0x80000001, 0x80000000, 0xd64d, 0x8}, {0x4, 0x3ff, 0x1, 0x3}, {0x5, 0x6d, 0x6, 0xf919}, {0x808e, 0x482, 0xfff, 0x3f}, {0x7, 0x6, 0x8, 0x9}, {0x8, 0xc00000, 0x8, 0x2}, {0x7, 0x17a, 0xd9, 0x200}, {0x4, 0x1, 0x3, 0x9}, {0x6, 0x1, 0x0, 0x100000}, {0x7, 0x10000, 0x9, 0x3}, {0x3, 0x7, 0x80, 0x1}, {0x6, 0x0, 0x81, 0x401}, {0x8001, 0xffff, 0x1, 0x7ff}, {0x5, 0x0, 0x1020000, 0xb3f}, {0x3f, 0x8e}, {0x6, 0x9, 0x7, 0x40}, {0xadb, 0x5554, 0x81, 0xff}, {0x8, 0x1, 0x5, 0x7fff}, {0x6, 0x7fffffff, 0x2487, 0x7}, {0x20, 0x8, 0x4, 0xfffffafc}, {0x7fff, 0x2, 0x2, 0xc58}, {0x5, 0x800, 0x5, 0x40}, {0x2, 0x5, 0xa2, 0x8}, {0x2, 0x2, 0x6, 0x2}, {0x40, 0x3f, 0x80000001, 0x1000}, {0x0, 0x9, 0x86e, 0x9}, {0x6, 0x3, 0x8, 0x1}, {0x0, 0x200, 0x8, 0x4}, {0x8, 0x7430, 0x9, 0x2}, {0x1, 0xfff, 0x9, 0x3}, {0xfffffc00, 0x87, 0xfffffffc, 0x3}, {0xfffc0000, 0x4}, {0x401, 0x0, 0x0, 0x401}, {0x8, 0x1000, 0x6, 0xb217}, {0x3, 0x6, 0x40, 0x6}, {0x40, 0x9, 0xffff, 0xfffffbff}, {0x9, 0x1ff, 0x1, 0xb95}, {0x80, 0x80000001, 0x3, 0x9}, {0x7, 0x6, 0xa5, 0x3}, {0x4, 0x1, 0x4, 0x1}, {0xb10, 0x5, 0x8, 0x1f}, {0x9, 0x4, 0x7, 0x275}, {0x20, 0xfffffffa, 0x2, 0x1}, {0xd43, 0x0, 0x0, 0x18}, {0x710b, 0x7, 0x8}, {0x1, 0x9, 0x1, 0x2}, {0x8, 0xffffff80, 0x84, 0x9}, {0x4, 0x9, 0x4c, 0x8}, {0x0, 0x4, 0x3ff, 0xfffffffd}, {0x3, 0xc5e8, 0x6, 0x800}, {0x9, 0x80000001, 0x800, 0x1f}, {0x80000001, 0x3ff, 0x20, 0x3a6}, {0xf1, 0x0, 0x9, 0x100}, {0x200, 0xfffff000, 0x8, 0x2}, {0x4, 0xfffffffd, 0x3, 0x7ff}, {0xffffffe1, 0x7, 0x9, 0x9}, {0xfffffff8, 0x1ff, 0x2a1, 0x7}, {0x10001, 0x6, 0x9, 0xffff0000}, {0x6, 0x80000001, 0x6, 0x3f}, {0xff, 0x8, 0x7, 0x4}, {0x4, 0x80000, 0x5, 0xfffff000}, {0x80000000, 0x8f, 0x7fff}, {0x0, 0x6, 0x6, 0x7fff}, {0xff, 0x7c9, 0xfff, 0x9a5}, {0x5, 0x80000001, 0x3f, 0x9}, {0x401, 0x9, 0x5, 0x1}, {0x1f, 0x7, 0x2, 0xf33}, {0xffffff7f, 0x3, 0x4, 0xffffffff}, {0x2fed, 0x8, 0x10001, 0x9}, {0x4, 0x401, 0x46, 0x6}, {0x800, 0x621, 0x6, 0x74}, {0x9, 0x3, 0x4, 0x6}, {0x4, 0x6, 0x3, 0x7}, {0x1, 0x80000001, 0x7c000, 0x800}, {0xff4f, 0x8, 0xc7e, 0xfff}, {0x3ff, 0x1, 0x6}, {0x7, 0x7, 0x943, 0x7fff}, {0x3, 0x10001, 0xfffffff9, 0x7}, {0x80000001, 0x4, 0x1ffc, 0xfffffffd}, {0x4, 0x4, 0x1, 0x2}, {0xff, 0x0, 0xe9e, 0x7}, {0x92, 0x8, 0x3, 0x3c8}, {0x7, 0x4, 0x6, 0x4}, {0x200, 0x1ff, 0x0, 0xfffffff8}, {0x4, 0xe0, 0x8, 0x10000}, {0x2, 0x3f, 0x0, 0x7ff}, {0x6, 0x401, 0xd07d, 0x67}, {0x6, 0x2, 0x6ce, 0x3f}, {0x5, 0x0, 0x5, 0x95}, {0x4, 0x6, 0x4, 0x4}, {0x6, 0xffffffff, 0x80000000, 0x1000}, {0x7fffffff, 0x2, 0x80}, {0x2, 0x3ff, 0x7fff, 0x4}, {0x40, 0x1000, 0x1, 0x4}, {0x3ab, 0x1bf9, 0x2, 0x6}, {0x1, 0x8, 0x0, 0x8}, {0x7, 0x8, 0x0, 0x459}, {0xf64, 0x0, 0x6, 0x5}, {0x1, 0x2000, 0x4}, {0x8000, 0x7f, 0x22c2, 0x40}, {0x4, 0xffffffff, 0x8, 0x2}, {0xff, 0x8, 0x1, 0x3}, {0x7, 0x1ff, 0x7, 0x9}, {0x5, 0x1, 0x5, 0x7}, {0x7ff, 0x9, 0x4, 0x63}, {0x8001, 0xf9000000, 0x2, 0x81}, {0x7, 0x7ff, 0x6}, {0x5, 0xfffffff8, 0xfffffff8, 0x3}, {0xffff, 0x5, 0x3, 0x3}, {0x0, 0xffff09b6, 0x81, 0x1}, {0x3, 0x7fff, 0x614c6e4a, 0x7ff}, {0x20, 0xff, 0x2, 0x3553}, {0x1, 0x7fffffff, 0x7, 0x500}, {0x8000, 0x3, 0x1f, 0x8}, {0xf8, 0x9c, 0x3d0, 0x7}, {0x4506fe67, 0x5623bcd4, 0x8000, 0x8}, {0x101, 0x2, 0x5, 0xff}, {0x2, 0xffffffc0, 0x1, 0x101}, {0x3, 0x2, 0xffffffff, 0x7ff}, {0x4, 0x5e59, 0x4, 0x3}, {0x25d, 0xffffffff, 0x5, 0x7}, {0x5, 0xa7, 0x2}, {0x5, 0x5, 0x81}, {0x1, 0xfffffff7, 0x6a, 0x5}, {0x5, 0x3, 0x5, 0x81}, {0x6, 0x0, 0xfffffe01, 0xfce}, {0x5, 0x5, 0x0, 0x200}, {0x6, 0x1, 0x8, 0x1}, {0x5, 0xfe, 0x9, 0x9}, {0x3, 0x2, 0xfffffff7, 0x1f}, {0x10000, 0xac, 0x3, 0xf6}, {0x401, 0x1f, 0x7, 0x4}, {0xab2c, 0x65e1, 0x3, 0x6}, {0x4b4, 0x0, 0xd0f, 0x37c4}, {0x6, 0x1f, 0x1, 0x10000}, {0x7fff, 0x40, 0x3, 0x94}, {0x497b, 0xfff, 0x7f, 0x6}, {0x6, 0x6, 0xdc3b, 0x2}, {0x800, 0x693, 0x2c8, 0x1}, {0x5, 0x0, 0x5, 0x5}, {0x1000, 0x1, 0x8000, 0xff}, {0x5, 0xfffff800, 0x2, 0x11}, {0x8d, 0xbc, 0x7, 0x40}, {0xfffffff7, 0x80000000, 0x1, 0x3}, {0x5, 0xfffffffa, 0x8001, 0xf88}, {0x7fff, 0x6, 0xfffffff7}, {0x7ff, 0x7, 0x820, 0x3}, {0xfffffff7, 0x5, 0xffffffff, 0xa0e}, {0x3f, 0x5, 0x80000000, 0x1}, {0x100, 0x3ff, 0x82d, 0x5}, {0x8, 0x1, 0x0, 0x100}, {0x0, 0x8, 0x6, 0x4}, {0x8000, 0x638f, 0xffffffff}, {0x8, 0xfffffffe, 0x9, 0x110}, {0x6, 0x7fffffff, 0x7, 0x6}, {0x800, 0x7f, 0x40, 0x80000000}, {0x6f, 0xfffffff7, 0x6, 0x100}, {0x80000000, 0x4, 0x2, 0x8}, {0x8, 0xfffffe00, 0xac, 0x10000}, {0x100, 0x9, 0x1074, 0x1ff}, {0x80, 0x2590, 0x2, 0xffffff8c}, {0xffff, 0x9, 0x98c, 0x1}, {0x7, 0x5, 0x1, 0x6d2}, {0x1, 0x1, 0x879, 0xf8}, {0x1, 0x400, 0x0, 0x8b}, {0x3235, 0x3, 0x2}, {0x3, 0x3f, 0x400}, {0x80, 0x8, 0x3, 0x7}, {0x80000000, 0x7, 0x8, 0x3ff}, {0x6, 0x4743, 0x6, 0x3}, {0x5, 0xffffffff, 0x0, 0x5}, {0x39, 0x7, 0x7ff, 0xb1}, {0x3, 0x6, 0x6, 0x80}, {0xf004, 0x20, 0x1f, 0x1}, {0x6b31, 0x7fffffff, 0xa2, 0x6}, {0x3f, 0x6, 0xfffff801, 0x1000}, {0x7, 0x0, 0x100, 0x4}, {0xf6, 0x7, 0x4, 0x7fffffff}, {0x7f, 0x1, 0x401, 0xfffff799}, {0x7, 0x4, 0x720, 0x401}, {0x3f, 0xfffffff9, 0xe1, 0x1000}, {0x1f, 0x5d6, 0x40, 0x7fffffff}, {0xfffff000, 0x6, 0x5, 0x8001}, {0x3ff, 0x800000, 0x200, 0x5ecd}, {0x7, 0x7, 0x1, 0xfff}, {0x8, 0x7, 0x7, 0x8df}, {0xd4f, 0x2, 0x1d, 0xffff}, {0x6, 0xe1e, 0xffff, 0x8}, {0x0, 0x4, 0x69e4, 0xffffffff}, {0x10000, 0x6d0, 0x6, 0x326}, {0xb4, 0x80000001, 0x3ff, 0x4}, {0xffff, 0xff, 0x0, 0x51f}, {0x8, 0x1000, 0x1ff, 0x9}, {0xfffffffe, 0x1, 0x8}, {0x1, 0x200, 0x5, 0xffffffc0}, {0x8, 0x8000, 0x8, 0x928}, {0x9, 0x20, 0x5, 0xe15}, {0x7fffffff, 0x2, 0x7fff, 0x1}, {0xffff, 0x7, 0x401, 0x4}, {0x80000000, 0x3, 0x4, 0x1}, {0x400, 0x2, 0x7ff, 0x6}, {0x0, 0x80000001, 0x10000, 0x2}, {0x7, 0x200, 0x2c, 0xe8f}, {0x1f, 0x4, 0x3, 0x8001}, {0x1, 0x7f, 0x0, 0x6}, {0xe0000000, 0x3, 0x55, 0xc1a1}, {0x1, 0x7, 0x3f, 0x1f}, {0x7, 0x10000, 0x4, 0x4d}, {0x2, 0x6, 0x2ebd1c3b, 0x5}, {0x7b, 0x6, 0x400, 0x9}, {0x800, 0x1000, 0x8, 0x6}, {0x4, 0x3e, 0x80000001, 0x1f}, {0xa72c, 0x0, 0x80000000, 0x8}, {0x5, 0x1, 0x1ff, 0x5}, {0x6, 0x8, 0x400, 0x80}, {0xd57, 0x2, 0x6, 0x3}, {0x2, 0x600, 0x9, 0x81}, {0x1, 0x7f, 0x25, 0x3}, {0x9, 0xff, 0x3, 0x6}, {0xffff7fff, 0xfffffff9, 0xe1, 0xfffffff9}, {0x2, 0x8, 0x6, 0x1f}, {0x7ff, 0xfffffff7, 0x7, 0x401}, {0x100, 0x6, 0x9e6, 0xff}, {0xe4b8, 0x1, 0x20, 0x720}, {0x5, 0x8, 0xd2d9, 0x9}, {0x9, 0x1, 0x0, 0x401}, {0xffffffff, 0x27de, 0xf3}, {0x5, 0x80000000, 0x8, 0x6}, {0x8, 0x60, 0x8, 0x7}, {0x9, 0xcc80, 0xffff, 0x9}, {0x2, 0x8, 0x20}, {0x7, 0x200, 0x2}, {0x4, 0x6, 0x310fec78, 0x2}, {0x83, 0x4, 0x40, 0x8}, {0xffff, 0xed08, 0x3, 0x3ff}, {0x9, 0x9, 0xe0000000, 0x7f}, {0x101, 0xfffffffc, 0x6, 0x8}, {0x9f23, 0x8, 0x5, 0x400}, {0x8, 0x401, 0x3f}, {0xfffffffd, 0x9, 0x6, 0x400}, {0x3, 0x6, 0x1, 0xfffffffd}, {0x1ff, 0x5, 0x4, 0x1000}, {0x0, 0x40, 0x36b4, 0xffffffff}, {0x4, 0x101, 0x658, 0x88f3}, {0x7fffffff, 0x80, 0x10000, 0x2}, {0x2, 0x7fffffff, 0x0, 0xfff}, {0x4, 0x800, 0x0, 0x400}, {0x6, 0x5, 0x2, 0x3}, {0x2, 0x8001, 0x8191, 0x80000000}, {0x800, 0x2f59, 0x3, 0x1f8d}, {0x9, 0x9, 0x5, 0x7}, {0x4, 0x45, 0x6, 0x2}, {0x6, 0xfffff7d9, 0x9, 0x3}, {0xd3d, 0x8, 0x8, 0x9}, {0xf0c, 0x5, 0x0, 0x80000000}, {0x2850cf61, 0x20e, 0x1}, {0x1, 0xfffffff8, 0x5, 0x10001}, {0x81, 0x755, 0x3, 0x4}, {0x377dc627, 0x7cf, 0x8, 0x2}, {0x401, 0x7, 0x1, 0x4}, {0x3, 0xf0000000, 0x1000, 0x80000001}, {0x7, 0x79, 0xffff, 0x3}, {0x3, 0xfffffffd, 0x6, 0x100}, {0x0, 0x401, 0x5, 0x10000}, {0xfffff5a0, 0x639, 0x800, 0x1}, {0x9, 0x5, 0x6f9, 0xd15}, {0x1, 0x717fba22, 0x0, 0x7}, {0x9d, 0xffffff80, 0x0, 0x663f}, {0x2, 0xfff, 0x9, 0x7}, {0xf427, 0x2, 0x7, 0x5}, {0x1, 0x400, 0x1, 0x3}, {0x6, 0x1, 0x5, 0x80000001}, {0x5, 0x20, 0x8, 0x704}, {0x1, 0x3, 0x7, 0x7}, {0x3, 0x20, 0xff, 0x96e0}, {0xfffff888, 0x734, 0xc02, 0x2}, {0x80, 0x8000, 0x6}, {0x2, 0xfd7, 0x5, 0x9}, {0x80, 0x6, 0x401, 0xffff0001}, {0x0, 0x8, 0x6, 0x7f}, {0x7fff, 0x7, 0xfff, 0x101}, {0x0, 0x3f, 0x3, 0xffff}, {0x1, 0x2, 0x6, 0xfffffffe}, {0x80000000, 0x800, 0x8, 0x2}, {0xc2, 0x8, 0x1, 0x81}, {0x0, 0x0, 0x9, 0x6}, {0x200, 0x9, 0x1b9f1cba}, {0x9, 0x7, 0x8e00, 0x8}, {0x5, 0x1726, 0x2, 0x4}, {0xffffffff, 0x0, 0x1, 0x20}, {0xad, 0x7, 0x7, 0x9}, {0x7ff, 0xf0000000, 0xff, 0x1}, {0x9, 0x9, 0x296d1c02, 0x4}, {0x3, 0x7f, 0x6, 0x4}, {0xffffff9d, 0x1f, 0x0, 0x7}, {0x80000001, 0xe4, 0x1, 0x3f}, {0x10001, 0x5, 0x1f80, 0x100}, {0x1ff, 0x3, 0x4, 0x5}, {0x5, 0x4, 0x8, 0x100}, {0xfffff800, 0x9e, 0x7, 0x9}, {0x454, 0x2, 0x5, 0x1}, {0xf3, 0x1000000, 0x6, 0x7}, {0x80000000, 0x1ff, 0xb6d, 0xffffffff}, {0xecf, 0x3, 0x5, 0x800}, {0x81, 0x101, 0x5, 0x200}, {0x3, 0x5, 0x4, 0x401}, {0x6, 0x1, 0x4, 0x5}, {0x38, 0x101, 0xfffffffa, 0x40}, {0x9, 0x9, 0xff, 0x9}, {0xb4a, 0x1, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x2}, {0xfffffff9, 0x210, 0x800, 0x800}, {0x6, 0x6, 0x40, 0x2}, {0x3f, 0x6, 0x2, 0x4}, {0x1f, 0xcb, 0x709c, 0x2}, {0x6, 0x3, 0x1ff, 0x400}, {0x2, 0x2, 0xc4f1, 0x3f00000}, {0x0, 0x3ff, 0xffffffff, 0x7}, {0x9, 0x800, 0x3, 0x2}, {0x2, 0x3, 0x4, 0x1000}, {0x9, 0x6, 0x7, 0x4e80000}, {0xfffffc01, 0x4, 0x2, 0x222}, {0xd8e, 0xff, 0x0, 0x1}, {0xb96c, 0xffff, 0x178000, 0x600}, {0x8000, 0x81, 0x9, 0x1}, {0x3, 0x6, 0x4b80, 0x15f}, {0x7cf, 0x800, 0x7, 0x1000}, {0x9000000, 0xfff, 0x4, 0x400}, {0xa83, 0xd66, 0x1, 0x3}, {0xc8c, 0x9, 0x8000, 0x1}, {0x0, 0x9, 0x8000, 0x1}, {0x8, 0x40, 0x1, 0x80}, {0x2, 0x4, 0x18b, 0x40}, {0x5, 0x6, 0x2, 0x8}, {0x8000, 0xb151, 0x5, 0x7}, {0x3, 0x8cab, 0x7, 0x1}, {0x2, 0x1, 0xf6c, 0xef4}, {0x7, 0x6, 0xffff369f, 0xfffffc00}, {0x2, 0x8, 0x5, 0x7fffffff}, {0x3ff, 0xbc, 0x5, 0x167}, {0x1, 0x0, 0xdcba, 0xff}, {0x4, 0x4, 0x20, 0x1}, {0x2, 0x7, 0x7f}, {0x2, 0xffff, 0x0, 0x8000}, {0x1f, 0x3, 0xf346, 0x8001}, {0x1000, 0x200, 0x5, 0x80000001}, {0x0, 0x8, 0x1000, 0x4}, {0x8, 0xdc, 0x5, 0x7fffffff}, {0x1, 0x9, 0x4, 0x8}, {0x6, 0x6, 0x5, 0x401}, {0x2, 0x3, 0x5, 0x101}, {0x0, 0x5, 0x7, 0x3c2b5bd0}, {0x3, 0x101, 0x1, 0x3}, {0xfffffffe, 0x2, 0x8001, 0x7fffffff}, {0x10000, 0x0, 0x7e, 0x9}, {0x4, 0x7fffffff, 0x80, 0xfe10}, {0x3f, 0x101, 0xdb, 0x81}, {0x6, 0x50000000, 0xe0f, 0x101}, {0x401, 0x10001, 0xfffffff9, 0x2}, {0x5, 0x6, 0x1, 0x1}, {0x9, 0x6, 0x81, 0x20d9}, {0xffff, 0x90, 0x5, 0x6}, {0x1ff, 0x8, 0x2, 0xffff}, {0xffffffff, 0x0, 0xffff, 0x10000000}, {0x101, 0x7, 0x9, 0x8001}, {0x1f, 0xdd, 0x8, 0x4}, {0x3, 0x11e, 0x113, 0x200}, {0x3ff, 0x81, 0x800, 0x8c0b}, {0x8, 0xa5, 0x2, 0x1}, {0x1, 0x7, 0x2}, {0x6, 0xe49d, 0x1, 0x8000}, {0xffff, 0x0, 0x1ff, 0x3ff}, {0xffff, 0x8001, 0x5, 0xffff0001}, {0x101, 0x0, 0x200, 0x4a49}, {0x7, 0x10000, 0x6, 0x2a}, {0x6, 0x401, 0x2, 0x7fff}, {0x656, 0x4f5, 0x6, 0x1}, {0x401, 0x5, 0x6, 0x5}, {0x89fd, 0x7, 0x4, 0x8}, {0x54, 0x0, 0x5, 0x401}, {0x7ee6, 0x1ff, 0x0, 0x5e}, {0xfffffffa, 0xffff, 0x5b, 0x1f}, {0x0, 0x3635677, 0x1ff, 0x8001}, {0xfff, 0x51e0c130, 0x5, 0x1}, {0x81, 0x1, 0x6, 0x200}, {0x20, 0x7ff, 0x10001, 0xc76}, {0x877b, 0x5, 0x49, 0x800}, {0x3, 0x5, 0x7d54a9e3, 0x22e}, {0x2, 0x5, 0xcf, 0xffffffff}, {0x0, 0x0, 0x2, 0x401}, {0x0, 0x58, 0x9, 0x2}, {0xcf4, 0x7fffffff, 0x0, 0x5}, {0x0, 0x7ff, 0x6, 0x1}, {0x5, 0xfff4, 0x4, 0x6}, {0x2, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x10001, 0x7, 0x10000, 0x3}, {0x80000000, 0xfe, 0x10001, 0x3}, {0x7, 0x8, 0x900, 0x3}, {0x8000000, 0x1, 0xab1}, {0x8000, 0x81c, 0x3, 0x5}, {0x0, 0xfd3, 0x47e800, 0x9}, {0x20, 0x67fd, 0xfff, 0x62}, {0x6, 0xfff, 0x3, 0x401}, {0x1, 0x6, 0x3f, 0x5}, {0x2, 0x7, 0x7, 0x10001}, {0x62, 0x1ff, 0x2, 0x3}, {0x1ff00000, 0x5dca, 0x7ff, 0x5}, {0x876, 0x1ff, 0x6, 0x7f}, {0xb76, 0x81, 0x9, 0x50}, {0x0, 0x216f, 0xd, 0x4}, {0x4, 0xe98, 0x2, 0x101}, {0x3, 0x2, 0x2, 0x1f}, {0x6, 0x9, 0x5, 0x9}, {0x5, 0x6, 0x8, 0x7}, {0x80000001, 0xfffffffc, 0x9, 0xff}, {0x5, 0x43, 0x40, 0x5}, {0x1, 0x8, 0x0, 0x3ff}, {0x1ff, 0x5, 0x4, 0x1ff}, {0x1ff, 0x2, 0x8, 0x3}, {0x8, 0xcd98, 0x0, 0x1000}, {0x0, 0x200, 0x4, 0x200}, {0x9, 0x5, 0x7, 0x3}, {0xffff, 0x7ebe, 0x8001, 0x57}, {0x22, 0x0, 0x3, 0xfff}, {0x0, 0xffffffe1, 0x7, 0x7f6}, {0x1, 0x1, 0x0, 0xa777}, {0x0, 0x1, 0x8, 0x3}, {0x4, 0x1, 0x0, 0x6638}, {0xa, 0x7fff, 0x3, 0x1}, {0x5, 0x81, 0xc6ad, 0xac9f}, {0x912, 0x5, 0x3f, 0x8001}, {0x1, 0x1, 0xc00a, 0x9db4}, {0xffff6cd2, 0x1, 0x8001, 0x800}, {0x10001, 0x8, 0xbc, 0x7f}, {0x1f, 0x40, 0x8, 0xb13}, {0x4d, 0xffffffff, 0x3f, 0x4}, {0x1, 0x3, 0x3, 0x10001}, {0x50, 0x5, 0x4, 0x800}, {0x1ff, 0x1, 0x8, 0x1}, {0x4, 0x3, 0x83, 0x4}, {0x9, 0xfffffffa, 0x3, 0x1ff}, {0x3, 0x80, 0x1, 0x3}, {0x80000001, 0x3, 0x10001, 0xdbc}, {0x3, 0x0, 0x5, 0x9}, {0x80000000, 0x81, 0x8000, 0x8000}, {0x8, 0x100, 0xffff, 0x3}, {0x1000, 0x7, 0xfffffff8, 0x1}, {0x1, 0x6ca6, 0x9, 0x800}, {0x2, 0x40, 0x7, 0x101}, {0x3, 0x0, 0x0, 0x100}, {0x3, 0x9, 0x1}, {0x3, 0x8001, 0x20000, 0x61a2}, {0x6, 0x8, 0x910c, 0x4}, {0x1, 0x0, 0x100, 0xd2b7d45}, {0x4, 0x0, 0x24, 0x1}, {0x5, 0xe8b, 0x3, 0x262}, {0x8000, 0x2, 0x6, 0x3}, {0x40000000, 0x7c, 0x3, 0x990}, {0x400, 0x101, 0x9, 0x75}, {0x6, 0x0, 0x7fffffff, 0x1}, {0x10000, 0xffff, 0x4, 0x10000}, {0x9, 0x5, 0x0, 0x7}, {0x47fa, 0x3f, 0x10000, 0x8001}, {0x0, 0x401, 0x5, 0x6}, {0x7, 0x8cb, 0x200, 0x5260}, {0xbcbf, 0x235, 0xffff, 0x2}, {0x2, 0x1000, 0x6, 0x3}, {0x100, 0x401, 0x3, 0x6}, {0x3f, 0x826, 0x3ff}, {0x9, 0x97d, 0x7}, {0x5, 0x7, 0x7, 0x2}, {0x80000000, 0xf53, 0x16a, 0x6}, {0x6, 0x81, 0x5, 0xff}, {0x5, 0x2a, 0x800, 0x8}, {0x40, 0x2, 0x40, 0x3}, {0x3, 0x9, 0x8000, 0xd06f}, {0xfffffffd, 0x1, 0x5d, 0xa4e}, {0x3, 0x5f77, 0x7fff, 0x10fa}, {0x1e10, 0x44c, 0x7fffffff, 0x6}, {0x2, 0x8, 0x4, 0x9}, {0x3, 0x9, 0x7f, 0x9}, {0xcd, 0x8, 0x401, 0xffff1ce6}, {0x100, 0x3000000, 0x3a74b6b2, 0xfff}, {0x3, 0x2, 0x9, 0x4}, {0x5, 0xfffffbff, 0x101, 0x684}, {0x9, 0x1, 0x8, 0x4}, {0x20, 0x5, 0x0, 0x3}, {0x1, 0x2, 0x10001, 0xa64}, {0x5, 0x800, 0xf24, 0x2}, {0x8001, 0xd97, 0x10000, 0xd48003ff}, {0x1b, 0x4, 0x1, 0x9}, {0x5, 0xed5, 0x9, 0xffffffff}, {0x200, 0x1, 0x758, 0x800}, {0x2, 0x401, 0x7fff, 0xf84d}, {0x32bf, 0x401, 0x2, 0x800}, {0x3f0a, 0x101, 0x3, 0x81}, {0x9, 0x3ff, 0x493, 0x200}, {0x0, 0x1f, 0x3ff, 0x7ff}, {0x7459f0c9, 0x8001, 0x3, 0x7}, {0x7, 0x100, 0x5, 0x7102}, {0xfffffeff, 0x9, 0x0, 0x6}, {0x10000, 0x947, 0x4, 0x6}, {0x7db, 0x8, 0x0, 0x1}, {0x65, 0x8, 0x6, 0xd0000000}, {0xfff, 0xffffffff, 0x8, 0x7fff8}, {0x10000, 0x5c2c, 0x1f, 0x100}, {0x314a, 0x8000, 0x0, 0x1}, {0x4, 0x2, 0x81, 0x7}, {0x80000000, 0x1, 0x3, 0x9}, {0x2, 0xffffff80}, {0x100, 0x6, 0x463, 0x10001}, {0x400, 0x2, 0x1, 0x8}, {0x2, 0xa3be, 0x0, 0x9}, {0x2, 0xff000000, 0x476, 0x10001}, {0x746, 0x7ff, 0x3, 0x2}, {0x9, 0xdb, 0xafa9324, 0x8}, {0x0, 0x9, 0x6, 0x4}, {0x5, 0x4, 0x6, 0xffffffff}, {0x5, 0x9, 0x7, 0x3}, {0x313, 0xffffffff, 0x8, 0x8}, {0x5, 0x0, 0x6611, 0x200}, {0x2, 0x5, 0x0, 0x3}, {0x3ff, 0x7, 0x0, 0x20}, {0x400, 0x7, 0x3, 0x10001}, {0x10001, 0x400, 0x8001, 0x1}, {0x7, 0x10000, 0x7, 0xfbde}, {0x1000, 0x81, 0x1ff, 0x6}, {0x3ff, 0x1, 0x800, 0x48}, {0x53, 0x80000001, 0x0, 0x2}, {0x5, 0x0, 0x6, 0x7}, {0x5, 0x8bb4, 0x200, 0x1}, {0x3, 0x1, 0x40000000, 0x6}, {0x7ff, 0xba9, 0x3, 0x4}, {0x5, 0x8, 0x6a9}, {0xc2, 0x6, 0x535daab5, 0x4}, {0x100, 0x8, 0x800}, {0x401, 0x1f80, 0x5}, {0x7, 0x200, 0x2, 0x3}, {0x6000000, 0x57b, 0x1, 0x8}, {0xffffff6c, 0x6, 0x0, 0x7fffffff}, {0x1, 0x50, 0xfffffffa, 0x2}, {0x6, 0x62cac94c, 0x1, 0xfffffff7}, {0x2, 0x0, 0x6, 0x800}, {0x7, 0x2be, 0x6, 0xfffffff9}, {0x3282, 0x8, 0x5, 0x4}, {0xffffff00, 0x1, 0xfffffffe, 0x101}, {0x7, 0x67, 0x6, 0x5}, {0x9, 0x9, 0x4, 0x662b}, {0x7f9, 0x5, 0x1000, 0xc503}, {0x33, 0x62, 0xbf22, 0x40}, {0x100, 0x3, 0x3, 0xbb2}, {0x8, 0x3f, 0x401, 0x8}, {0x4, 0xffff, 0x9, 0xfff}, {0x80000000, 0x1, 0x8, 0x8}, {0x4, 0xff, 0x8, 0xb2}, {0xffff0000, 0x4, 0xb92f, 0xffffffff}, {0x1, 0x5, 0x1, 0x1}, {0x1, 0x9, 0x3f, 0x5}, {0xfff, 0x9, 0x7ff, 0x6}, {0x5, 0x400, 0xd93, 0x8}, {0x3, 0x1, 0x401, 0x7}, {0xffff, 0x8, 0xfffffff9, 0x100}, {0x3, 0xce74, 0x81, 0xffffff5e}, {0x1, 0x1, 0xffff7fff, 0x3}, {0x4, 0x1, 0xfff, 0x9}, {0x8, 0x3, 0x2, 0x1}, {0x9, 0x5, 0xff, 0x2}, {0x8, 0x1000, 0x0, 0xfffffffa}, {0x1, 0x4, 0x7, 0xf813}, {0x3, 0x3, 0xfffffffe, 0x8}, {0x5dcb, 0x925, 0x0, 0xffffffff}, {0x0, 0x1, 0x401, 0x8f5}, {0x55, 0x7ff8, 0x8000}, {0x9, 0x2d0b, 0x8, 0x10001}, {0x1, 0x80, 0x10000, 0xcb9a}, {0x9c70, 0x7, 0x4, 0x1}, {0x4, 0x9, 0x8f3b, 0xfff}, {0x6, 0x7fff, 0x8, 0x7}, {0x200, 0x80000, 0x7, 0x4}, {0x9, 0x81, 0x3}, {0xc6000000, 0x3, 0x1}, {0x885, 0x5, 0x7fffffff, 0x3}, {0x63088029, 0x3f, 0x6, 0x10000}, {0xfff, 0x2, 0x0, 0x7f}, {0x3, 0x6, 0x6, 0xffffffff}, {0x6, 0x9, 0x7, 0x1}, {0x7fff, 0x3, 0x400, 0x6}, {0xe00000, 0x2, 0x5, 0x200}, {0x9, 0xadd, 0x1, 0x300}, {0x5ff, 0x81}, {0x0, 0x0, 0x4, 0x7}, {0x4, 0xffff, 0xf52, 0x8}, {0xff, 0x8, 0x5f9, 0x2}, {0x800, 0x7f, 0xfffffffe, 0xff}, {0x100, 0x10000, 0x0, 0x800}, {0x0, 0xfffffff9, 0xffffbf2b, 0x3f}, {0x6, 0x7fff, 0x7f}, {0x7, 0x3423, 0x9, 0xff}, {0x8000, 0x4, 0x9, 0xc6}, {0x1f, 0xfffffff7, 0x2, 0x1}, {0xfffff000, 0x1, 0xf28, 0x49e3}, {0xfffffffd, 0x0, 0x0, 0x6}, {0x1f, 0x8, 0x7, 0xfffffff8}, {0x7, 0x1, 0x7, 0x3f}, {0xfffffffa, 0x400, 0x6, 0x9}, {0x1f, 0x6, 0x0, 0x200}, {0x9, 0xa25, 0x75c, 0x5}, {0xc2, 0x66d1, 0x58f, 0x5}, {0x5, 0x1, 0xffffffff, 0xfffffff8}, {0x80000000, 0x6, 0x8000, 0x400}, {0x8, 0x3, 0x9, 0xfffffff9}, {0x1, 0x2b37, 0x8000000, 0x81}]}, 0x3c4c) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)) 15:41:43 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x7f, 0x80, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private0, 0xff17, 0x8, 0x0, 0x3}}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002c510dc021bc66054e9034067915b3138baf2a9a18df1d9b3a6dbb9cf2c9677dfa87563070fe5f4f2ec1fc0379ca19491d318d546f4b098b0de4064dfef3298a5dbe3c6a973f62b5a860eaf43325382b2bd4d5b35bc9405a1c92039b7a9097250541d73d12078ea9a5cc67e459663c9211546f4fc224b2f4aeac84b1011e44e714d7d47e5c31ff44590db2df958324bf5491946d0dd7758686e71e9a9996bcab2173432f1400"/180]) [ 647.496163] attempt to access beyond end of device [ 647.502448] loop4: rw=12288, want=8200, limit=20 [ 647.522283] attempt to access beyond end of device [ 647.553204] loop4: rw=12288, want=12296, limit=20 [ 647.575927] attempt to access beyond end of device 15:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000200008000000000000000000000000091f1200eac38257874a84d2c6889f4f93e847ebd2d6cf46505ba5acd39f6c8ef463e87569862ddb69e947fd00b165bc62d0079bf6606e6cb889e4f07b68668ddc7af6960ad8b9f44e52f"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000ada8244bdad106525c3c9c16124ddba10fe0c291bd29348bd3eba24f446f65405e21456d34fa5a654bc3f06b1219b07a1729b025181f585ad147b8f1ff10651024c88838cae12be9deba07bac9dd8eb8f5886d705aa69a1602da27a3d2ff682506af84776ad3b358984673a3b3fb2b2597a4c7f553c2b8ac804080205535374af13c6d17aa99d14f11136787c04f93ef1c8812fe517e6f24ceb5e82782", @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 647.607338] loop4: rw=12288, want=8200, limit=20 [ 647.613476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.641678] attempt to access beyond end of device 15:41:44 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="88b301b07e053400080211000001ff46ac8a60bd4813df3ecdb5461fffffffffff080211000000f701ffffffffffff7380c8971f0008021100000108021100000150505050c701ffffffffffff0802111200013c006445a2d6d84bd3fea9904dcb340466096e363b159f861150196daaa50710d6ac42a6eeed9ef77c85d3cb38e9017f6d9908d9b5fe7ac5fcb3e08959669f130ffa0ed8a006000000032f8d00"/175], 0x90) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/vcs\x00', 0x224140, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002700)) [ 647.669775] loop4: rw=12288, want=12296, limit=20 15:41:44 executing program 4: getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x44) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x83bf, 0x0, &(0x7f0000000200), 0x8, &(0x7f0000000040)={[{@noinline_dentry='noinline_dentry'}], [{@fowner_gt={'fowner>', 0xee00}}]}) [ 647.750714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 647.830892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.840714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) dup(r9) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:44 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000080400000000000000b0000001e0000000200000002000000f9ff00000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x280812, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x34, 0x800, {0x0, 0x80, 0x6, {0x8, 0x3}, {0x1, 0xec8f}, @const={0x400, {0x602f, 0x7, 0x3f, 0x8375}}}, {0x57, 0xfffd, 0xfffb, {0x7, 0xfbff}, {0x2, 0x9}, @ramp={0x8, 0x9, {0x1, 0x101, 0x6, 0xff}}}}) 15:41:44 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0x71, 0x5, 0xc215, 0xa9, "52a771bdca6f47c49318fa50cda87436525aa2", 0xffe00}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x5}, 0x8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ef69ad26473c64db7ab2096ef25c47dc8a63aa3de9601662c0b9d674b660eed42e01cd742e32f69dd9d0dde905ea3e4c33426d700000000000000"]) [ 647.898595] print_req_error: I/O error, dev loop4, sector 24 [ 647.960327] xt_conntrack: cannot load conntrack support for proto=10 15:41:44 executing program 4: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e72ce788f47f3696e6c696e655f64656e74720848cd"]) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)='b', 0x1, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000440)='g', 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000500)="45dbacbf5eaa793c5637258f99d9380bf93d3300034dbbef9373996f", 0x1c, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r1, r3, r2}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={'cmac(tnepres-generic)\x00'}}) keyctl$set_timeout(0xf, r1, 0x7fffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) dup2(r4, r0) [ 648.028558] print_req_error: I/O error, dev loop4, sector 0 [ 648.072525] xt_conntrack: cannot load conntrack support for proto=10 15:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x400, 0x0) connect$l2tp6(r7, &(0x7f0000000400)={0xa, 0x0, 0x3, @mcast1, 0x101}, 0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x148, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5e321a049e749df4}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20488d0}, 0x100) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5ca100fa", @ANYRES16=r10, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r9, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) r11 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x100, 0x100) read$eventfd(r11, &(0x7f0000000480), 0x8) 15:41:44 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1f0) [ 648.157165] xt_conntrack: cannot load conntrack support for proto=10 [ 648.180457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:44 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="37623e910800"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCNOTTY(r1, 0x5422) 15:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x321, 0x4, 0x9, 0x4, 0x80, @broadcast}, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x20000, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40001, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x20, 0xc5b}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000180)=""/82) [ 648.290196] xt_conntrack: cannot load conntrack support for proto=10 [ 648.307963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000014}, 0x800) [ 648.453105] attempt to access beyond end of device [ 648.472136] loop4: rw=12288, want=8200, limit=20 [ 648.487200] attempt to access beyond end of device 15:41:44 executing program 5: finit_module(0xffffffffffffffff, &(0x7f0000000040)='-}/\xab$[\'+@\x00', 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000efffff0006000000e3ebf05194000000000002000000000000", 0x20, 0x101}], 0x0, &(0x7f0000000140)={[{@disable_ext_identify='disable_ext_identify'}, {@flush_merge='flush_merge'}, {@noextent_cache='noextent_cache'}, {@norecovery='norecovery'}, {@whint_mode_fs='whint_mode=fs-based'}, {@acl='acl'}, {@adaptive_mode='mode=adaptive'}, {@lfs_mode='mode=lfs'}, {@quota='quota'}, {@grpjquota={'grpjquota', 0x3d, 'f2fs\x00'}}]}) [ 648.532498] loop4: rw=12288, want=12296, limit=20 15:41:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000000)="25846a6299b723d56dfb8ecf65a58f38915da9b7960d4f5295e2c0261801feceb4eacd534581b25475a4cd02272274fff0", 0x31}, {&(0x7f0000000040)="d278bc5496d0195bc1f7841571295cd213e49c649430871664bac023b5e3b0a4e4054c1e7dcb7623da5c63b527789623cc0e57cf6425d0adc984d048c4c5cf06", 0x40}, {&(0x7f00000001c0)="e2814c8b95971adab4e44ef91de9209b3c451c43d03096b641b91446729bfb61aa1bd00e7bd8d41278950c6a4cddeac0b0efe3b54fef9960dfe336cafa64201d8bd939e3ae46000bf954b98e0329482bdcf2a72dd5da5b64fa942709d3eed24cdd8e4743409e67580b75e4f77ba01529e044d38c9b2c4fa5f5042e7e470f6ffcb7174f777da7b714e38014a0baccd6cb5cfd3fc03e37427bd0f0038ae7f86480f4eedb55e2a417da8206abde6ec196beabc2d65d77f1757c1ecb9906dbf158c87c5186aa3db0383c08", 0xc9}, {&(0x7f0000000100)="876e791716efb5dd2daa1773c71b286e2d", 0x11}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000002c0)="5f23580422dfa908c7cd75ab6fb454fd1b48717a2b4ec23501b3b32a89af493809bf260d881d22668bc42b3f7ad9603d46f35197ca3bbfe5b2e813bb3575f9240ca3eb3b49207a13d7604f1ff2893b1afa3880b10a82fd584905aaa574f9d1acaf4ca6c94668188980eae2fbf8012f75ac7effcdf2f1132f73e949f82e96a19e", 0x80}], 0x6, 0x3, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x25dfdbfd, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffe}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b00000000000d6a68164a8a5e04603e5dc15b142ba5ab8e0cec1678b5fffa465546403f6578c2c6543b50a43a875c30ca5609ab54d4c611ffb3feea13249c7bb90ac21f2504c5b26826a20dde695ce083e5f666b71b11380fe771a527d0976d6751da32"], 0x30}}, 0x0) [ 648.555351] attempt to access beyond end of device [ 648.569349] loop4: rw=12288, want=8200, limit=20 [ 648.576384] attempt to access beyond end of device [ 648.583198] loop4: rw=12288, want=12296, limit=20 [ 648.646328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.647770] Bluetooth: hci3 command 0x040f tx timeout [ 648.666931] attempt to access beyond end of device [ 648.674298] loop4: rw=12288, want=8200, limit=20 15:41:45 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @val={0x3, 0x1}, @void, @void, @void, @void, @val={0x71, 0x6, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f3) [ 648.701396] attempt to access beyond end of device [ 648.739768] loop4: rw=12288, want=12296, limit=20 15:41:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0xffffffffffffff8b, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x2c}}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r11) [ 648.771922] attempt to access beyond end of device [ 648.795832] loop4: rw=12288, want=8200, limit=20 [ 648.813588] attempt to access beyond end of device [ 648.823213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.839184] loop4: rw=12288, want=12296, limit=20 15:41:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000001c0)=""/142) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000380)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1, &(0x7f00000001c0)=""/4, 0x4, 0x7301}, 0x3f9c) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r7, 0x7, 0x70bd2a, 0x25dfdbfb, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="070000a2576b2553f5bf8bf50600", @ANYRES32=r11, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) 15:41:45 executing program 4: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="1020f5f201000b0009e2ffff020000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000000c00000010000000140000030000000100000002b0b76434debdc079ab1350a6a9668c8bbb560b4d5f42b5fce65141ab49ae6e35ba4a88ea7600239b8b3c3f2dc43e8e53ac57074dbc00"/158, 0x9e, 0x13fe}], 0x1000, &(0x7f0000000240)=ANY=[@ANYBLOB='grpjquota=,*-)#,resgid=', @ANYRESHEX=0xee00, @ANYBLOB=',grpquota=f2fs\x00,heap,noacl,whint_mode=off,inline_xattr_size=0x0000000000000104,jqfmt=vfsv0,nodiscard,extent_cache,\x00']) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x121103, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000300)={"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"}) 15:41:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc502e4e19a79a211}, 0x8001) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:45 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x40000000000000, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000380)=0x7) recvmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f00000000c0)=""/47, 0x2f}], 0x2}, 0x40) 15:41:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x40001, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6c696e6527593de47472792c00a9b860a526b64912739929e9acb31c5e12c1ed72a280f91062afb2404197590894a7e3390dc7ed32907b16735d7a5ea980ed12f0c4e9f66dacd040d7dd7e78e98505c8a6c7930f7f97b66299d42159f866097233f6afb45a9a3e73ea419d6b8407701a40402d", @ANYRESHEX, @ANYRES32=r0]) [ 649.021175] print_req_error: I/O error, dev loop4, sector 0 15:41:45 executing program 2: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={[], 0x11}}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x40}, @device_a, @broadcast, @from_mac=@device_b, {0x0, 0x7}}, @ver_80211n={0x0, 0x8, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x3ff, 0xe, @val={0x10, 0x1, 0x35}, [{0xdd, 0x11, "beda9cf2199b68aa1f066d6caecfb81be7"}, {0xdd, 0xb3, "4c852d5fd789f51dc0468b174adad41126cb7318c618444f4b75b1b2eaed7fb9c5d3cad6c98a4ee58ce46abae9f4203830a6856016540e868a8f9c241e4ba23220164f13e5da9679e2f9d0ea6941c9a9cfe36efe62da31e96dc9e5dd22cfd5ffc42e060f2b27cb73fe7e556fa84833e4b2c65eab984640bd0c7ecc6a88684771f54a49af5f63e4a4cc8a94539a2e3c29f9e1ad7148adb5781d91b32207dfb0c13cc73aa36c0ef06bb48d707d5acbd7bbc60688"}, {0xdd, 0xed, "61470b97a13fd9d81d3d6155c05433b5c38c24b4cf250586cac65bc1d57c2e36f0d8a3b8d5cc4302de20e0be5788fffbe364dff53eb97e17f6d349542d89c0ee39880081e292bd3b47e7c97a365ed313e4fc60180dfc241a77dfa3763e13fd47943db902c7e14dc19a500c27ce72d9cc4af15f9491c188749f2f20fd22947a2c76901d389051cbbcf55d9ed34f328ac4927465496b6d030e1133db0ef0a1856acdbbb7eff5c74cb985a047fe008425f990d3fe754b48bd1a144a780655c294bdd68da6a3b22a4400a4baa1ff35e25837512c2c4f787db60616c65f3935abf51bcdaa0c18a37a495a535c41b0f6"}, {0xdd, 0x69, "82949652595ef31abd5fe32fa271afd2ea05737e25eeb2d9102a48fc3ddea1a938a8d2c9933b28d5d289562c8aae39971ead860a168e9cd9fa63e31d64997ecb1b3f777441d89d5b5d6e00da5d94e0e525ce5c1b36a1495e265f2c6857819509313cef5a8e7de466fb"}]}, 0x247) [ 649.147705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.205895] xt_conntrack: cannot load conntrack support for proto=10 15:41:45 executing program 4: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100020, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_none='cache=none'}, {@mmap='mmap'}, {@aname={'aname'}}, {@fscache='fscache'}, {@aname={'aname', 0x3d, 'f2fs\x00'}}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r1}}, {@permit_directio='permit_directio'}, {@subj_role={'subj_role', 0x3d, 'f2fs\x00'}}, {@uid_lt={'uid<', r2}}, {@permit_directio='permit_directio'}]}}) [ 649.296690] xt_conntrack: cannot load conntrack support for proto=10 [ 649.307502] print_req_error: I/O error, dev loop4, sector 0 [ 649.316234] xt_conntrack: cannot load conntrack support for proto=10 [ 649.346818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.390945] print_req_error: I/O error, dev loop4, sector 0 [ 649.397254] attempt to access beyond end of device [ 649.407632] loop4: rw=12288, want=8200, limit=20 [ 649.420767] attempt to access beyond end of device [ 649.432881] loop4: rw=12288, want=12296, limit=20 [ 649.444172] attempt to access beyond end of device [ 649.463401] loop4: rw=12288, want=8200, limit=20 [ 649.475355] attempt to access beyond end of device [ 649.487643] loop4: rw=12288, want=12296, limit=20 [ 649.548812] attempt to access beyond end of device [ 649.553794] loop4: rw=12288, want=8200, limit=20 [ 649.575559] attempt to access beyond end of device [ 649.597464] loop4: rw=12288, want=12296, limit=20 [ 649.613543] attempt to access beyond end of device [ 649.623235] loop4: rw=12288, want=8200, limit=20 [ 649.633488] attempt to access beyond end of device [ 649.643597] loop4: rw=12288, want=12296, limit=20 15:41:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200a4f202000000faff00000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8d0a1000000000000000000001010000003a63079deb944ed3619b275784dc7066e43bd4053110f699a314e7cb15767229a1e22a19879741a5f1b96ac69d53d6c33556a01b8df5ae2600007241c8073ca09ce42336282bd36e0000009090e9f40eb823b2776636f6f22d764004c52c53285d7a5fb262c11073e8edbabd515bb4540968736000efc864785de34301dc7385a45be4b492c107895867dd187cf23413f4956bd83988a694c5b01893e0de01750eb86769509593bb11173abd7a03a70498"]) 15:41:46 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1f0) [ 649.714903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300c18a23081d7c205de47905c785b132d1df62d5aacc13a9ea3ff06d774f9b5c1379571fa20c4ae927903561c940d8c2093cfcf81859bcf68d090f3e2c181779d94c67b63bdc3a7d3dd7bd1560686451f04556562fdb1cdf5e6cf7edd9a215c89200162b2bf40fec363655963ac1f89e43656c82", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000000)="6f6676630dd9b12f2e046ceb647b4440363660b27fdc0251559e43e043d7c70b13ca33c2b4bfb7e15960306864ad3838c350845f1f2063a0965a72", &(0x7f0000000380)=""/205, &(0x7f0000000280)="27c9084352deec6ff8e607f64022feabe5da19f2fd5537473461de8b5c0ccf1735c5ee5852b5c2e7c6a00bf0a87655a1b363fc72e9385707a68a4ff693bae19d3130cee7c1a655d3b109d7919f1d70d3b7cc37d14e40c8cf6e74a31d3d92fb8d4342b475e70f37e7e943463176765a0708388dc8e1a2b2aeb0a53a22d1a9cceb9b27460342c480c2fcd6ff7029d876ffd64044b41b6eb67954a05406d29504b3e5e35a232920ce0de8cb47ac8453ce650c76fe466aa6", &(0x7f0000000480)="429cf76612e491732b1b97adc2dd1a396991baf71fe220ecb4a1ff02d95fd5e3c523f06a19b6706a1a5e6838a06c8b21affb9f3f2173d9fea8143bcae928cbe75054d3139c537c7912c0e113346ecff61a44ae", 0x3ff, r1, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 649.802358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.838942] print_req_error: I/O error, dev loop4, sector 16 15:41:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) sendto$ax25(0xffffffffffffffff, &(0x7f0000000240)="80ab575a50fb14166fba9118b73533c7ee4760eac4f62aed2febc8aa10cc01dbaa876495c1a71e67aae2be689a34e77c2699298cba08a043a37f205384ff71b2bc977cdea564a5574fee03a592531834cd1f2e36d6701bd57bf76b17c396821cefa23ce63c9bdc22ae1e2916605e578a9388defffe238269ea1e1fe97302972afe56cefd2a4f73245e729d7da19f76e3d4f5d7ab61a27a32ae19b247b36f1943c3d4af256e8c054f89b0204078796d10b61932836dd098d772412000f32eadb3865ba3d68ab38611e3cf77c40139ab48cf2f249a8054de4e5dbd02504e41f4a77f242bf58acef47ddefdece86685ba092f58c978e1557a5a92ac0e61fe41af40e890bb0875e557f3095ed440a6c87ac40733cbad69b6bc74577716fb77ebcb12ac31c946f0f7641562c61d09e54e4b16bba2600fe5285478916bfba4e503e21e271a13c90aae3584d178770d3803f4800ba9194284cbdc701b6272c4dff55ab61f614d0198719873595867d1fbff6b874dff99d60702fd803795ea3e8cd288f86dbea165973fc9732254e5bda7d28a77809e715cf2d976d938d1b36684dd3f12c7f72c00d7341103e8210ddfc5befa3c43732c29924a54bb62f28dd980942a083d99aaf7d4fe6182cc81fa43b26a95e3aa78891a178e79b3640c2df123b49c6c58421711543da63902b2c66bc4ae42e470e39c89d8ced0d0f163a248cc1a187c10b9b03155f9d26c8fa6a1a4ccd77b38e67c566c2108c535f47f6d8da70f191058c345e2e72730bf1c5c0f690a211e28473e6a8b1e033a1f856f6f4edf9e3b7890938bd1a6fc0d05393a6676e35223d9c491d591dfc814cae778a482cf1d8c742b6304693e98e14c2bac7b2af913bd49fd804b12f7c25fc75f2103779dfcda160fb1955a7e256aa862f5fe8473744fae91974a5b6e37836cf343a76abc1885470efd7d17c09730c5c83b7745b99d110c32f52e0271f3098cfa5338d07648dbe9df7f5968c46f6d03d98b09ee37d71fbd901c99a81b57674ba1eb6a6d464a95933a7875b36a8bb3d8250189ce919a97706230ee79b3cf705553b5f979daddf206b820090a16dd1d598011a31ac1392bce96433c1e02eed144aeafa794d2798b02938a53e01fa81aa9056b446fc65358e9407c5ec537c5758e7d1ead5dabfec99d4c7333f45a1281191c7257d5d49aa76ad05a0b6d262057a0b1479b65b793920b6a7f9a4b7737bb1e29bcb84a4b49e194a8f7106d1ffb0d39c341a7f215c425697bc7c63c095bd8c18e7c2ae8c6e91396b86fc07a83d39dfb135d9ae388559376c9a560540aa4bc55e56a51e06eb09991f1284001e29c084b283bff573b1353316e7ff7c674096663e4612534cfe1d028e97956606ac2efa498c3ca95c0c0d08d7b318230e8e4ca8aa086a91140d1c11632acd4688ce065ebaad8680eacd1ac5f688f31c5adc4d258766094bf38d41a3579e4499b556b98804b0eeb24afeb426968403b111c63709dc5a8f259ff685c357a1ca56a6f995b7eb6325d682362c0b02b588db203ddff78404389710cede23981e8fc0bc22ae3727dbeba24f0ec17b823808c6166f88ce64753ec673c33cb7887c0ecbc543d6daf9d9649605a64593958eed9f89550ba2995d3abb11434ec6ca8e553e440447b5e31fdcb0a860161a4294440667790d8d7357ad47e35ab2f57089f36401d1e6fa3cd89ec20fdfa25c4f5f6927e99c4e834f8a465f86af85c51b1ba91ef89d4d1c684e8d8c330a9f8dfd97ed3d586d46a519a97483d0a106f6224c58df0686b51bdce47f0652ac519d013b0c394ffbca52d26211e21abbedede559691a2b8b751ccacaf310a0713befab5d34c0e0ac26e720b54fc23fccfa9d28501e8566884af1189301638a494fb97adf0d00ff6227181804000ee02bbd322e119d141827333522d39bd644ffff49b5a8af313e9e083648420d97c5e1cbbadfc609f8e4f373d3a95eee7bee1c7355f03dba00c646ee7721be20510b3b24d99b6b6b310bd0ade3747423157b0ddd139dfdbd9adf7c25d97d089d3a0a52e6c32ff35b16787ce318a1fd1df8c11c8b799d7a2eaae78d83c985f85d4376adf8fcebb0664b179a6fdac76a0967bbd8f62d71878f69b4a61955f43afd09fac443fb04e9af957a824d07eaf347ad0939d863907851a979524c136281f285e16c3570af854b1a6310808cd6926785934ffef4c5e4d5c06ac1f1a362ed1e301ecd83ba7730c34b7d0f9670736d5eabde3cc5c24040732d03b330f4f983242560965aa2e4382585cef5b0e1b5ae84eacc0ae1b3bb212de7e0655cbaab3c2f9f53869356d80a325487e8260cf726f458968a08524ed3772bbf2bfd503e38848e7273efdb07ba84610a5c0ec9da5784a2972736379f14468b6eebd831e7bd1b43e4593175222dce79cd7da34da568badc38dbde78fb28b96176013b578dd0b391cbfdd403e5ac35f3fece588da2fa9e52e9cc319e7bc95fef90234cf927f2152abafaafc0abc6b5c37e0c6c0c75d0eba57a00ee869f48f0170e881fb05f883b2b07cc3f48fd83ec637b604c88ebf154026593b884c008bd24a6a193c0071cf1ee2529150a106f03ce6da7ee59f1e069414abe4b7152647e1ba8c3b4a029e7e13f5cd532f81ea92f89b3c8cf1dd9788976c1c2236bedf071658199589353d7809fa6b9e8d70d243b5963658217759e5cd0108f763eb40cdb12f0becf46c246f92415811730a26d68eda3fa1d15e34f9c1ec7c23d5aba14cb73c3217416cdea6674ce445964493c386eb292110b1583835033d392e71dd15efd17d5b3fb9fb30070ce0486ae3f0521ae64f9e4d4b66c5ca1ae4f43c431afbcfc3add358a3bc35b999e1ea5dcf9d70a5bc04e06c17d5b178028981e3dbe6961954fa3d5e915030af60850c40e79ea5f7883f190c1bd6d80fc478335ccb32c3ec3e10f39d2714934daa06e90a4352643c4cf167c6b2a0084bdc72b469691afd8b874770de284feea64158eb9506b0209e8ade5cbafa36194fa692548c3607042a8dbffdc319fdc0e7ae30732d2e1290ad48612163f25bb5d13ef95beaecbd2f4a62b6518e4f493de6bad9449fd7f87484822873f32a410f2d760eb536771258a7c90e4ff06990764fcb512651192df9a8a79741339b552c5327fb0081485671428c40f5cbc373522d6e6d73a6af14025e6d53dd2bb22841b970ac656d581a620d0ca624a131d3aeadf158e1a4b8ec600b75849a71fe1c065f2b0d44644f140627937987ffe7e989efbd96a0d405b8ce33f12e2e18b41cfef43c1d6d9cf37335bd579cf492ea2610f4cea1b972b78f9102d82498cecdd1fac2e96e1fd0c6d9505e3f80c1f946d4f2b4fb866ebf26d576356c4d08373b370945474f40548995b190870bda62b27de9c9cb6986e36474cd3be092878c832e3ee641e9b8c02eb9e5db17629e22d4c17a9824d04afcf0dcfa1524e09bf0ad56dd51919f915ac61ed92f11bd737592a95504fac93d37200a0af3e456ff2d88f228e36ced87e530204452c23c207670145f26bec68870548c0c0878e5626d25a841533666d15fe77cc6326a5a48495021bb8312812070932ea93d4dae7782d52a949a29142e8c4604a39c3e8cc6074fa484524471a489f7129af151b58938581f1f8d2df7c512b11ba79fb04c6de814e5240bd48488508c458d1b0cf5e93ff8aff02ad8c3defd8cb25e55b0ac7c3c8a028a93a4d4cbef6e367e0d621fedd8cff74df53d7c694aa5bceeca2fa9ab99886ce66acb539028f32f8c3acfa117f5398a8dad42ffc6521528610c4cd32fafa0177be8ed2bf3fc1293f631cc7f2851c3dd0c560ad839b416ed68815d94bec33f9bfd1ea97c34970ae6bd630d6d776eacabf8fc964f55743e253497b3e119182a48dad614e01bb6f7c1ce8cb4e49f13d126e59d2019b0752e83d66ebfc973b1b6638efb2c7b05a8575b00485add4e738b5f4e3191c8b89782ebd6724b9c9fe0134c7a5fec4f6647ba3fad4a347fbf615c7cf7ac4e44f3ece06954273246814dacaa4d8efaa09d7427b37a15f38e781f10559e95b73af1e06bef539ac130971a13a75de283b96896e9ecbed3d94b1d7b599161b5a0e8391b03755e1286ea1fd4c259e70b8bdd506f0273f0dff95ec260b68760228738f0849b28ece4d6c333011c497f5c4efb717de1a72a3a31e4a1fc809ad965560cfbbad563f136b28d796e25b69108dc79985f898d22d4ce65ccf9fb49e1446eead1be2dbc76446fe8cf2aec9575c4651d33bae90c6114293b6e9d47682f1cc0cca04a70dd9ce6ee520774d54bbf0a6d6b16a1512899fb4e5aba200894b4209bbdd5cbc6318a1205ce53e01ce16349fbcfffd9a28cdfbac94bc927d33c30e64d73359768fe926f8755f53075bba3b672d6b54779ec72cd0c94b4a7f5edfd83f4cbff84f0ede5e46f3bd8c841ccd8b116d7ab850f142ca04838b36c45a84286f6b146ae9b8d89fc609f536d1fdde4a6274471302d9d66afc8102277f4e1e6140250f0028aa913a12c6746d645db9235a70f887dc92944f9dac0032cb10c7457202df9fe3040fcdbe6ae212cff0b2d7d3a22fc6af1547054559f66486673abce8445c33d1c7758527e79ff5465e1b3ad98fe13c4eebaf746e687dd09b57942b7c42c7048e24a19ade859eb0eb4c3511c47b4c8b2dd670e696516a3ca52e2a1c9e3a61f2d8fbaaaf68f0c1ef9bc05b35e9dd055e0b18495987f7d3cff8c15ddfa9950433efed624939ce363f46fad1344c7692a2d58378a47542768c7575b59c4cf224ce4cb505a319680456b0a84e929fff97457e0f13540c2bdaf642790fd6a7acf6f2e70e687783de719c7b9bf082ed65cf901ee48d8bd7c2001afe9178932ea1a31519a82c499f5495dce22416fe1b5a0c517b504be0630a487572ce4704a7099f0f46c1dc3052a71db16d30eeff71188c3e3eaee14d52703297abe61c0ce66733dffdf4f67f73e757428a14d7e37acd5b4c5b10c5752b040d9b6dcc6033be58882aeeddb9ecd091988f95234d691b335aa52f00d844a928a566ca88d28a728436e9e16ce9dc1f6df85c980e4ea7e437b05a9bbb28e785c5b0619439e4921496e8e829c28c904814fa7289401da4318cc0b2c4b5feb4ece0a80ab5d9ec9d31067b39b0af51d79995b9b3d121666c72fe6c49e0c644ba98b50a04e00bfa585e7d4c53b886b033b0f169dcb458bdaf8397aa811ba50a050c3070fec03e9a655a20bf462ff81b85f127150776b8ccdfc099f62ab3e0c4fd02daaf053bc1fc563adb525b5059be92e42086dc923049587221b1e000899be0b3eddde20bf1594e5a958375e7074ea75757a704857a207e813d8a46b9c46fe2f0760ed6809886181889cd73f6fc5ad83baf6171f916efcab4b6e064cd731d4798d0d453a06c68cf6bfad34da92ece96af8b3b65677d60b63c924ad5ff38722f3605d27eb3d2cb26ec406b9222014040cf25bb06cfaf74be1205c327d3d936eaf8b5f585da2d7b99e6f8815ed77640dd3a8ba19346eaeba1187d91a9002195e83903d25ed20b4e0496e4f135358b75bdbb6aa4a5d53b31d42553cb477bf1d0483b84c1529e1228673497db8a6e8dfe33d3327fb7e9a162d6dbfcc384c998ac80c867b38a7d3c5509d1f55832dfb993de6507315fbd8a649c55d210c06a73adcacebf16d9559216e0f5692498fe68f11fbf358a498e0c7436b42a35926a748316795772a5a60e1d5f203452a3eed61dff479652f0faa796917214db48d442eccde28414d430302b96c443b627269", 0x1000, 0x4, &(0x7f0000000040)={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @bcast]}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x6, @multicast}, 0x30, {0x2, 0x4e20, @broadcast}, 'tunl0\x00'}) [ 649.891994] xt_conntrack: cannot load conntrack support for proto=10 [ 649.905177] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:41:46 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000140), 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x2, 0x2) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ee2f8292dc087b2a8e0b7d9e58e04dd9a71f5c8b7095c2aa624f1737783006388d4811fec617efa68527db1ba19b32ab7288871d5ea39f6119174df93f0e2dbaaa665ce1861d5ed553ecec7db45017affbde88718648a94089cac5e732b92ea2a880a1b3b02b4f951f732a0e2694ce382ce002daa4aa73f6edb11075fdc65b2b958f679848001c56555f6b5b610ebe51e0059dc209b920c4a68e32f110a73fc7674133a5a678747b49861c812f49b1"]) 15:41:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000000)={0x9, 0x0, 0x300d, 0x6, 0x5, {0x80, 0x1}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x70bd2a, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x30}}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = accept(r2, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000040)=0x80) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x401}, 0x55) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 649.965943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.980737] attempt to access beyond end of device [ 649.997037] loop4: rw=12288, want=8200, limit=20 [ 650.017867] attempt to access beyond end of device [ 650.040786] loop4: rw=12288, want=12296, limit=20 [ 650.058645] attempt to access beyond end of device [ 650.064566] loop4: rw=12288, want=8200, limit=20 [ 650.114183] attempt to access beyond end of device [ 650.146354] loop4: rw=12288, want=12296, limit=20 [ 650.162770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) move_pages(r6, 0x9, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e03000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000040)=[0x40], &(0x7f0000000100)=[0x0], 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:46 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth1\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x3, 0x7, 0x8f8, 0x9, 0x6, 0x1, 0x4, 0x6}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000000000000000008156e922e76b822100"/40]) [ 650.239451] attempt to access beyond end of device [ 650.244426] loop4: rw=12288, want=8200, limit=20 [ 650.279306] attempt to access beyond end of device 15:41:46 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SMI(r1, 0xaeb7) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00e457ade46fc0c4381b9340acb7efd487990a53ec64a8410c47fea760a20370dbe370eb131db25ac09659e39b519a9b86b6c5a80041ce6b3bb2f82e061d0c5a3b67a56632df956d55ba6c1eeab1107e4cc9f672944e1dd65e6f7336273477c172528aa868c9f14c968f2789b7637e48874fc7b8248f975fd0ef7de525d8d8e40535035d61c78293702a0ae945d4303b528b3011b556ca"]) [ 650.301792] loop4: rw=12288, want=12296, limit=20 [ 650.319692] attempt to access beyond end of device [ 650.351547] loop4: rw=12288, want=8200, limit=20 [ 650.372360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.385910] attempt to access beyond end of device [ 650.429477] loop4: rw=12288, want=12296, limit=20 15:41:46 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x5}], 0xe2000, &(0x7f0000000040)={[{@noinline_data='noinline_data'}]}) 15:41:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:41:47 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f00000004c0)=""/224, 0xe0}], 0x5, &(0x7f0000000640)=""/246, 0xf6}, 0xfffffff8}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/75, 0x4b}, {&(0x7f0000000840)=""/77, 0x4d}], 0x2, &(0x7f00000008c0)=""/26, 0x1a}, 0x6}], 0x2, 0x10040, &(0x7f0000000980)={0x77359400}) getsockopt$inet_dccp_int(r0, 0x21, 0x16, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) [ 650.711237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.727418] Bluetooth: hci3 command 0x0419 tx timeout [ 650.751372] f2fs_msg: 232 callbacks suppressed [ 650.751381] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.786762] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 15:41:47 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=ANY=[@ANYBLOB="50200000080211000001080211000001505050505050050207000000000000006400104000060101010101010103e00980710701017f01012e0065d3970516358222a7efe643fa0b4e7eb3bf2e00368a5f88a35e2a0d8985d7175a8121b080a08e465361edff009765ade49df4632df8e7984243416bf16cb3d016"], 0x3a) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0xb0843, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000240), 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000fb01000000080009c69dcfc600"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x4, 0x1c, 0xc6a}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x26df}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x54}}, 0x8010) [ 650.808728] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.823710] F2FS-fs (loop5): invalid crc value [ 650.823798] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 650.830607] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 650.846924] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 650.856000] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.872112] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 650.874683] attempt to access beyond end of device [ 650.885463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.898379] F2FS-fs (loop5): invalid crc value [ 650.920864] loop4: rw=12288, want=8200, limit=20 [ 650.932851] attempt to access beyond end of device [ 650.954969] loop4: rw=12288, want=12296, limit=20 [ 650.969839] attempt to access beyond end of device [ 650.987454] loop4: rw=12288, want=8200, limit=20 [ 651.002778] attempt to access beyond end of device [ 651.014734] loop4: rw=12288, want=12296, limit=20 15:41:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0xe5, 0x6, 0x10001, 0x2, 0x5}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xe8, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9b65}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xf87}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xff0000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x826}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xb9}, @CTA_TIMEOUT_DCCP_REQUEST={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7fff}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24008810}, 0x20004000) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 651.080545] attempt to access beyond end of device [ 651.089044] loop4: rw=12288, want=8200, limit=20 [ 651.114446] attempt to access beyond end of device [ 651.135571] loop4: rw=12288, want=12296, limit=20 [ 651.154589] attempt to access beyond end of device [ 651.166717] loop4: rw=12288, want=8200, limit=20 [ 651.181341] attempt to access beyond end of device [ 651.198548] loop4: rw=12288, want=12296, limit=20 [ 651.212180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:47 executing program 2: syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000240)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @broadcast, {0x6, 0x872}, @device_b}, {0x9, 0x0, 0x2, 0x0, 0x3}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x59}, @device_a, @broadcast, @initial, {0xe, 0x2}}, {0x6, 0x0, 0x2, 0x1, 0x9}}}, @random="67d8b6db987189ec0f68f9fbe8f771af92808c754b64ee815d30d87ce9a00dd0306559082d4a98a4ec82da18a66f6a4c12a309caea205c4787a5d36753d26f5f9640dff6f160a54f6540c489294815de007fc55bc11216d9b134673974af475315d6575d34384d3e1a5965569d49ffdc986d598f5fb2cc61204a2647c684801093c0b386699b096dcfa96540cb00553a8aca0bac66ca18a034feadbf3af38c95d98c1f33beea9ba1d73d02df8813bfa6db15d913b1667dc3472fca744170"}, 0xfe) 15:41:47 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xfb]}, 0x8, 0x80800) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000340)={0x0, 0x200, 0x2}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="1e848e1cadff1a94a0f066f89c5f484a844c352681921c453c1c75d9cfd91841749a51bad5bff4a9e67101384dc2b7d2b163c2af475a7b8d4545fbb3c3c910c954fdb4ab3a651dab3de3fce70f6f003a5c92a2cd87f3728099e599d1e9bb5ca3667afb3ce9845e4087ec2267c61957bdc016ee2394337e25821740d0bebafb069a4cd56960372a6a48c15149d1d69a267b2d3777b96ceb5b68e03a363bb1385bc48c0214f4ef0d606ab9c7ea32464cb9bc0ab9de47581356eff2c98a74732106e7adbf176e5a5c09a663c2", 0x0, 0x9}], 0x0, &(0x7f0000000140)={[{@user_xattr='user_xattr'}]}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000002c0)) [ 651.364030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:47 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r0, 0x125f, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8080, 0x60) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x10a02, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) dup2(r2, r3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) 15:41:48 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)=ANY=[@ANYBLOB]) [ 651.649482] attempt to access beyond end of device [ 651.665484] loop4: rw=12288, want=8200, limit=20 [ 651.684291] attempt to access beyond end of device 15:41:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x8, 0x6}) [ 651.700148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.711592] xt_conntrack: cannot load conntrack support for proto=10 [ 651.736521] loop4: rw=12288, want=12296, limit=20 [ 651.742413] attempt to access beyond end of device [ 651.757430] loop4: rw=12288, want=8200, limit=20 [ 651.762434] attempt to access beyond end of device [ 651.767710] loop4: rw=12288, want=12296, limit=20 15:41:48 executing program 2: socket$tipc(0x1e, 0x5, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1f0) [ 651.849081] attempt to access beyond end of device [ 651.854058] loop4: rw=12288, want=8200, limit=20 [ 651.875292] attempt to access beyond end of device [ 651.892506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.906531] loop4: rw=12288, want=12296, limit=20 [ 651.923241] attempt to access beyond end of device [ 651.936367] loop4: rw=12288, want=8200, limit=20 15:41:48 executing program 4: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f696e6cff01655f64656e7472792c00"]) [ 651.945575] xt_conntrack: cannot load conntrack support for proto=10 [ 651.957088] attempt to access beyond end of device [ 651.972122] loop4: rw=12288, want=12296, limit=20 15:41:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0)={0x27, 0x0, 0x1, 0x4, 0x81, 0x7, "ba3bb9d135cbc3034f8333bdbf57a6c12cfce4da7cf29b25cff5bb4d71a4d5742b36614f46e1f7c6aab691218ac156d4c77b67de64d3f571cf6afb7a00edbc", 0x39}, 0x60) r1 = accept4(r0, &(0x7f0000000600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000000)=0x80, 0x80800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000680)=@req={0x400, 0x6, 0x4c406f73}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x400002, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b00001e0000000200000002000000020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000000240fbbb170e5aa45d016b5373de12c4bf1e8b7117f7ace7640a03ceb390a2620900", 0x89, 0x1400}], 0x2008045, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000006c0)) [ 652.148158] print_req_error: I/O error, dev loop4, sector 16 15:41:48 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xc40, 0x7}, 0x8) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1f0) [ 652.259185] xt_conntrack: cannot load conntrack support for proto=10 [ 652.356189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.356611] xt_conntrack: cannot load conntrack support for proto=10 15:41:48 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x200) statx(r0, &(0x7f0000000080)='./file0\x00', 0x4000, 0x800, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0xc041) [ 652.612219] attempt to access beyond end of device [ 652.619732] loop4: rw=12288, want=8200, limit=20 [ 652.635009] attempt to access beyond end of device [ 652.656727] loop4: rw=12288, want=12296, limit=20 [ 652.674060] attempt to access beyond end of device [ 652.685907] loop4: rw=12288, want=8200, limit=20 [ 652.692953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.700196] attempt to access beyond end of device 15:41:49 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1f0) [ 652.720341] loop4: rw=12288, want=12296, limit=20 [ 652.784171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.820487] attempt to access beyond end of device [ 652.826324] loop4: rw=12288, want=8200, limit=20 15:41:49 executing program 4: syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x13fe}], 0x0, &(0x7f0000000040)={[{@whint_mode_user='whint_mode=user-based'}], [{@seclabel='seclabel'}]}) [ 652.854368] attempt to access beyond end of device [ 652.867906] loop4: rw=12288, want=12296, limit=20 [ 652.873402] attempt to access beyond end of device [ 652.878641] loop4: rw=12288, want=8200, limit=20 [ 652.883671] attempt to access beyond end of device [ 652.889319] loop4: rw=12288, want=12296, limit=20 15:41:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)={[{@noinline_dentry='noinline_dentry'}], [{@uid_gt={'uid>', r1}}]}) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') [ 653.008045] print_req_error: I/O error, dev loop4, sector 16 15:41:49 executing program 2: lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x3, 0x40}, {0x3ff, 0x10001}]}, 0x14, 0x1) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1f0) [ 653.115458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.136788] xt_conntrack: cannot load conntrack support for proto=10 15:41:49 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) r1 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) fremovexattr(r1, &(0x7f0000000040)=@random={'osx.', 'noinline_dentry'}) [ 653.220162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.236875] xt_conntrack: cannot load conntrack support for proto=10 [ 653.438280] attempt to access beyond end of device [ 653.444460] loop4: rw=12288, want=8200, limit=20 [ 653.455020] attempt to access beyond end of device [ 653.468313] loop4: rw=12288, want=12296, limit=20 [ 653.479447] attempt to access beyond end of device [ 653.491237] loop4: rw=12288, want=8200, limit=20 [ 653.501368] attempt to access beyond end of device [ 653.516015] loop4: rw=12288, want=12296, limit=20 [ 654.221124] attempt to access beyond end of device [ 654.228607] loop4: rw=12288, want=8200, limit=20 [ 654.233654] attempt to access beyond end of device [ 654.253814] loop4: rw=12288, want=12296, limit=20 [ 654.264966] attempt to access beyond end of device [ 654.278334] loop4: rw=12288, want=8200, limit=20 [ 654.289999] attempt to access beyond end of device [ 654.301124] loop4: rw=12288, want=12296, limit=20 15:41:51 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x6, @local, 0x4e20, 0x0, 'ovf\x00', 0x9, 0x0, 0x34}, {@broadcast, 0x4e22, 0x0, 0x800, 0x3ff, 0x200}}, 0x44) r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x1, 0x4, 0xbe40, 0x5, 0xffffffffffffffff}) 15:41:51 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x8137}, @val={0x2, 0x0, 0x1, 0x7, 0xfff7, 0x4000}, @ipv6=@udp={0x6, 0x6, "2d3882", 0x88, 0x11, 0x1, @private2, @private0={0xfc, 0x0, [], 0x1}, {[@hopopts={0x67, 0x8, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x8, 0x29, "4bcc05863a912d15dd8121bde63573fd649aa322df5d31c3992ff772308d1286d00a612d838bdd739c"}, @enc_lim]}, @fragment={0x62, 0x0, 0x5, 0x0, 0x0, 0x5, 0x64}], {0x4e22, 0x4e22, 0x38, 0x0, @opaque="a3a1e60ef8c8c08d4b43a1c48ceadef1ba98e1384ba5b0b623dfc643cc953852f7ac18bb085af6211f4c47212a1df0d5"}}}}, 0xbe) 15:41:51 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) [ 654.841312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.881423] attempt to access beyond end of device [ 654.886401] loop4: rw=12288, want=8200, limit=20 15:41:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x100000000, r2}) [ 654.915425] attempt to access beyond end of device [ 654.920520] loop4: rw=12288, want=12296, limit=20 [ 654.932490] attempt to access beyond end of device [ 654.940872] loop4: rw=12288, want=8200, limit=20 [ 654.972837] attempt to access beyond end of device 15:41:51 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, [{{r0}, 0x76d}]}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7472792c00d33fd5d1c2eba11c1c841c9ec086780d45bc529dabd57b42f5606fef46b6b69d8a532bed14968164e015a7d9be09cba30c2e19c625281b0d2fb5e322bd3d97c624118673b38f097311cdac83324159e41c500537579be385623eeadae982d829231c74b2c35def485743e148000000000919a0934fc21c8dc37a2a4a82147a02e86df5e2d46bb548b3761af68d809dd42413e2fd1fbb59fee7224f06000000000000004e2bf9b14e10ca0a6fa6270fab5052d49ecc9ae47e1eab629a3380f581bf18d8c281914b00"/227]) [ 655.009455] loop4: rw=12288, want=12296, limit=20 15:41:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'wg2\x00', {}, 0x7fff}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f69d4ec544ad65f64656e74b6cdaf3a"]) [ 655.087055] attempt to access beyond end of device [ 655.094928] loop4: rw=12288, want=8200, limit=20 [ 655.116512] attempt to access beyond end of device [ 655.136610] loop4: rw=12288, want=12296, limit=20 [ 655.182897] attempt to access beyond end of device [ 655.194544] loop4: rw=12288, want=8200, limit=20 [ 655.205056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.209727] attempt to access beyond end of device 15:41:51 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) 15:41:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:41:51 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) [ 655.234309] xt_conntrack: cannot load conntrack support for proto=10 [ 655.255340] loop4: rw=12288, want=12296, limit=20 [ 655.289963] Bluetooth: hci2 command 0x0406 tx timeout 15:41:51 executing program 4: statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x750, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000580)='./file0\x00', 0xfffffffffffffffc, 0x3, &(0x7f0000000080)=[{&(0x7f00000002c0)="6d911845bd011c653cf17435af454f738c0018875ca6c6f93bdbeb50e882d432c02020d1d283ca0d2796e6ffda22e0aa575510d4d0d8e561291282fa53315672cc08d48a665885325db290fc170e05b92e32da889a9a9f5acc7b5cf7d63146779ebd591d1a46f20ae2ff6ae02de2a86ea18ccd624b1fbc89734bcc4e5402416a36bd69279a98135454ed0a4ec68ffbb39fd67894b4073cb5ff41af162ac6c60e0a2afea56012da4793e00e1b7c9df9341422d1646a990fcd2dc2832f0c04aa0b87f3255ee3d7666ab273436904c9d2a6f9847ace67a80f0e9de2cd4d8b4a0c445bb193e960675e5bc55d6e11bed348c8b14a5eedd9dad91b", 0xf8, 0xdf1}, {&(0x7f00000003c0)="0e154c8dded7c09c78629c27062240931370b52519a2d0236d0a1e6e083647a3e56afcaf28c0856d3bb374c7a9bc108423c2ac5db2c929fe502e304fc7bcb2202e10db965b3b85df13f62b5cf75f58c61f215e73a0ecb521018f3ec4bc7db735fb5bf67955a2c71853588bd9c1c7060753b7cb5aa8afa777eecc0c09c29cc13dc3bb3eb26fa41945fcba57f805cb1741bea9a6f5d95edb5a0a975cb2e8c33bde6ca3708a4e5ad48f380d348ce5f5f105d75e3e14aebd9ef38d1d777ba3ac25f7f2206163a02565369ee51162e2f3c2379d225240ca4259e83b2bb6990495981347dd0ae878685aa1ea88fcc9458d1d1c61efbd4c61f5c0", 0xf7, 0x8}, {&(0x7f00000004c0)="72f339b4f467b7d6e737cf24428811fa5da2d2e5183fa8d0132111b322289c5cc43b7e16bb063819a40fa6c2144820aa45df3b0e52a2811306f09a9c9d4462d4207c356e747f9126af9df1a5a3a0aa0ee32541d6a84fc74bda4522269323c989789e83203dc4b09161ead046dfb250bc963e91a121efb4308d1700d52cbd99e1e8d8d9d682d8813f96a65211acb66017ad960d9ba09fdb822714992d", 0x9c, 0x81}], 0x5008, &(0x7f0000000140)={[{@alloc_mode_reuse='alloc_mode=reuse'}, {@inline_dentry='inline_dentry'}], [{@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r0}}]}) 15:41:51 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x181402, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1, 0x7fffffff) connect$phonet_pipe(r1, &(0x7f00000001c0)={0x23, 0x5, 0x1, 0x87}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x0, 0x48370402, &(0x7f0000000080)}) [ 655.325869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:51 executing program 3: read$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=""/239, 0xef) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7472792c00d225d5b31554d3b8610c4602feac0c627ba0eaa300deef07702097c1352d687f5710c79139ea21d5595a915b875e379c206da527be07fea12361801aa7c1abcc07"]) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x28) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000340)={0x2, 0x8, {0x53, 0x200, 0xfbef, {0x9, 0xeaf1}, {0x9}, @period={0x5c, 0x6, 0x800, 0x1a15, 0x2, {0x7, 0x6, 0x0, 0x7}, 0x1, &(0x7f0000000180)=[0x8644]}}, {0x54, 0x4, 0x100, {0x9, 0x4}, {0xa3db, 0x6}, @cond=[{0xff, 0x5643, 0x7, 0x2, 0x8, 0xfff}, {0x1, 0x8, 0x6, 0x3, 0xa9e2, 0xff}]}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20c902, 0x0) 15:41:51 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2cc198c9c1c53df7"]) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7f) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) recvfrom$rose(r0, &(0x7f0000000040)=""/39, 0x27, 0x0, 0x0, 0x0) 15:41:51 executing program 3: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0/file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x13fc}], 0x48001, &(0x7f0000000040)={[{@noinline_dentry='noinline_dentry'}]}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x8802, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x6], 0x1, 0x800, 0x0, 0xffffffffffffffff}) recvfrom$phonet(r1, &(0x7f0000000240)=""/169, 0xa9, 0x142, &(0x7f00000001c0)={0x23, 0x2, 0x4, 0x7f}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 15:41:51 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)=ANY=[@ANYBLOB='v']) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x60080) 15:41:52 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="02f5845a39d75d4a79c87bfb9bf8c051b3537ca0460ae6f490320300000015bae01426f99bc0776c5db8e9d6824c8df0e0626d01150062256038b6d9c8b100020000"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x1}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000024c0), &(0x7f0000002540)=0x68) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) [ 655.680455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:52 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) 15:41:52 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/496], 0x1f0) 15:41:52 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x79, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000000280)="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", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:41:52 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x100000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="8a6f696e6c6902005f6400007472792c00"]) [ 655.809123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.931811] f2fs_msg: 224 callbacks suppressed [ 655.931838] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 655.958588] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 655.981659] F2FS-fs (loop5): invalid crc value [ 655.995189] F2FS-fs (loop5): invalid crc value [ 656.006056] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 656.023721] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 656.034177] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 656.046853] F2FS-fs (loop5): invalid crc value [ 656.061643] F2FS-fs (loop5): invalid crc value [ 656.072403] F2FS-fs (loop5): Failed to get valid F2FS checkpoint 15:41:52 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff7000/0x6000)=nil, 0x6000}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000000280)="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", 0x154, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 656.127933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:52 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x4}) socket$bt_hidp(0x1f, 0x3, 0x6) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x210) [ 656.273875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:52 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10005200}, 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18c4, 0x0, 0x500, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x18, 0x3, "32118c31b8720a4f15275fc18ee72f3bdcbe1600"}, @ETHTOOL_A_WOL_MODES={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "9472d7ad2d063a14098d2f6bc52052a6406f3d7543272ec490f2d96a75eafbc0bd78c33e7316be3e00a351c8"}, @ETHTOOL_A_BITSET_VALUE={0x54, 0x4, "a0bb9da7a10a45b77f0d512f7ff8719520092959bfca9ff4e4cf074e12b4f414fff6dedda17c0d5fa3ac6f3799b8bf58f7ed12739377240e7d7a93278c3ca26809b1b77c0db55feae3d5996ee791a34c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0xa6, 0x3, "74cdb008ea99d6830a2673845859793e70e5f7a9b1a6d78c0a60a94b5e6312f80cffd762ab80936c42dddcdbfbf6e7d53f38f2332cdaadb7812da459db09346c31a08dda02369adcff27606666b8f16c2d8c07e07f8d1576879e0b8c8e12eaedc55a54a70c5b02bc67ab34510ab980ef45dd6cce0156221fc2f5f521335251346b015d31dddf15f83125e5c5b431b22809450e22a5ec1543bd55b2f98912e469d486"}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x364, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "c48bc074d74c4d2746eddfc419f160ec674ba9c4bd6ee410e9cac5e7cb800b2a8d243a2ad3977121e2333e18552aab0492b458cb55be30a37ac2747dc993dd1893335ad3a0f358f79ece6ff6a330ce97e598b8f7461d48c3ac204cfd79ac18717848e04b8d97650ee1450004c4c21c13cb60d86000829b85ab45c33f1102d009a7f4c074f282fca8fd1b3578f14f16f5dc78c46fd0874298f36ab4da97da0c43622455ca5f40e8b1d6bb513fc8404d71c4128adaec0b5044d8bee8e47b50a3fec68524901d8aa8002ad1563307ca9b4c5c4e6a33f3ddb8a2557503ba4c8c4a3a8e69a13c3962e657f0663f2a4185eeb9eaad49a8f88aedf9e6130ab2c3"}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "32cbe99741acdfa1b4c6033d2dc2e5de67b4468ac26b6d1ba4550ccbca625147698236322384008903e86ed2d4ef2d2de4c524382cbf8ad4495d0ca9b855c134513ceade3acdd4813f1dbd77ac1fe2460fc8b4f24ed67c6feb0402d47b071c3170b79f1435d520b3c322872a93049fd41cedf6a117c65e53b663afa6f2ad3a4869034dcb30ff4c300bfbf39e18c5d9f4cb5603696ba1be53e42f94c4e3a6e5625d455491680b77c20d54d54bf23a0bd5fba2ec4a485a221ab551c14d4d4926be0a6d584e2e21b3badecb5090dcf0fab2ff3dd40cd6a584ad5f6774fc3cd93750a0ced0dcdf02bbdbbcabb8bad7"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "152e4b480d91baa4abb5f1982d381ec332b240b83ec3524455ebac8d36cd13f305fb6e3e8bf4c3be7cad78afa730224d567d1510d884f6347fc5f487d67d899ce7524358bdd597cfa1822e8d20716c5088"}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "ab11d069b7a06d92f74ddfbb3c38e0561d5c15dc383bb54089dd64ef3bc6b0e1efdf9caffd009b077e432db1b8b73fcaa8b45e17844a0576a9e10eb438a706059d2734f146f374cafa9ed80c324b20ad94beaefa083910b5f715fe2ba97b5edda97b8e173e8857753bb96d46c43a1b56629308fb2c8e5a26df786ed418ad2186bf8c08def973e5f2cbe09b5a37d0b06fa4813a7c0af1dbfd9eae7d69d9b59ea621281168cf49b6957296b8fc1cfb973a486f3a60c040b4bcbd9263a00f5b976ba6b0fcfac957151c9913d6b1073e625370cefeebd65e8d011abea148cb8cf528b79b354fcd24abea6edaa1b8a47a79c13096651de4ee15a8ca"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'noinline_dentry'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'noinline_dentry'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9fcd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}:&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'noinline_dentry'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '(/#-(^*,--\xd6h+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x22c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "c1777b8cf802ccbd477e588ea6e4527f3326e530e61115083ae27c53f85e0abcd92fe1ddf89e016fddd58344db83527095e2ccc2e5c66c58aa9be6f89393c0a9febf08ef485e091d72fe4d24b073924eac184e3f402b351da0f821997c7ab02b665c2740157ebf6a57012d92925bc079f1e2e39c1895d5e5c4f4c99d34558e9b9c70f907a9ba2a62377f52cd50338097b4d9ff47fe87ab5a52475c4d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x718b}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "7af5b91c11230854514d06658bd4f175d454761371626c9090e15bc7834c3bb24ffd0cc2c1f12c8b4f2655a775c716819daebe83d82d47c78815d5407e604d52e5e09b1cb82ebdb9a105f957a44cf8c5926f34a3ec6f7377872b3737bea591e28a3e310b063f7a573fe7540b6259da0af38ac38c5b04f271f32692c801ded54b549546e7871bbb3e43f15e9d543864ec48ce353ccd71"}, @ETHTOOL_A_BITSET_VALUE={0xe2, 0x4, "0e480952abbc96737a8264906acd08bae0f85bd844252ae2d2d1fa2286a02b1fd8d182b1945204665a525c9190b45241a4e034934b220b36beb72d73a1c14e53aea8c03633259224e90d5a31ba92f85f13cac8649728ab945ae9c8606b12184bb47b651d367320525a7c395dd8c3c28b45569eab178eda6a5e486becfe87755bce546d635aa9182ff007e1e45a359270733c521237929736dd5a87dd1275ad97d7e4878dfd5274d17e51d88e42f8ebf663e60ab3476d49ae0e763de9670c06c1caf60a053041fbbfc8d6a8fa3db9055521e3e6758a27ed6303930402bdf9"}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x18c4}, 0x1, 0x0, 0x0, 0x8000}, 0x4410) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x7}, "3cd87f859063379f", "f8321a3176ef61026f848b5e8ad9a967", "9a9d7ae3", "349a9337de14452c"}, 0x28) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x8000, 0x0) fcntl$setsig(r2, 0xa, 0x14) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000140)={0x2, 0x31}, 0x2) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000240)={0x64, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x30000814}, 0x4004000) 15:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000540)={0x64, 0x7d, 0x1, {{0x0, 0x4c, 0x0, 0xffffffff, {0x0, 0x0, 0x2}, 0x12040000, 0x2, 0x4, 0x1f, 0x6, '\\\x02*![&', 0x8, 'nl80211\x00', 0x5, 'gre0\x00', 0x6, 'wlan1\x00'}, 0x3, '[!&', 0xffffffffffffffff}}, 0x64) [ 656.543716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:53 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3dc) [ 656.593031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.615502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.684807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.694753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.740590] print_req_error: I/O error, dev loop4, sector 16 15:41:53 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = openat$vcs(0xffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x4440, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001a80)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000600)={{r2}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "f04c05878f60e977310eee12a2818738"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001540)={0x8, 0x5, {0x2, @usage, r3, 0x3, 0x9, 0xffffffff, 0xad5, 0x2, 0x0, @usage=0x5, 0x7fff, 0xfffffffd, [0x7ff, 0x8001, 0x9, 0xfffffffffffffff9, 0x6, 0x7]}, {0x9, @usage=0xfffffffffffffff9, r4, 0x401, 0xc3, 0x2, 0x3ff, 0x80000000, 0x8, @usage=0xff, 0x1, 0xa0c9, [0xffffffffffffff81, 0x2, 0xfff, 0x9, 0x3, 0xfae]}, {0x5, @usage=0x1, 0x0, 0x4797, 0x3, 0x1, 0x7f, 0x1ff, 0x400, @struct={0x3ff, 0x9}, 0x7fff, 0x80, [0x80, 0xe1, 0x5, 0x8001, 0x8d]}, {0x1, 0x40, 0x6}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000040)={0x1, 0x3, 0x1000, 0xdc, &(0x7f0000000380)="b73d773a71d1e1ce01e81fb92f37e0b3ee790b46c51c8f34497adee941bf68a6d0ac5e06bc602ffe9872872951a5a94833f98f077538bd8dce06b152ef38c760f2640a2ffbc15c1967ce6ef8f5a35d70e0d900d390b60ba23c7352f075869831b187651bcdf40f8aa26f98242fe52ee05e194b1e84c9fbfe92d4e9fdf45e574ceeb1cf53ff22620f67f85c32d7f139edd8aca8fc2f01983ab6a5df5631514c195d2e7774feec564d0500000033aa9f25fdd9f93bc2ee8195d5a8ac03d54f36d9e446645d7fbe4c914facedc02d6200"/220, 0x0, 0x0, 0xfffffffffffffffd}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000000c0)={0x1, 0x5}) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) 15:41:53 executing program 2: write$snddsp(0xffffffffffffffff, &(0x7f0000000240)="a3398a6315f25b9c26d5617a4e1f37915d272798e3eecdafdbc428b766cad7c0ef1eb63b81247f73409260d5d7600583c7be49b5c978d35d04f7041582720f244b8d156c3640a65cf83c09e9e428fa42aa6d1004b441934218289718dbd8bd815ad7a4a74f4c01e46fd1f0a6d6292931a45065ffbcb71426f4f625f1e126202d4e8f531d5f72c7dd02b3423be17692c5bed23c5d4f4251d7643d991f03786d7161c6b9d8b53c3ddf5837f216ee3c5763d756bbbc4bdd01f2667f00aa7381852aaf8bd44a8d14b1cafa18beb00cddb58a2ff7405c1ceb93d7dc3ba6201755f032f9a38242545d", 0xe6) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @initial, {0x5, 0x20}}, 0x0, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x1, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x80000) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) [ 657.023944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.072139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.114811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.124540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:53 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x4) [ 657.163194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:53 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0x3, 0x6}) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) [ 657.289457] attempt to access beyond end of device [ 657.301352] loop4: rw=12288, want=8200, limit=20 [ 657.312696] attempt to access beyond end of device 15:41:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/4\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xffff, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r10, 0x40106436, &(0x7f0000000100)={r11, 0xfff}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:53 executing program 3: times(&(0x7f00000000c0)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x403, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xbc, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc7}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48004}, 0x4048001) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x40, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x8}], 0x2000, &(0x7f0000000080)) [ 657.341881] loop4: rw=12288, want=12296, limit=20 [ 657.355495] attempt to access beyond end of device [ 657.368971] loop4: rw=12288, want=8200, limit=20 [ 657.379682] attempt to access beyond end of device 15:41:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x4, &(0x7f0000000080)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_FM_LOAD_INSTR(r3, 0x40285107) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='2\x00']) [ 657.393367] loop4: rw=12288, want=12296, limit=20 15:41:53 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 657.455758] attempt to access beyond end of device [ 657.463775] loop4: rw=12288, want=8200, limit=20 [ 657.490745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.496305] attempt to access beyond end of device 15:41:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30791200", @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 657.527070] loop4: rw=12288, want=12296, limit=20 15:41:53 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1eb) [ 657.566127] attempt to access beyond end of device [ 657.609530] loop4: rw=12288, want=8200, limit=20 15:41:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) fremovexattr(0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400400, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f69ce990000000000006e7472792c00"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 15:41:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000000c43932cc26587a38a13536695000003ffe45f63c3c4d86a2b00"/53, @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b000000000005002f00010000000600280003000000050033000200000005002d00000000000500370000000000"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xec5}]}, 0x2c}}, 0x0) [ 657.631850] attempt to access beyond end of device [ 657.650173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.654633] loop4: rw=12288, want=12296, limit=20 15:41:54 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@fastboot='fastboot'}]}) 15:41:54 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000002c0)={0x1, 0x3, 0x7}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x400000, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x8, 0x7, 0x81, 0x0, 0x80, 0x7, 0x9, 0x7f, 0x0, 0xc1, 0x1f, 0x80, 0x81, 0x8}, 0xe) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000001c0), 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_genetlink_get_family_id$smc(&(0x7f0000000300)='SMC_PNETID\x00') perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x81, 0x4, 0x3f, 0x7, 0x0, 0xfffffffffffffff7, 0x44, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000080), 0x2}, 0x51020, 0xe4, 0x2, 0x3, 0x7, 0x3}, 0xffffffffffffffff, 0x8, r0, 0x2) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8ad888e3f385248d9b28073bde21b900780ec151b5d4355cf1e3b5fc6a254ab8e5df0aae5656fb28f953b24e33e9f3b7fa1b35c4a191bd86015117ee047813950b1e7678321004b00e240d84f2cc2c55d9f43ddf3d77153899c8712f0ff9a1af345683874d1bfa796fea7e49ac5c347481c3cfd87acf72c941d31ef56d73a1ce9f4653ef13b1fedec69b84421b6ee9edd60cbd5972fe5e52c0f2b3341653b30478537f5939f711fcb714aadb0c8fdd26209b9baaa58ab06fb8"]) [ 657.782469] attempt to access beyond end of device [ 657.804599] loop4: rw=12288, want=8200, limit=20 15:41:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0027000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00;\x00\x00\x00\x00\x00\b\x00\v\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070061000000000000000203000008000300", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) [ 657.851618] attempt to access beyond end of device [ 657.920766] loop4: rw=12288, want=12296, limit=20 15:41:54 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x44800) [ 657.955397] attempt to access beyond end of device [ 657.973835] loop4: rw=12288, want=8200, limit=20 [ 657.982403] attempt to access beyond end of device [ 657.989812] loop4: rw=12288, want=12296, limit=20 [ 657.995190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.041863] attempt to access beyond end of device 15:41:54 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x7}, 0x520, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1401}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x7}, {&(0x7f0000000300)="00d0beedc4477ea9ad9f000000000000008db1610000000000004514606d005a65f8a714e8aff8000afd9a72fdf0b819df35b991d5b9750ffde8b57e8f7856aed44b108ae6c4b444bf21fe654124aba51cc0be7b0d20ad1e6dabad4b37ad59a20dadf16e527ff7bc81b61919fcf29c6a4fd1845ede4aed", 0x77, 0xf1b}, {&(0x7f0000012c00)="000000000000000000000000001be10000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000800ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000000180)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fdc}], 0x0, &(0x7f00000000c0)={[], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000080)=0x1) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6ac, 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000280)={0x1, 0x1, 0x8001}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000001c0)=""/31) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x7}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000003c0)=0x100, 0x4) [ 658.072365] loop4: rw=12288, want=8200, limit=20 [ 658.083186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.098504] attempt to access beyond end of device 15:41:54 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0xfff) [ 658.128607] loop4: rw=12288, want=12296, limit=20 [ 658.144763] attempt to access beyond end of device [ 658.155380] loop4: rw=12288, want=8200, limit=20 [ 658.160978] attempt to access beyond end of device [ 658.167767] loop4: rw=12288, want=12296, limit=20 15:41:54 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'f2fs\x00'}, {0x20, 'f2fs\x00'}, {0x20, 'W'}, {0x20, 'f2fs\x00'}], 0xa, "b087e77f63"}, 0x24) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00610d8232d388c9228f9d9212e70d5c3b120e764d6c01884f88dd651eee3bd01eb67aec00b834f9e7df17a9cb53a91e1b66d826039fc6c12cf2e3b83eb6a5290a439199ba2c3d5ef5f79178699a0b356387bae6224bc05b51857b6b8b80d19e56f2e100facff4964eb467401d7ee540"]) [ 658.332442] attempt to access beyond end of device [ 658.338770] loop4: rw=12288, want=8200, limit=20 [ 658.358279] attempt to access beyond end of device [ 658.379929] loop4: rw=12288, want=12296, limit=20 [ 658.397840] attempt to access beyond end of device [ 658.409359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'team_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000814}, 0x8000) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000600)={'nat\x00'}, &(0x7f0000000680)=0x78) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x1f0) 15:41:54 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x157, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 658.430017] loop4: rw=12288, want=8200, limit=20 [ 658.444282] attempt to access beyond end of device [ 658.470844] loop4: rw=12288, want=12296, limit=20 [ 658.512355] xt_conntrack: cannot load conntrack support for proto=10 [ 658.540403] attempt to access beyond end of device [ 658.548867] loop4: rw=12288, want=8200, limit=20 15:41:55 executing program 3: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)={[{@noinline_dentry='noinline_dentry'}, {@heap='heap'}]}) sysfs$2(0x2, 0x100, &(0x7f0000000080)=""/101) [ 658.560911] attempt to access beyond end of device [ 658.579458] loop4: rw=12288, want=12296, limit=20 [ 658.598784] attempt to access beyond end of device 15:41:55 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000000c0)={0x5e}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) [ 658.606522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.624466] loop4: rw=12288, want=8200, limit=20 15:41:55 executing program 3: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x1000, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:55 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f143b84e26e0700649f6eb472792c00c911889eeb8d40ca79a42975cc9ecf1e"]) 15:41:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) fremovexattr(0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400400, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f69ce990000000000006e7472792c00"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) [ 658.654532] attempt to access beyond end of device [ 658.665646] loop4: rw=12288, want=12296, limit=20 15:41:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)={0x18, 0x3, 0x83d, 0xfffffffffffffffa}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:55 executing program 4: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x80008, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f00000004c0)={[{@nouser_xattr='nouser_xattr'}]}) 15:41:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) fremovexattr(0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400400, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f69ce990000000000006e7472792c00"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 15:41:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', 'batadv0\x00'}, &(0x7f0000000300)='batadv\x00', 0x7, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xe, 0x81, 0x7, 0x12, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_key={0xb, 0x8, 0x270, 0x0, "fdc08a17a7a610393bdee198ca5487994aeaa5cc8cada513863d950fa60f4429d58816d67a6220f6e8e7ae751de9819e40d6769ff7e19ea8986575f81e4f714d1490f4c54b1c5f6f01965c616f56"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b, 0x3507}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x90}}, 0x20000801) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000203000008000300d40c591dc9458e25a06ba67b186088aa3a2b6a368470ba3f9da1ba46777bd95e2dabfc3a22e409d48823ee3797cd6ba77587ba8581c97aa0d10c7e2005415b0267ee13d4a954bef8c603a12ec1ffe1ffbf3486420c52b170934b467f6739e21f58bbf7c80bb2cd7b17818a834d543e16e9dc6525b3ea611b0f7209da093b24f3fcdd3a0fa71a886133c0cfaaf0e52fec44633d4c49ec978a5037c99664f1da5af9343c3c00f06e299d54ee645f711a2d03b0466d3912734ec8876ef6afcb137b3922cdf71d75b890bdc48d073647bb95bcdc6dcff67395cf8f0cec65f5ddfbb34f5d3b21e9816e22b25a8a94d85c8c8c29fd3b517e0e18d53b465bcb024abb77ec651f5e15f97c82e397e6de1310bce8ebeeaf7013992e765422cde8c2c4e04964764841579273eb92c5058d6084df43898a8bdfd473fbb18dd981e72094f002c2dea4618d407676419a769d1945b2ccb6f4ea588170b89cabec5130301c2affa1ce", @ANYRES32=r8, @ANYBLOB="0a000900030000000000000008000b00000000003a0d5f4d7992df46ee8eee06f65a4e5bc5ddac322160a9d51493d265e431ea20ce0449ff40756952962784dcc4d6499fa69461ce7fc7a0e66b16c72f7b4662af76087646fa0da91fd8399486a0ce6b2fb5e484fbf89c7a6ea934c02f1708162704d4f1b79e4cb4a634ced5fbe4"], 0x30}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) syz_mount_image$gfs2(&(0x7f0000000380)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x81, 0x4, &(0x7f0000001700)=[{&(0x7f00000006c0)="ee20935bd6998d63edb2358d2281282f9871cbb8a78c5f37cefec9e517e085e94375b7ba9c40217d342072a28aeca2c3948611a9ff58e984d251727c87d1aa76ab9b7b27f4ae10b7d9eff3317743dac75db334ef09bec89f4306e7746f722b3e29880c3ec83cb7e378f49dd9c03d413696ba3b76f6df0e8ffe7742d12ebb7bd02274446be35c035739075f3e3f8d3b4cfa4ddb2e7ef09d70e8518571269fd095fc820ff9ec1733b50b74fc6b5c876184128978ec2cbb6cb0405e56ea1f72dc29014b7492a0d5b06ade7cfba4141234e8b33a913b584c062ea58d9984a1ff6d48762181937ebf7f3428c706315e74a7326f877282b4f6fb0f33b5acd8044e9695cf7de960695363c1547e318bac1b8975a34f3ca2cee074969f12a5326b5d90cf4a21d2fe787737501dfdeb0d49542ccf977e93a45126905947ca84637de5e6d600d086021729f53d7336b0e396b5d45abc18d58e9b43779725d09ebf44f37cfc9555d0a9a79a7c8c2d4a3c2f2f042e08acf97f80d498ccc4cfdde97ad5738d9f72b7a3bce41991691992509f5ebbe4790b73f35383b89749b20409aaf9b77aa16c5862d4aa00d43557c664962d0f8abf456d95a927636b5583f437c14ba5ebd7cc53e00b60184e32b6cdbfdac963fc67b5e020e88d516389ecc69d8f9417d4128c15c8d2b2cf8da0a443a7df376db66132cfa3f24b1b6a6b8559f8225c5d16766bbe1373a8edbb7f06ef29227a0a6bd835d8fad0d93b647515830b883a120549660d9b0a88f644a62cbcc592cb097ff358169cf04feba01e568e27d9736f7103d186e74320f92063e6c713dc320601964448b84ee28c28365815076648596ec27b5074ac2828a7644a5b5dc1406d23156e600d783607d14b8bf62f540fb5ee727e63b41bc0f61601e442807367773721258360a314cd9e63ba8c0ed77009318f15879be802946f7138a53681edd47ed854a0486c93729f173c3f3bd408594eb44851ab5ee6de46e44a20cdf7fe8ddb829208cad7ea6fa74ca9f99fed9545341edcfa4c034491a99c914b04dd1dd064cf60684346c3503f76f22ab4ce7e0803b2e342c890097fd176e082c554a9bde228ffe4ab3f2f159dfbde5cda499557336d23aa6a9aa58aa642f11027209a6efbb983f849f3568e24ea33c64167913852f615daa91bb0cf1fc9e65cc0864e1ba1e18b43089b3a1b08531892a0172bc89cd0132da921a1454e7db489a1b381d1ce1111b7f3428d9cbe4676f08dc81fd13c6d37405f85ef6d57ee48760479a93b8486f011080542514f5dcc69a6fd584d4e37f2ab8578cd0a0b119a6a70a58d4463eea8ea16362b792b9542d7657b746ad1142e244aef0610ffcd62796e6ad93662faaec7d280f7b2a216c1339ba36b8c2c4d3936c5aef07bd8c1def998fea87abe4091cf4dd0bcdcda5ba19af6fe949871d028c33cee469785963d57c0e2dd09c7491f79ebeff375d5546a174311f99595ae7ce0f00b577d4753c99e37a3ac91bee94e4393f8ec081392098fa0bc376f8188cf4bcafbc2e42fc92ddba578d5479a85c5b8cdf5361b3ba522de7f1ce365920da09eb7b188f69b0f4342b51a2297a1d1a90dfd825d06bb6400bf12dbc6861b351eacc17c38d243eb033c8258d29ec59584d331af718f8cad7d705077e81b3e560cd75528ff63b43524e045d8045ae39280abfa6805f6416327a1d0b8fefb07df3f1c973e5fd3dd76f0a099a5e8977f3f753b9d80f6d75b8ac392ce7d20c7a8e05e62e392760db3875841a7021aa2ae52d19adad97c8fde934eedd10807da0ad3c72db750642b4e1301d71be3d21371c671702fcf60e6afc2d5792bc83c2bbe0f9bcbd7d1ce3a592075380e429ed51728b746b7da7affc9f14c688bcde9e0af9ae39a46d88995a4a5de0e6cbe8c9b3fe1f013918d4b015b21f3e2a92480d9fa7ec78e49d67507911b28e83229dac68d92f24bdde6c626f2796b1d8b4a715604c47c13a8a30c0449ac7427e0ac4ac1409e2e67a0180a5dbc77b144a414912494da702eeee17f9058720a3ef69f9289fcc99a1573904308b6cdc8c4f770a1a02bf7c029cd9cae5373f5edc955528acd0d1896325e24db1e1a54667d69b9762405b67fd4c18cee4dc6a400c70b77b9a54d98f2666826e3c66a7ff0ff3f005068daa0fe5713a7e487a178fdbe925f4d6bc8b2bede64e3c990c190eb6652904da4279feabb5f35df5fb3113c44e305ff9e256cd76d4bce8471501b5310db7acfcb23515f7cf4a85553c1a8ebe5673447a820416a306b02b464f1453fd40d0157fe6c67a42c01d825d1989978b4c5872e48221af7b27d3c4c4b5cfc336cf92bbe70750972e25735640e79bb18a3c137dc303f53070f0c94ac2097523c15e4171ccb4a0feaf86363fd3a26ea5257bc7a5c2ba95a933d2325fcba367b50895bda0425979d6851c6fb86de17fa107edf1a074271d404beac2aa369b773b5ffa41bd8a5032cc558ae97f61e091d91e8d63b573bba898ab084321c7afb4415513ff392f8fb5a70488f678998fb8f5f35d7435a34fb5a4cf8bf189d25ebc81ace77915b544a07ce561cc3b7a706b131850c3a28cde39cdb883c560d3be977a30ac104cda77f84cebbffc2dc37f9a95dfb13f61c7d1ef4eb3956713733e61095bded6e0f517ce86f2180cf2e0378f21d5bb8df14c9c4ddd8d4fc61bfd4946e12a47d01b3ec57bde6cf844c77a56bd23442ae9800d6992c5029bcd1352dffc624a370ab188bca22ee4ee7952a51c67661a9d471b35bad3a237c86af65595b1acdfc7c3d5357a971e8dc13992d8ed65e6382b236a191b789e945388d22785883189bc851710c06eee8ad61b92fec162c9b96abefdd194431936671b9f4b395bb6136fd6860ec162ab7799104c374ec05820bf0d17d8fc2966fe3d8d36f4066c45457a679e3852bbb8419956d6c101bd8916f20015e686de13a2d7af7e2d1fc6c2f9a3e825f2d8462719d142ba3d4dfea3eae817ba91b4072ea37e1e38847b7e9a99cfb635ff61e1c4bffe13bf9d8ace4ce281c3bd9d8033bc6d3054a5fef94645970ec05843b69af99380adcc172e5d0b2f6a97ca0d9592f2a319e08bec8c0bfe210bc7d632427f9a845d21124f7d6ebac8bd8b75338cd355359519cfa1b97054b6eaa2c6f20c352672454ab80fdf2d4ce9283aa857671a124661960e58a8a0aca5dae71a6169b296b407b9d9b9c347026dad2a481b0600efdf4410ddac63f52427fadc8ba27292f2af7c96ef31b9ee8131eb059930a46a967db9f8ebef9f03d8fdde6f4f7142c2ae736df5fb2863b76423472aebb555a3079304438d72384d1d7368af9a762943239e9c47116ecee8e5506d596be19b70e13f6cf30a59f18f43b7da21374a575b1ba7a9e6a7b84d6161f81df56985a516a150b177f61e4a1c6b346b9778f24dfd291e297bcf165a1c5e965aa15d267d84437d58e1817abea88db74fa77241f5d27ea2af37a40b7711dbaf606d9fb82181332feb609450b076ba89af9e709d0213c56d4287f9f720eb461034ebef534fd9c266386147f156c04784b933696dd345770a8b39005515cbf4c78f5af474042ec532812b0cb9b6258149685eb304cd34e5de48a6c5fa03ca0fb17f0612467624cabb0a62ec74f356be48f5b04b03d7b2f867b75cc1c955754c042138786ae9e157020c301d70b0a53110b85e3bbc24342dddbe97325ed501f6783256813eb932899aaa2b925aca74fc4526e3682d4446e88a5fa92a592a49a002c4f1fa2363be595934d0eabe2482b6ec6fac3dbc416d584aa79838f7cbd3336d34718dffd051aff0cda798deed2d15f27e80a4357ca49e24c0032ecf79628365cf0a4926592485fcc0d7cc1f7a11bb9b65a65cf199e64121439b0e2f2efd694c5d5d3bf0c0be7105c1e886f33d667244d08d2fa5fe497d43140478765e51efa22c83410ef0d5e890eb17158c6103fd009f659d36f39eb31253a37a8a1860ee4ed4ed823fe8127a7ae818487f6a6870ea6436082e8b9c970005c272bba2303fd6839e17a22df9f959fdb5a56a79f21b16eb3ba9d22d70a56ebbd5f9d0c7c302de4b007931bd141361fe9c43a643f939f154ce0903c1abd1f621996d4c394bb6d75ac0140c97eab4a2733b98c96d03478e7204634cf61231b74f2ff95e6588b60e074b61835f48f06c8e350a7144e9569c1cdee7b74303e03c37df0657c7c27d735bea624fa66dd40b17ca6d105ebd1a6d870644a07164cc2fd368900980ec09c990cf2c02184b3702a939a9584b9a21c4e3c65f79fde9ccaa71910ee10f9c0cdcf63db39d2a41b6c634957f271edc193f599ed546d17f7897d89f129cae3cb35d6e2f2dbec826ce9e72f8042af0d2fa9ded557a9443ad8fbd02d20f795aa078a5c6539947f84e02df714dc3c97be9c4f919fd0bfae7a4f484830e1abb267ec9aa61efbfae00e2b32689c89fa006490c7b2cfe154676a2e26c18c486476043baa90777047f289c66ec690e1e5092e794bc9795d3fbcf90426bff4504ee3eb90768b6fa7f5d2e5d144df76ca0b9f396a97e6c330785c78d26af03c083ef833b6188f29e1da0e9cc9e9a67ca29d0dcb4079456c417b6869ee833a442239769febfef6f8139a85edabdf0f0ce26c49c47d86965ce8b6d6f7085ee9ad231752b7ef7664671c62fcbadea8a420a7ffc0e258e8b6d9a632031c86686d95364e8999241d839a2c52e6b576c397f94be9cae59d828f3cb20b79509580239712723185a1f47eb19564b42c4b351a599d54cefdcf55932f5f99791759116d3e9b4122b6b9bf18c5afc0cc0d035ef9ba88a7bcf237f691fff16a34cb3f516d9f442a810f487e158bf3dfd68e12dca746133e0afe13e2eef0f95901bbfac6caedbc9b090d2ce284abf47f1e5c8ea4021a4af8ee059cff2a460dc9ccdd3bbc023e14d687cf674f48ed574b4a9daff253b4766d7e8bd3cb646fb91df5ccbc2b033c516632c839b52647ac0af913b316b7f3d0b809aa17d31f3c2ce3fba90820d10fa1c8c4d5245dfb4c751eab65fdd1423a543766e720b04452e290923bbda1269586237be7b98ea65dfda099e15c37e414673b3a5a40fd8ee7e43468327774fa21fae3f88b81378e82fcd4902cc0bf14be2c962bd3a2ef30e3a9354250f6f24e2b47ae4d8ecb9eb86f68323d9483bd5bc4310c2fe349af59051a1cd7c49681e8ebe3538b87270dd983daddeda0b52780ede2f337b0b826536c34381aaf89e20ac73da9e912886f47288579dee1e8f1daa729545aa65dbd81556ba2fa6ea4d7d5e3c5fd5fdb9f431d2541edd8f810a3588b38153a17971a1e2942beb678c3707e9b18ed71b9366343d5b7aba7bb3b82bce4225a94ac13032f83866903fe3a730a0742b4a39a21a342c632ffc8cceee8969c1a40022f6c0a212bc5d1967ed0ed0e4b794d6b1c00b0da252df12c5c25631ec83394efbc61fefae7d966098764977c064dddda265936f6a2816a2114128780dc8d43a8751118947739d2cb988aaa6d37d67f4d1b4a06564d46a5ef21f99b13f62a0790a57682785ea26c4fc3fcf1539113baa65301cd49855700d24e872e7b33d5ae39290ab7498c8f542e8321d9bf935f1379d8a437d8e8d0e96465e4a43ca71b0ca7b8671c9ea6c1fe9038f3552f76e84c0b13657583311537b0fecd9e915e8a82f097d131430f9075b918497d439db5b9258396aca61209184dc8556ab692da23eb849c25543c2fb967a181066f797f2c68c08e98af2303a5c592a33c8d550030b940994ce94f90fedc0389", 0x1000, 0x7f}, {&(0x7f0000000400)="f879770f6e457024a284b8f7d83ee86520944322bde888289f6f2e655d29728845a7f2d27abd9e1b8a4dbf5788f2f9787323857d132a34e49722a55219ccd30d650995e538c96acce5c26f3c666ecc8e5938ddd9e1acc21f319919a5ef49341ddf76ff3b4dacfbe105bacc4e15e7518fb42db9c0334ac2824f7517ce3abb60993a46601f80ef423597ec298be71bc7d51b811d13395b5833cf8356689b7357208b07d9fe9314f54e1a6183172f55c2be7b9d4ded", 0xb4, 0x10000}, {&(0x7f00000004c0)="17a4abb41eed7e156e3f", 0xa, 0x622}, {&(0x7f00000016c0)="db4a23c8d7aa6032f43bc33574f4e34ed9b60d9a4f925cad99", 0x19, 0x1}], 0x40000, &(0x7f0000000500)=ANY=[@ANYBLOB='localflocks,discard,quota,fscontext=sysadm_u,euid>', @ANYRESDEC=r10, @ANYBLOB="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"]) r11 = dup3(r0, r3, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000000100)={0x2, r1, 0x1}) [ 659.100724] xt_conntrack: cannot load conntrack support for proto=10 [ 659.226114] xt_conntrack: cannot load conntrack support for proto=10 [ 659.282594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:41:56 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x20c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "7156b28df662e361e1c8f2de4fa72cbb8d6480137236a4f76390856d4eabad593da18f63"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a9e60e1be42fc8429e2970aaa7986014fd150ff26d3e7998ec1d4c1b54"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c24e8d7c92b1fc802a35dcf93f498fb3046420312caf16500ed8e1b0f121e2272f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "6b9a0f7ecbc253852016b3960a2c9b266f4a92b4887e6fecaa51f8e7a1fb9755be2866a9c0c59f53a7aa50690a63b68571183ec3c4d5bf27c7e6c32689c8bfb1920e95430e5b0fc3bc0cc4f55e6d38ee16e8b40678aece64b11310d64e44415c074dabe6a73131e27ec28922023caa2d682f81cf5195bcbd51f26d1914c4bf988f7bd47d2fd77420724cca3cd1c9c5ad7c37144428561588"}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x20c}}, 0x42800) accept$unix(r0, &(0x7f0000000740), &(0x7f0000000580)=0x6e) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)={0xf8, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x43}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80000}, 0x84) 15:41:56 executing program 4: syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="7e8bd48531731020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002000000020000000200000002000000000000140000030000000100"/103, 0x67, 0x20000001400}], 0x142000, &(0x7f0000000000)={[{@background_gc_off='background_gc=off'}]}) 15:41:56 executing program 3: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x80008, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:41:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lsetxattr$trusted_overlay_opaque(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)='trusted.overlay.opaque\x00', &(0x7f0000002a00)='y\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r10 = syz_mount_image$ubifs(&(0x7f0000000240)='ubifs\x00', &(0x7f0000000280)='./file0\x00', 0x6, 0x9, &(0x7f00000017c0)=[{&(0x7f00000002c0)="977e7c271edf75a194cb112be76d6fcc76a2f0c31f91bfc0aa52054a8c90ae9996b91c584ca153bf8ba6f369c1572a8433a50ec4376d22d47973f93c84e12040e14ad425695ef291c85ae5fd", 0x4c, 0xd}, {&(0x7f0000000380)="05c2a7087286596ab506d94677ef99ecd2eca0b2961afc394d029c064c7d317aea3a14af20128f415b14fd0ecfab92bc4c613f5ad894d738ad5c99ea1462e63477534fbc3d9ff034ddd68ceef1338eb4d90767bfb9ed505a859cb79a6a8e57fdd889135131c70593fb2527a0b2ef4275e18a79f4c7121a5764f79a5f69ef5c185b673a4f8d58ff505bad68cf916ea169f82e97b99ba9576cac87b2990e37e2ea03d414e0ecc9bc0b80dfd6c97f6b5b96906b9edc63b4f93a2af0f33f9a5755a8628c2a9a0be283cb39d23db001b14a704ea3f39c3fdc55a7025fe3083678dd2fecae60ee1b44d47070e5f6a3734af34802b5b8c35655", 0xf6, 0x1}, {&(0x7f0000000480)="3521b3fc975c93db35141b17907c5f24f7e8665f82a3a4edebc8bc8feb33d66afd57bdf07daf66c0de48f1e150f4186387179a3cd82dfba9b8c0dcb727cc22b61931933d0ebf91e28fe04f37357240dbcce62cc17fc7996235b736bc31e3fca2005f8f9fc361d519290127d91637fc44003f39c6460dfcfba21dc8fd70f14eb700560a93312da0b90992b474830ae38970052ba96b7dfddfbbadc0f7f0596bf66027df2d94df099fc3b01bce62", 0xad, 0x10001}, {&(0x7f0000000540)="a3a52d5695a1e5c797c33d4df7483e36e6aab6f4", 0x14, 0x1}, {&(0x7f0000000580)="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", 0x1000, 0x5}, {&(0x7f0000001580)="b9bc4be1613626196f405af4ba9a60968e7b52602737ad08e73be665507030bd4cd3dba19ffdb96c8fa925a1188e01f3addb663a985575815bb3c7ca7e2d73b9115ee209f85fdaff90cdbd07a1a940bc307950c134bda85c179d02261c20e55765942a547008834426ef4ebc291a8d28b083165d4eb8643b16794623d0dd3884c9aacbf0b11035a91a1482dc98f9e5a7d02466034f0f6618099f", 0x9a, 0x2}, {&(0x7f0000001640)="d37e63e4c06ab80c41af97903d7a02f17a49a550d5c7765f41d700c829a9b7c8dbcbdcdc32bec8116b90", 0x2a, 0xd5}, {&(0x7f0000001680)="a79979be5ea11f171b867cfa58dd8abf53f1da6b38c2a50f44425755b9b1d9faed6e079f1b3b544b9ab3144036a18be259cf092f51f457d7e40ea4210a7dd2000e985fe48ee4423127db2ccf5f4c08eea56788ad6239b3cefdad30a5d5c5647d84514a6ad067a568812099924e943f33b027b58b671a0ba42f1e17833f77c7c6450979c5a6173aa2d6fe3f8bf3be15e43fcc8ba01903f677846a80b15a1828acba699bfc216f0df239ac2a74987962467d88903a2e8c63125c19cc509e9d694fc67114d67c7eea54565415d851", 0xcd, 0x5}, {&(0x7f0000001780)="2e7a8e4a7c651d", 0x7, 0x3f}], 0x2010040, &(0x7f00000018c0)={[{@auth_hash_name={'auth_hash_name', 0x3d, 'crc32'}}, {@compr_zlib='compr=zlib'}, {@bulk_read='bulk_read'}, {@norm_unmount='norm_unmount'}, {@auth_key={'auth_key', 0x3d, '{]'}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@uid_gt={'uid>', 0xee00}}, {@uid_lt={'uid<', 0xee00}}, {@measure='measure'}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) ioctl$BTRFS_IOC_RM_DEV(r10, 0x5000940b, &(0x7f0000001980)={{r2}, "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"}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x34}, 0x40000c0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000000)) 15:41:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000080)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r4, 0xec, "a27b62234a370109541d924b63b9f7d45e3611d5fc5d77203f97673bf3b3972688b76aba2951bcb66d32832ce0a77e9b9eb73438e28a0f905ef5293e71e025af91d5fcd51521ad6fd6146f1b7be91e1e20f67bbd5a6716d15989c6a7f4b2e39ff02e319293691bc9734d0a270b10b0ca12da67710e32a7257b6d4a70703d2d2ed821cd6383c8d3afafa31cadbc10094a0097b88dc7e038f349926cff36adf026554f3256724db89b0cbcf05c76536be38395f40cf14da853a2df95ba2d34bfe9f93320f8965aa2483ba0d491b8c2972a5fae8afd268aa4e652f07f5c030b78366a113ff1406d26277ff8447c"}, &(0x7f0000000380)=0xf4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 659.616291] xt_conntrack: cannot load conntrack support for proto=10 15:41:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000000c0)={0x5e}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) [ 659.698705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:56 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x800, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x4e24, 0x4, @empty, 0xe8b9}}}, 0x6414859714081471) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f696e4c696e655f64656e7472792c00553872d4c39ef4fe9c463af47da5b6570e00e67586cfd03081047781e1f72ae3a063adad000068dddd977aa0dc15fed6a7cd9427ca67a067ad"]) 15:41:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:56 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000002c0)={0x1, 0x3, 0x7}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x400000, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x8, 0x7, 0x81, 0x0, 0x80, 0x7, 0x9, 0x7f, 0x0, 0xc1, 0x1f, 0x80, 0x81, 0x8}, 0xe) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000001c0), 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_genetlink_get_family_id$smc(&(0x7f0000000300)='SMC_PNETID\x00') perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x81, 0x4, 0x3f, 0x7, 0x0, 0xfffffffffffffff7, 0x44, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000080), 0x2}, 0x51020, 0xe4, 0x2, 0x3, 0x7, 0x3}, 0xffffffffffffffff, 0x8, r0, 0x2) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8ad888e3f385248d9b28073bde21b900780ec151b5d4355cf1e3b5fc6a254ab8e5df0aae5656fb28f953b24e33e9f3b7fa1b35c4a191bd86015117ee047813950b1e7678321004b00e240d84f2cc2c55d9f43ddf3d77153899c8712f0ff9a1af345683874d1bfa796fea7e49ac5c347481c3cfd87acf72c941d31ef56d73a1ce9f4653ef13b1fedec69b84421b6ee9edd60cbd5972fe5e52c0f2b3341653b30478537f5939f711fcb714aadb0c8fdd26209b9baaa58ab06fb8"]) 15:41:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000540)={0x64, 0x7d, 0x1, {{0x0, 0x4c, 0x0, 0xffffffff, {0x0, 0x0, 0x2}, 0x12040000, 0x2, 0x4, 0x1f, 0x6, '\\\x02*![&', 0x8, 'nl80211\x00', 0x5, 'gre0\x00', 0x6, 'wlan1\x00'}, 0x3, '[!&', 0xffffffffffffffff}}, 0x64) 15:41:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x30}}, 0x0) [ 659.959421] batman_adv: batadv: cannot create tp meter kthread 15:41:56 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) [ 660.050144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.061784] print_req_error: I/O error, dev loop4, sector 16 [ 660.132312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.216507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:57 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1f0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2bc, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @ipv4={[], [], @multicast1}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x986}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffd4e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "6c589b4ea42aaf9ad4bb395eea3cd1d77c255f269e81b70d50b37fa140a10294acdd9bfc14c4dee89e540cc242b249ec55a17720882f3467b920fac7db88ccee0b3d326ea2da324c18f68b6633"}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "8c353db849a3ddcffbd244384b0ec5e77ad2c67d028ca618bfaf8c2d7ac8b5cb5bec89ba29514660e0494d9a94aebdfa2daef5309aab9f699621f9594e15951d1601454d54a838ebb4b69f777e6f9144fcf6c3f194524ff721"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d2ece6afff375dbd3780854ec33bc92577f2f19cf51b6b4df1"}}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000280)=0x3) 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000640)=0x9) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000000580)=""/4, 0x4}], 0x7, 0x8, 0x6, 0x1d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000001", @ANYRES16=r8, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r9, @ANYBLOB="0a000900030000000000000008000b0000000000"], 0x30}}, 0x0) 15:41:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000540)={0x64, 0x7d, 0x1, {{0x0, 0x4c, 0x0, 0xffffffff, {0x0, 0x0, 0x2}, 0x12040000, 0x2, 0x4, 0x1f, 0x6, '\\\x02*![&', 0x8, 'nl80211\x00', 0x5, 'gre0\x00', 0x6, 'wlan1\x00'}, 0x3, '[!&', 0xffffffffffffffff}}, 0x64) 15:41:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}, 0x3, 0x7fffffff, 0x4}) [ 660.782893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYBLOB="0000000000dd31ceff7f000000000000ec0d9b0000b4327889cff1150250086123134d714772f767d66730e1ce4725010c95526fde3f274b492cafc1313c11858632528e216438eff5ded16ddfd875f0c5a83aec0e9467508bced7b0eee2d5c93e81ceab20a7c6b81b870900000000000025f950f0249d7933ca8873eaa11ce31984634eacb09e5e6a97dd6c92ed5f108ea6010c8127b15fede961ea14e39d1186e0100e149985301e7f13398b2a678b0c4a08316e6af105a42b8151c5f0de84168ae3870406f03c08adcc1b352c185a94c6345ef0c7e7975a32ea74d798eb5601ad07953b4278c8b9000000b27db25caf9d6b33b4881dcd4e16397306ee71520901f07a4c93f4a0f4490901c9013e9e679493e242e03c6919b0a5d14d0a3b8511526741f6aa04fefc7c4825a796f5454df5"], 0x30}}, 0x240000d0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'filter\x00', 0x66, "395a73e92d5f30931a208be3ef9a5b7ff7b524e915fca816430a5c412543907a2f7ce2d6e835f8ecc6ba4c2ba63cad819daf2665b914dbb976329e65b4b9b89d2285aecd04928a2e2a15f723633f096abb46ebae5584b92ee912578af1da2e412809cca12769"}, &(0x7f0000000000)=0x8a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x2c}}, 0x0) [ 660.849671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.894723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.906282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:57 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x40000, &(0x7f00000001c0)={[{@disable_ext_identify='disable_ext_identify'}]}) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x630000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x0, 0x10}) [ 660.945769] f2fs_msg: 200 callbacks suppressed [ 660.945796] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 660.972212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 660.993595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.004301] F2FS-fs (loop5): invalid crc value [ 661.013331] xt_conntrack: cannot load conntrack support for proto=10 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x30, r4, 0x20, 0x240000, 0x0, {0x2, 0x3}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$snapshot(r8, &(0x7f00000001c0)="bc858b2af4029ac1208fd2a6ade529a69027424b4b27bb18181a6174457358fe6062df9b53f24da8a98bb67c504da5b556fa1e26df53aa44eb635feb14ee7cb26f7bc40809d08c52dc63ac450f81f1cefb340cf3028f8287be860616360b5458574bf7e44aaad6cbe2c968208fc954bfe798cb53170148b63fb8981f47e0ea06c0ed8b46917835cdc1a0662c5c1a5260f348662a98a367a51d9175da1c69760e255f97b5b26760a835440126cfa2f1ca0f1bbd27f9fe6a296e733c7b2493bb8adf0d8b5cbf2cc613c5602f9cffe2a9bc50302a213838fce49e1e50776a80cd9e9cd50d7f8fc7", 0xe6) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 661.043144] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 661.053371] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 661.072404] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 661.083588] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 661.093375] print_req_error: I/O error, dev loop4, sector 0 [ 661.093792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.109584] F2FS-fs (loop5): invalid crc value 15:41:57 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f696e6c696e655f64656e7472792c007026b6192cadfbc880"]) 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, 0x0, 0x7, 0x0, 0x8, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}]}, 0x30}}, 0x8801) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r10, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}]}, 0x30}}, 0x0) [ 661.146317] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 661.154936] print_req_error: I/O error, dev loop4, sector 8 [ 661.196470] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 661.252492] attempt to access beyond end of device 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 15:41:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0538"]) [ 661.273103] loop4: rw=12288, want=8200, limit=20 [ 661.279001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.291675] xt_conntrack: cannot load conntrack support for proto=10 [ 661.322044] attempt to access beyond end of device 15:41:57 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000440)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac, {0x5, 0x8a}}, 0x7fffffff, @random=0x9, 0x8040, @val={0x0, 0x1d, @random="8b41659c343ce2b51909fa514fc417f30af1797df28f7022f0aae47c93"}, @void, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0xf2, {0x2, 0x7f, 0x7, "b049bdb6045e1832162b77bf9175dcfe70ad3381a017c34bb6f9a5acd11e2092348276b8402ea69793e65885d938214acd9d59d0fdc4d7d39f0a176743ab9c940efb2297fa43ac2347c0546e304049d02504c5440f82f8b5f7cbcc489ee642967a5aadcb71887961591d4404eeb10e24c0a39f6ebe964d4fa0295a03638ce304af486981c7a74b335dafc36deb1519ad33c510ed61638a32ed55142cb93e226122f6a6a35c0ee6af89cb58033e8e643cd35cf4e998631435c1f26a9d6f53feb79a6972270a1ebae294d496e9fbf178531fee42373150a69401a84f5d1206c93cf7471af51217a056576404765b5fc2"}}, @val={0x25, 0x3, {0x1, 0x78, 0x8}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x401d38963249773f, 0x1, 0x5, 0x0, {0x7, 0x9, 0x0, 0xd, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x0, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x48}}, @val={0x76, 0x6, {0x4, 0x8, 0x8, 0xc000}}, [{0xdd, 0xe2, "210606df52c1422c627bc1660033b1a53be175e7c8fb0426a7b3ef2ff32403deffaeeb4f4424cc38095a22fee7014231c88cf440ba11d05a434aa5748a41c36165239464e5b3de6638471ff67dec2d7494508735a93fa2b15ceb63cd5924fc8a88431c9cbdf5e693f34b86e6f02e9086f295a7714bf383f72af170fe7d4b62f19bc24103454d052ae4f36331b38fc66b2637bbb0c7f40a6af7d0d948d494d99d98a37264a4fb5ed03491c4ac231dc92f5aa1c06ca2bd8a9799c9565c2d25d80aa3d34826679a495bf6d6a596810e5056d412e773293a4362aae272f7440eba18dee6"}, {0xdd, 0x31, "f808d7a9c2dea6b334749252ed5cc256bdbea6f3c185501cd68eb0b643f848702c050f79c751b47fa31fc3bf0fb8150413"}, {0xdd, 0x7a, "21120fb6a05c0ba99f6e58ec77436da86f5b3a6250d4c64cebc304fc78eadd256abdac31d557565d82cb17a1dc0776fd9f588b24140c1c65a4b2f8a1b810d350d1ab332b3ede981103a386ec44a914d8670a1db0edf89374843594f0dde329cb259b2d7af1d6dfe4059c70ae423a9dec3d091155d4b06768f622"}, {0xdd, 0x1e, "3c8d60554931afc312ae31751d0d07b16c769599a37961f5c16ce2e4d525"}, {0xdd, 0x7a, "6d746568e94359c09abfd8e2c1761cf6ec977557f7daa22d171031eeb4e18e7d89ccddc5c96cb24cd618f00c1aedc21d76d992e17c1c6b56fe1bf9e0d3221776953d3eb3e5446cce84dde291a99fb9d5e8e58ba3f52f80cd90dabc185e10556a9a866ab1cd1f7df2587211ee25bb0dec4a8fbb9280bfb71700e9"}]}, 0x3aa) [ 661.343454] loop4: rw=12288, want=12296, limit=20 [ 661.361815] attempt to access beyond end of device 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x5) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDCTL_FM_LOAD_INSTR(r8, 0x40285107) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a00090002000000000000001f00000000000000"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000f6095513f2d6ced083c2c99431a50ce6bc9f053c43bee7d1e41d9d3c09840ad83af4b1140f69f2b468c8041010f8979468e8de", @ANYRES16=r12, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r11, @ANYBLOB="0a000900030000000000000008000b0000000000f4e1095e6ddb72add8c94938c907159ed0b36d5ebdb9ae1292e446f536935b450eca85121c51c4851a753f9718c6dc1aa2a87bcb43431317c33ec8bb0ee23892f3548b29b18c8b6182e4957f695f27b7ef48de129338c3154d1aa1c5451ed8da492598167d1b3520a8173318f4897b382ff728e477e3afd8e2323187a51b5b34b6e10085d925cea00f76cb171328461d9419bd65d978abfb79b7728b0502f042444174a5f709c6e907b480edb4f171251d"], 0x30}}, 0x0) [ 661.385759] loop4: rw=12288, want=8200, limit=20 [ 661.405476] attempt to access beyond end of device [ 661.414661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000540)={0x64, 0x7d, 0x1, {{0x0, 0x4c, 0x0, 0xffffffff, {0x0, 0x0, 0x2}, 0x12040000, 0x2, 0x4, 0x1f, 0x6, '\\\x02*![&', 0x8, 'nl80211\x00', 0x5, 'gre0\x00', 0x6, 'wlan1\x00'}, 0x3, '[!&', 0xffffffffffffffff}}, 0x64) 15:41:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000080)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r7, 0x2}, &(0x7f0000000040)=0x8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r12, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) [ 661.456049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 661.465898] loop4: rw=12288, want=12296, limit=20 [ 661.473024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 661.533032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.560160] attempt to access beyond end of device [ 661.575239] loop4: rw=12288, want=8200, limit=20 [ 661.601954] attempt to access beyond end of device [ 661.624320] loop4: rw=12288, want=12296, limit=20 15:41:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x600000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000140)) r1 = mq_open(&(0x7f0000000040)='\x00', 0x800, 0x104, &(0x7f0000000080)={0x6c7b, 0x3, 0x3, 0x7ff}) sync_file_range(r1, 0x8, 0x6, 0x7) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00a9810410afa71fee8e5cf7fb48115dc8c8cdea7905f4"]) [ 661.646779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.673427] attempt to access beyond end of device [ 661.693143] loop4: rw=12288, want=8200, limit=20 [ 661.703892] attempt to access beyond end of device [ 661.719239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.732428] loop4: rw=12288, want=12296, limit=20 15:41:58 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto(r1, &(0x7f0000000580)="7019577953c87716288b80b841dcf92b2dcefb25ca230dc275b80badeac6da051bfb46b71c6195e1ab072466bbd1552427bbcfad45dbf58cdce379b7e75919d2ca0d75627ea8cbf50f5aada5b67aeaf54da32cfaea9ef54d1a9f24ce4cc41cb9bc3e0c5d509c4985510fb40cc8c93e0ecf928df4b907244cdea2d98da68fc58d4910d7ef9704f4e4178a2be1c82dd03e1f607914e303b79b55932e2fa2b360692b01174762ab1e7240baa25d4eec13", 0xaf, 0x4, &(0x7f0000000640)=@in6={0xa, 0x4e22, 0x798d80a, @private0={0xfc, 0x0, [], 0x1}}, 0x80) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000003c0)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4001400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4004001) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file1\x00', 0x5, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="2ae0b26759f7b6800fba61afcf71c2a20937a91f331d9d6476e9374d88a8e04211917dceef7d8747bd7ead8215ce5e0639e227f83fc20c3ff2d7a2aadbebfae937ac862663338ac9d5439acd8ad738c4aa55cbeb76e4c4f6e17fb9730463a468ca217b1e29eac8048578295ec7f60764fd9dbee3cc8814e769203d06d37e", 0x7e, 0xfffffffffffffff9}, {&(0x7f0000000240)="6ccd8401d9fa56ce9fb5680930afaef6628d70a900c7d5603d75efec628faf311a0da1a01a05c8f991eb321461fd754eff6f09266b9ae855e17764ed225a2cf4fd5be344bf8ad1030d44713ee2def28905adef29667b6c6b330e2ad5f82581580c96c797f1358a2a7758cf388c1f5888201e9b16c2e6be597a2a6c027d7ec713870ea8507a78daa91146fc9e63a379a28eed53e6abcd45b994ac4239867d1e95340c0497b77d6c9078766d6cb009eb42dbd0f9adf2c1843848d8b1132afe7bbce384f01ff740fc3bd8eeb4a9b13ec291de1f", 0xd2, 0x1}], 0x400, &(0x7f0000000340)={[{@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}]}) 15:41:58 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x59, 0xc16a, 0x1], 0x4, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x188}, @device_b, @device_b, @initial, {0x4, 0xffc}}, @ver_80211n={0x0, 0x7fe0, 0x0, 0x2}}, 0x4, @random=0xff, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359dd05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b18ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f4) [ 661.755125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.851056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.915981] FAT-fs (loop4): invalid media value (0x00) [ 661.931270] FAT-fs (loop4): Can't find a valid FAT filesystem 15:41:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') [ 662.035940] FAT-fs (loop4): invalid media value (0x00) 15:41:58 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) r0 = syz_mount_image$ocfs2(&(0x7f0000000540)='ocfs2\x00', &(0x7f0000000580)='./file0\x00', 0x101, 0x9, &(0x7f0000001ac0)=[{&(0x7f00000005c0)="99cb7ebb3636bce66aeeca5b5255723a3cc31208cb71c7c5c9c22f77e711e242103837bbaa35b2424dc5d9712e14e1a315910f", 0x33, 0x7}, {&(0x7f0000000600), 0x0, 0x6}, {&(0x7f0000000640), 0x0, 0x2}, {&(0x7f0000000680)="b14b507aa3d026529040aab4d71e906cf2d00f78f57d5016c499ed7eb28ece2bdacd0be21f9052ed07f0cfdec0ea24e65b8c565f904d0068a62e5ec33a11cebc295d3e3e641cf8c3576e95571eccce20bc6019a2673c7bce962c74d7f1837c661e345a7fe754dbb53c78b392ec95bd0f20630be8f40dbfe37a83b9faec8f6ad4909dddd3679cbec9e1997392f897531a06ed31d07b39306cc0b9a7b39ef8f9ec812725c90f2f43e746564146ff6b997e81b848c1dfb5ec7257a974369ac67b2ef082c30b06dfa57a81cae491aa66dcae4f146a75c3c75f4734c5af7ce014f23806e1bd5b3b9868262808f52c46e990caeb5dc3cfb37b0f20", 0xf8, 0x7fff}, {&(0x7f0000000780)="208dba9d0a7e7d7dda78a42c88e4b2933c4311295ca7242cb10721f8491e684c5926aff010cac442ad15bf86677d1e34d7623b865fc36cdbf1243e153530d08963ae0f234e3fc420896c3d728922e5b5b50e6990f4eb78403265ed29e36b80beedbc4890e4cd0d489802f0544731b733599c0c29394344290db4309674833194db331a4f6109636029786f0dfd0416548db60b87ec97c821890f5c5b51c5445d3a863f80cc18ada96ae224ffc4379e3d5b", 0xb1, 0xffffffffffffffff}, {&(0x7f0000000840)="4b563bd0f4395090e8d95b09dbc05727b5169a4db975d78660014e08bbbfaf11f4dd0ecfce3b370cc5d59a1d1e90c9b0c28a9c20d0b5c250e90a09942223f988c18def90f53e8a8c29679763c489d98a1bdd4d5fdc9179e3fd44f4e93e1749fb95aedbe86e4fa05e9796679c97e4e83fbad292c00ee72b7bd10ec1d252dafc7a69bff538a9cae30d48904f6702d8fdeb19999c305050577c9b6c031bbec03db52cc3223081d3300630b239b6477bb8ebe73d0bb94f5e51ce66b2c5", 0xbb, 0x1}, {&(0x7f0000000900)="7f22720c843f3cbb9d7b264a35f8eb751bba5bdfbeea3ac4684fc9b091bfedb280dbba2e7393cc1a277fb0ef36b6e12d292a7282a576dcee7cfb9bafda1e41d3a87b2b55d298da1b3068bdfc47d84d37ecf9e0159c5b79dde61bec55431122a2a504214a12b55ac89d0dd29d5823a3ec7462e9d42869dc410eca8adf4a71636182960d51dce81af83a4d7b697a3bcec0f8890f76f6d24e081d84d61c334dc1b6a3c98dcd143cef03249963c0e22d8c4015b896be64", 0xb5, 0x80}, {&(0x7f00000009c0)="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", 0x1000, 0x7}, {&(0x7f00000019c0)="0682e8cb77c5e6c90eaa75d8efed32ae4c270b9002634d727f697786234ff6660d7ec3dcb12a128b8d29fb8dc6b8a928e2faae702bbbebab0738cd729c7abe199228bd7cb07642df669535aa0107ddb2a21f54888f048ff18949e13387fc4de707bb932e1639f6867606b8b9ab3cfdfd68bad850cc9a99702ae85c30336dd82e5929604f6ecaa8eaf10e10c99f7ceeb2ac5b14e7b110524ce8c41ad86a50c63619c7be42acf58d95aad2fa907dd45370f79362b0e34b9ed16ae11918fa0d1c3bed9ff7890f4a3d3c594b00a776c68f1329056157f9c95882ca5691b43936d49498284573916457", 0xe7, 0x7}], 0x1000, &(0x7f0000001bc0)={[{'noinline_dentry'}, {'f2fs\x00'}, {}, {}, {'noinline_dentry'}, {'..:*$'}, {'f2fs\x00'}], [{@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\\/'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_type={'obj_type'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'noinline_dentry'}}, {@smackfsdef={'smackfsdef'}}]}) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) utimensat(r0, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001d00)={{r1, r2/1000+60000}, {0x0, 0xea60}}, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000040)={0x6, 0x3, 0x1d, "4c43c01968c3e70a9cb16e3be114c76f5fac7d8b5fcffdfd40e18c4e25c177ea49da769d6214b6a09385c3896a19d044be056179ff08a05a6f0c9966", 0xb, "7411d6465ee6749a0308c6ee7c195825bfe4b02fb476a05171f0a27c979b71e537bf958464333d594b0093c50ac785eb714e500aa7e66831fd98f17b", 0x60}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7000000f7baa5d26dfd80787e1f2354c177a0fd9adbb172e6e60e457062352632b46af92ed05a94c28165c438e704fb8254c9e94f1091716a27c3c40bd22e63aa8d5e75d07499e53d63e377203d41eee4a6d9dc4f309b3a32b28fb3dbc019050ea9a03457eef1a5d4c2c0c02e48994e61993407737ddc1350d62c923ea6b7dea89b17885a0d846e205d6d18d1a4c13e99fbab89e114455bbaabb3b1be414bee443e5b"], &(0x7f0000000180)=0xaf) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x8, 0x7ca, "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", 0x0, 0x2, 0x5, 0x80, 0x8, 0xe4, 0x9}, r6}}, 0x120) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r5, 0xfa, 0x2, 0x1}, 0x10) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000080)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000600)={r9, 0x6}, 0x8) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000500)={0x200000000002, 0x8}) [ 662.056109] FAT-fs (loop4): Can't find a valid FAT filesystem 15:41:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 662.121725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:58 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1e8) [ 662.192940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.230474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.265272] attempt to access beyond end of device [ 662.272945] loop4: rw=12288, want=8200, limit=20 [ 662.281182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.299410] attempt to access beyond end of device [ 662.312180] loop4: rw=12288, want=12296, limit=20 [ 662.321759] attempt to access beyond end of device [ 662.328367] loop4: rw=12288, want=8200, limit=20 [ 662.333949] attempt to access beyond end of device [ 662.352038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.359563] loop4: rw=12288, want=12296, limit=20 15:41:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="290000ba", @ANYRES16=r5, @ANYBLOB="070000000000000000000203000008000300", @ANYRES32=r4, @ANYBLOB="0a000900020000000000000008000b0000000000"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r9, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x3]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_AUTH_MAGIC(r11, 0x40046411, &(0x7f0000000000)=0x7) 15:41:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xc) 15:41:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r5, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @empty=[0x2]}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x400, 0xfffffffffffffc00, 0x6b}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', r8, 0x7800, 0x10, 0x10001, 0x81, {{0x1e, 0x4, 0x0, 0x30, 0x78, 0x68, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@lsrr={0x83, 0x2b, 0x3, [@loopback, @broadcast, @multicast2, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x6}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x2b, 0x3, 0x0, [{@loopback, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x6}, {@private=0xa010101, 0x1}, {@remote, 0x800}]}, @ssrr={0x89, 0x13, 0x5f, [@rand_addr=0x64010101, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f00000005c0)={@private1={0xfc, 0x1, [], 0x1}, 0x1c, r10}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x11) 15:41:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) 15:41:59 executing program 2: sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x140e, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x480c1) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1f0) [ 662.681323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.724470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:59 executing program 0: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1f0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2bc, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @ipv4={[], [], @multicast1}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x986}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffd4e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "6c589b4ea42aaf9ad4bb395eea3cd1d77c255f269e81b70d50b37fa140a10294acdd9bfc14c4dee89e540cc242b249ec55a17720882f3467b920fac7db88ccee0b3d326ea2da324c18f68b6633"}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "8c353db849a3ddcffbd244384b0ec5e77ad2c67d028ca618bfaf8c2d7ac8b5cb5bec89ba29514660e0494d9a94aebdfa2daef5309aab9f699621f9594e15951d1601454d54a838ebb4b69f777e6f9144fcf6c3f194524ff721"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d2ece6afff375dbd3780854ec33bc92577f2f19cf51b6b4df1"}}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x80}, 0x40040) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000280)=0x3) [ 662.736188] xt_conntrack: cannot load conntrack support for proto=10 [ 662.783082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.832557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.845247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)=ANY=[@ANYBLOB='\x00']) [ 662.893223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.042964] attempt to access beyond end of device [ 663.054793] loop4: rw=12288, want=8200, limit=20 [ 663.078345] attempt to access beyond end of device [ 663.094729] loop4: rw=12288, want=12296, limit=20 [ 663.104745] attempt to access beyond end of device [ 663.132767] loop4: rw=12288, want=8200, limit=20 [ 663.139125] attempt to access beyond end of device [ 663.154414] loop4: rw=12288, want=12296, limit=20 15:41:59 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000480)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @val={0x4, 0x6, {0x20, 0x81, 0x3, 0x2}}, @void, @val={0x2d, 0x1a, {0x40, 0x0, 0x4, 0x0, {0x5, 0xbed, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x30000, 0xff}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x214) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) 15:41:59 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB="2c677271ab7f8bf5d74a36179f806f74705f69643d878fa5a638f92e1355e4efa2fa90d381067ed18859f8c8b655e4309d30aa05812fd280928cb24fbecb84f0751cb9652c0628bc0d4ec9e4df847be89ae1fafe89567f1d18fdd6a9b2ddc4c65a6d66599b70a01f3d48678e915a27030e65f65ed7b6089ed06e2c7de54531f06bca4b", @ANYRES32=r0, @ANYBLOB=',default_permissions,dont_hash,fscontext=sysadm_u,obj_user=f2fs\x00,\x00']) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1]) 15:41:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0x1a0, &(0x7f0000000040)="0286ca4489df717adfe436b1b6115bc5108ba0fc4fa36d1a679931ff6a5b0cdcf5a8d1fac32b47f64660abfc800927e955b77b294c5a08d10660d47a2ec32edd1ab5e807a3f19fc0d94a806bce544b164c8e", &(0x7f0000000540)="d026e6f3d2e89741b1ee56f913f7ef8ee50474bfec29ed516c047d0a4412f3b2c06d3e6c48fee09b42e7fec71b1d3c6d38c9c3db514e8958bfd27bdceca65a28088276dcd76b5cd24e7aa5135d5985d4bd98b333c7337c342a285206b92d2cabcb7161ed8594ece3c6887dfa72503665ce3bc38572a63be51aa4edcbe0a3cfba0a3f7135fa54c8f32b4450ca5f2c98f472516d14c955c8e83ec8a4ea6157020e2db600692ea8ccb2467898cccecc9f5fe0ac7c0c81f6d1d56d8e742f64be17da04cb63058f19c3f4490fc8fd2dc31a3c5ae6b8b933eb664292bf75cde823947b99fb8d339f09135b6c941765efc5452d8b404f3af4da02302c0745ff6b1130ce3889062013a6473786822f43b1eb8669f67ae71fe008a75fd1999355b57e8a54a61e7e976afa639a9b3ab495bc5115ec7f7321d13bb2b0b7f88350e27578c7354095e9e267cf1f0008a0c2df83b9e2320375604d85596f6d81f59a1e1951075532e3710297473399910c9826316b1bbb07c26da9fee25cb5b0b01fc7ff771cdccc3fab3d8db4793ac2ea6fbf32623f239f405b7e13f0a6e2d3464b4798babea76b7fb63a68c657e60989b32501c96e550bce33afe48a2ee7d1e9bb25668c616e507a14d0c0643e09306a6b4fd7a39b41b176ce269a504d98b811350586acb2e63d8966c1c8b4c1ee670e97e2ea97c453a8c3771f73ea669c0494de77403fd107d06dc8683059abbf5b7f09cbc9af9a1040b268eb57c45d58934c93bbe4ae3a29d710e18151e072026bad8f3b26b042b59b9d65de43667b6cc2848f6b11e59e6ff4507981a6b6e174e6d69e05cb7c1bb9d5006e3363d39d744b1eed508abbddb258ea6832361d9a205bd8eeae1508e0ed59a7a25e2b85999f9d0e16dd38241edc28462fb5a8df7d9f9cae783be53ce455a6901bfc8b160c390c3ec75c658c8b48a5161c33e96fc3f55c795aa8a11e8e7b3f1eb27e6ee4fb810e5c8f6c522e7539c76cbbb843d06df4704fe32d769cf22faa14008677fb4958ae1d364bf2a65da68123abc97a624479dc08dc94311fa02437ab9d2f16909dffb60bf8f839eda6f109a92ca6c8409dac159c61ac44df9fb1b44c79495e012f184ecfaf6e8ae08a9fdba3b8f8041ab9a7675b49c17efeea95108fc9156cb72205c2e17b785ebb2bdbb129d104e856c2e801dae97e3056132aaf448a6e5ca8e70e7b2cd50917fc4b5343dc2181daaa0b24f77b629f3b1025d32d4009493bdd7c6cbaee2da42da05d870bd73e0c598e2034da51a4d32f4d119e4f4a176b6858967622ed90edb3ad7124ea8f7282ccab1615dace1d4a1548bf8fbd0663a18c58dc45eaf79873faa973c15eb02049c6a17d8c8ea782c0d86ee97dfc3416ba9b9f861ea58f17e3a49379bf6f56518e3af1360b421ddc68ae31cafde6dca1beba214418bf2750754eefc60ca3eee605f66d77a7886a30fac2a743b1c03c581030f7286e96d0c2c739a54ef02cc81d3aae9c0b5f82b91f861126223b15a9c9524852b271b99c60d06d31e4281e765092ca2da6891359c36610230ed49f284844ee4ef3c67cdf512abe025ee49777adbac80768438d85f79fb9b10c8b06abc7784638029e708a36464e753afce40ec15b29addfe7194a2a54546f56f82470b68173d5fbe2b969bdb6b9cebd06eec8ccbe2249cd7d4cc1f25c6ace67472559c2d5566a1f6234c81fa806f3fb187a25389abf2779381dd8a6ae7cda96cc68010f4ccf5f411b9ba584bbe5f74b12c32ceabe99183e23cc1dcafc1f88e81f4f8a53dda4472b434a097942f43979701302108b2e7d16a1911ad0f194dd6b052a566d54eaf1ef850318d7832837e10a1e7cf59ce19eec98be7afd38642cd5f9042d4e9536f7f5b97cb804112d6fcca35ec07243b58ccc8f79963092f00e551cd4bca56623672c5c950c52fd53b614187ecbce10848bfb0863dd8c960a5db4123111c10bbcf71fb6123df3827f4350e82ebea3cc93ffdf6af9ba4bb544390a4a8bae232e124cb3a1c995c2890f804b0721f5759fd836bdfcbda2e8ed0cccf86c4a793728660a5748a921ca0a58b622aa2346db9d7f618f16de96685ab92bc72858836e73773b9333274a7dd34ed961a2a4a70e68dbef941b6d4078b309f6959a5cdb975317308f61105d0b7daa91add3aec10d1f88bb5c051267548f8ab4c9377677a49ce30ac30099298eca9a089fc9b64ba033f6687e7e2d86d8aff211b5de3f3536903b67bc9127d55ea1ccddeb444f56bb89866c0338d75921b343f76cb380007f2c65f9a48bb7c90c7f82b61af90abac19cd49a0fb5c7c60614a59768d555d6dbfe08acfa92d925a5c53c594de0db4e4b6fa8c756a27032c304a9a27e6592f811ec1f467099065a8bb9e6286129c1dc40ee5bb8d6c7fb8dfbd2ac1e54ea306a3a63eecbfc3adc0fcda6f06bb190e3f734ff2fce4de5cda1c084bb65422955ebbf21d582ffffa115dcb6d0f327ab361ade98215723ad7d519fd142a4d286125b29813dd7d24d852af63281c6fc84632899ba9ce4addb2203b9764c11d9d32c7097638aa71e90cd31105b8385cc435cae1163c35d42e0d93fd80aa431d408cac5976f9338831923b242bea73d23780a2af4cfa97a8a88aef2d27d2ab4fc3bcea23360d1b1b04d41519c16edbd6780b5908badaa7b9b36a687bba05dedbc4450780eac8ec42013cd9e4a2e4b86a287514a72bd9cf445b80cd65e09f21152520e29e481669d81d35b7543f0737645dd26043cc679ebd5ea2f37ed7bc83c4436e56743635588156bd34d8a4f89c137d2b5fe7bbeefe9d3601768a5d704a47ee2a1a503f0f64f856022c12440c70c4d71e8f9b75321b4ecf9baecca20efdb3eb3595a48f1e5d5f9ec4240daaf518eacf47c87fb01b8fbd38ff06d1803ff7a3346fd9a5100c4f42d56fded0d122d6fbbfd19070d16c419befd26358cc9874aad25c7cb22899f56906a2b571226e306d379afd82e735f2753f15a9c654bb43cd88054a27d0bff38dc9be6ba6f7c0fd887aafcdcc2bb1c2eb7c2b596e026cab6f4ddf85a2c6fb86d7c3460345256a8fcb77390f0ab05140c424d9aa64e3d400065e1bc87dbae2459856d8e6a782ae6dd55a1a8cab36aee6ad6582d7d2887e8e029c5dda531a1c01e778db33bb76f32e2364ff0a70318fe653edc32da612fe6f2968ca991fd836be97cad85bd2ee13052855931ed14acb84df2f592e5c5cde24672df6af9e6d799924df35445a6b149510400909a48a4aabb9cf47a3e1387cda678dc5eb6ebe9ccb535af9ebd14086eb00a173e319981cf11d9faf8be71c977709811e8d929e299c4195f1203ec5cbdaff6e440a66444e1c2040ebbca2855cbb68de6d5d95a6c4a3175d91b50cee712b0c03ba8ed5c19f0ad14ff9ea030bc8ee8abb41a933f4c633bbe85f4c5f263ac97fa518c0abef0ccfb4e5674383ef7877d04823827603f3d982666ffdc64f57a64796f0bb0578429afe2345f61e8a3dfe2182444dc2a841c9eb718aac99315455061df556853dc1d5c541d156fdb145def2786c7ff5391dd1e790c7b7c09adb68879e7d71c4f9a77b1a28983e4c620f283a49383156e7b4a39204e6bd6d63943282498e4a6c05fc26f7c7d2b42c16eed8e87ea67d3fe9e2cc0276f41048d9c4805782edada75dad3a0154d18449518adec93acbc412290d05571fbbc1cff39d5c4e1800ba02d4a9785bed34cdc24db37fc62503f88974919daaf464e96797ae377aa096ed0da13671dc065473453cd6145f7bed5faee200e1d0311edacb25e2b49e5c5bb28aa04662138e5bb808f79ae5abdc11daf945d475c6579ad875f22fe5bf7b45b679bbf67918980026527193152e4cd1189bc56bd064bc8eecfdef77b678c1500079747b2d4616dae8af05ecc3a2d5a3982d70b499a91b55167c584111462b7767304679e206c13b2c9b949ae1b6a356eb3cb74f3fd1e30f3fc0facfe48254d5e36805de520924dcb935dbf1a6ded013e1647817e39fc30b8e2b1f45123dd78916aecfc046b9d5a4aa234748fde9222c0d85de0c44f4d9b0a4626c66b3246c499d1eddaddc34a04e181eae28048a34b7af177c6dce5791219f28d6d2d3cfcf3ea882d4205b5ce2984621d47205c5408bf59b9a7c89ccd5f225b3cc27d6c5c36f06f7bbd32e718fbd05f7529cec45bce9fe40b43c97f814ae9a7dc4d28a43ffd6782f475204b6b2044d6dd2ad88b42cc8db6d3e5f0dc6aa5d1d04d39c9f28e8dbb6ea2ac03d106e9681f8b6ce0271ba7a94054fb8271595532a1ee9cf5c68bba64f873a40697f005ee905f4d0115979bdfd7b34100c4866cef17be34ae278a76e5c538f423d5317d92dca0ee8e176d6a2988bb9cfc9d383c175fa8a30f7c4c436a91f264ddd356119f94f70fe379a9a578e5fcc91b7d7718d65350eafd08c56a3e0f72d59266d8d17fd06718490fc6c9d9084d3814fd12b6dab8bb2d0aa4e088f23b5139365862a454da607bfcb52663c7e8275a022c250f2e12ff654d998a2fe334348c48ddeae5a3b874eaae1118187813ff4c12a4e3d418cf984bedb045666ecc2fa2c98752cd270d8314498bf47e86ffcb0d4fcf92bab7bd50c0a28394b09c67c93a03b141b1d9259eae7fc1b16487aa8fb1ca07e2f3961b7db7b6c5ecd6cf5345ba1dba5714d6c21a9df6b287a969f956bb016b119e8d4db25da8f9c9f2027a961ad2894589d11630f08792f59cffa21cf5fb6e9e204d70d41b551b2c6e71c1cf6d715d0ae7c707bd75dd3cd686c6429c3cfe6f88a87964190824453120197d4c9ae9879029e1909dfe06673e341d098366d2b097ccce8e7d65616f5c24005a653358a74bdd493877d69bf8a51f9e39bdcf7332881b8706ceb19eda2eb8ceb3e52bc59f866fb262878e44dfbb4a074015f8dc9678f42cc97fdf1df5d5b1e966eedd0f5da8c55602b1189491fbbf57e5920b87429a6bbfb47bb051457edf07b342d0c31ef9171cd405711df78c530a560f91d7d111640d16e71c1adbf8a2d30267c198e203b2530c444b7b11938bbbdb970f3a9e0540bcb20f434136b0ef2b5e6e76066c8c55756a788be8ebc557a8d56086f73d2f16591f50fae31520b10aa24e20c702580740d8dcb44271c2d5afc5bc52dfcab33d88b6a3b33b69f73b7e39e6a2d4ef757638d8b21b1ebbe110f7ccbf4d5f70f37f41a0c54b2691de23fa55fea73b032e29a86e7d0b7cced986adbbf661d090e4623df2db8652e73c10b0919e9ba2ca4428af7e16b22b487fa69dca7c00a93cb75dc3034d84960a49fa597a15a75fb468f8c593e2c9efe3beafb9369e02db2113827d1230bbbc751aeefba81fc864eae6ef462030776578a945c72f0d44fde92e272a1b3a520aa7266f873ee3576ec1b6b51d8100962d32f370b5d34f7a657cb61b82eb5832fbc0770257eb7e60978c6b2c4d3fc758ce36b536eff76bbd4699264313c62b1b0e7c9b62bf7110633839ee083bf8cdcfbc9579a85b9a531827a9f5ef22bd8f927a2f489229f480d90c36df89ffa3539a66c3126134d4f5e70ee58e02c4eb365a14e8ade38b8de791d7a4f9c59671914cde1b2dddc5164bfa15d9247b997d8ad327a83c4a477d2968bfdb77ac69fa67b9c3296d02534ccd9d0a2b73be8cc8873af85c699823ea656688396699ee600153ecd43e6703dde0e858f681368742f844384b08bf091e69f6aa26ff5dbaf4e8cbb46294b827b87893fbed056ef615d2ce51943078f8ad5bd2e38458e08ab1a97f32c6f22eaf9c37bfeee7b6e37f9c611d8b02e4dd", 0x52, 0x1000}) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xffffffff, 0x400) 15:41:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) 15:41:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) [ 663.289309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:59 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x82, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) modify_ldt$write2(0x11, &(0x7f0000000080)={0x401, 0x20001000, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xbc7, 0x10001) read(r0, &(0x7f00000002c0)=""/41, 0x29) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000340)={0x1, 0xffff, 0x348, {0x6, 0xcee}, 0xffff, 0xfffffffa}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) [ 663.353343] print_req_error: I/O error, dev loop4, sector 16 [ 663.380510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.426903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:41:59 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="b04217183748129ad0a6b8ce02e8354a9dfb1f2314e8abb4374dabc25becfa2a5c49fb66090aa40eba036ec004ba7811769b3c0fe695d016b23ebfa34afb53", 0x3f}, {&(0x7f0000000080)='m0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) 15:42:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100e6b77c53000000000000"]) [ 663.908746] attempt to access beyond end of device [ 663.913736] loop4: rw=12288, want=8200, limit=20 [ 663.944739] attempt to access beyond end of device [ 663.982561] loop4: rw=12288, want=12296, limit=20 [ 664.006204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.006955] attempt to access beyond end of device [ 664.102353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.124713] loop4: rw=12288, want=8200, limit=20 [ 664.159186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.160038] attempt to access beyond end of device [ 664.185264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.244477] loop4: rw=12288, want=12296, limit=20 15:42:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x5) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 15:42:00 executing program 2: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x5800) msgctl$IPC_RMID(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd8, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6e801d09}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x86f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xd}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400c0}, 0x4044090) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x22080000}, 0xc000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x44}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000001ac1e01010200000208000000ac14140b7f00000164010101e00000027f000001ffffffffe0000002e0000002"], 0x30) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) 15:42:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 664.401905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.435723] batman_adv: batadv0: Removing interface: batadv_slave_0 15:42:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000240)={0x6, 'gre0\x00', {0x8001}, 0x1}) [ 664.473210] xt_conntrack: cannot load conntrack support for proto=10 [ 664.481834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.495663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.512591] attempt to access beyond end of device [ 664.529313] device bridge_slave_1 left promiscuous mode [ 664.547571] loop4: rw=12288, want=8200, limit=20 [ 664.574117] attempt to access beyond end of device [ 664.581927] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.584927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.612729] loop4: rw=12288, want=12296, limit=20 [ 664.625255] device bridge_slave_0 left promiscuous mode [ 664.638866] attempt to access beyond end of device [ 664.670750] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.677640] loop4: rw=12288, want=8200, limit=20 [ 664.682632] attempt to access beyond end of device [ 664.696865] device veth1_macvtap left promiscuous mode [ 664.707123] loop4: rw=12288, want=12296, limit=20 [ 664.717215] device veth0_macvtap left promiscuous mode [ 664.727204] device veth1_vlan left promiscuous mode [ 664.732296] device veth0_vlan left promiscuous mode [ 664.760493] xt_conntrack: cannot load conntrack support for proto=10 [ 664.988052] device hsr_slave_1 left promiscuous mode [ 665.006306] device hsr_slave_0 left promiscuous mode [ 665.052261] team0 (unregistering): Port device team_slave_1 removed [ 665.081124] team0 (unregistering): Port device team_slave_0 removed [ 665.101270] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 665.129530] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 665.213825] bond0 (unregistering): Released all slaves [ 665.259417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.131944] IPVS: ftp: loaded support on port[0] = 21 [ 668.492250] chnl_net:caif_netlink_parms(): no params data found [ 668.693492] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.701069] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.712959] device bridge_slave_0 entered promiscuous mode [ 668.722325] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.733210] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.742462] device bridge_slave_1 entered promiscuous mode [ 668.775237] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 668.785596] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 668.821459] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 668.830486] team0: Port device team_slave_0 added [ 668.840496] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 668.849232] team0: Port device team_slave_1 added [ 668.880744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.888802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.919412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.932251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.943138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.973069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.985204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 668.997438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 669.033962] device hsr_slave_0 entered promiscuous mode [ 669.040792] device hsr_slave_1 entered promiscuous mode [ 669.051059] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 669.061046] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 669.181073] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.187522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.194214] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.200671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.255447] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 669.262684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.276407] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 669.290079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.297905] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.304900] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.321498] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 669.331542] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.343681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.357181] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.363581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.389849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.399937] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.406415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.429218] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 669.440168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.452524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.467353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 669.482187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 669.489300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.500880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.508845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.522838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.533870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.549217] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 669.555408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 669.580777] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 669.590544] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 669.602638] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 669.611576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 669.627096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.717883] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 669.733923] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 669.741532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 669.755645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 669.837940] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 669.845409] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 669.879330] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 669.909243] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 669.927953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 669.938649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 669.962718] device veth0_vlan entered promiscuous mode [ 669.970526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.986895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 670.008307] device veth1_vlan entered promiscuous mode [ 670.014353] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 670.040148] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 670.068209] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 670.089449] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 670.110633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 670.127078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 670.134574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 670.157026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 670.167080] device veth0_macvtap entered promiscuous mode [ 670.178286] Bluetooth: hci5 command 0x0409 tx timeout [ 670.183797] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 670.206482] device veth1_macvtap entered promiscuous mode [ 670.212890] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 670.233071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 670.259945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 670.279549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.306448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.339668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.359518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.379549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.389473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.402638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.414725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.428027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 670.439863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.450562] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 670.458690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.466030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 670.473472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 670.497128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.505070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.515834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.525663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.536345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.546146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.555309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.565141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.575091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.585366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.594634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 670.604482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.615254] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 670.622442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.629583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.638660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.813856] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 670.824215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.841437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.868318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 670.890577] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 670.901071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.909828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.922347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 670.988735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.051296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.112818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) 15:42:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:42:07 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002280)={0x90, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa06}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24b}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, r3, {0xfffffffffffffffc}}, 0x18) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:42:07 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}}, 0x3a) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0xff, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @remote}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='veth0_vlan\x00', 0x101, 0x6, 0x3}) 15:42:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e56a3938b13cc2091a6159698108f8ef359a47f52db7ede71fb651d5ba69d5ab016eeb933af0b5c45faa588c56b95fd5ed70dc0f109f47c9b0e4c1a45cffd92018a3d96c81fc417a38fef1b9bc1a94b6e7b9339e6f3cf0d115a39f670c4cacdac491e5d6e910ff7a857562cbb2c0ec6b3cf29356e3ce83c4b0ddba73d748a82db3c36a42185c7562088c157b1fd"]) [ 671.512377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.530329] f2fs_msg: 172 callbacks suppressed [ 671.530339] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.555196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.574880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.603276] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 671.641316] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.643532] attempt to access beyond end of device [ 671.654182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.668240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.674320] loop4: rw=12288, want=8200, limit=20 [ 671.679586] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 671.707601] F2FS-fs (loop5): invalid crc value [ 671.707899] F2FS-fs (loop4): invalid crc value [ 671.734645] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 671.743393] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 671.752666] attempt to access beyond end of device [ 671.759443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.761396] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.778857] loop4: rw=12288, want=12296, limit=20 [ 671.778905] F2FS-fs (loop4): invalid crc value [ 671.779349] attempt to access beyond end of device [ 671.779356] loop4: rw=12288, want=8200, limit=20 [ 671.779408] attempt to access beyond end of device [ 671.779414] loop4: rw=12288, want=12296, limit=20 [ 671.888174] attempt to access beyond end of device 15:42:08 executing program 5: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="fac01445fa38d7e7b2f92d969533cba145f5010dc8"]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x4}, 0x16, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000280)={0xac, "c63996c6a66b5b1b571fe5b9cafcbaf9f96e3dd872e4c1e57496eab638df3d32c308baf3f3e4b54938aeff921979756a22a75aeb9b93f7941f6cdad465aea638be822168aee90c1ca34d0c6dcffe40ad92170cc7fc06f6866181f2314a9375b3bd0f985a5e27c73209350252e4e0bb291ada670033763aacef0f2ee221dbfb9e0dfc8dfe28acf7ea6b906b7b3b18fc8f6bbd19cd99b63c06218949be533f50f53b611d1dd245047711d81327"}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xffffffff) [ 671.908694] loop4: rw=12288, want=8200, limit=20 [ 671.927107] attempt to access beyond end of device [ 671.943298] loop4: rw=12288, want=12296, limit=20 [ 671.959515] attempt to access beyond end of device 15:42:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) [ 672.002122] loop4: rw=12288, want=8200, limit=20 [ 672.017704] attempt to access beyond end of device [ 672.038465] loop4: rw=12288, want=12296, limit=20 15:42:08 executing program 4: ioperm(0x1, 0x8, 0xfffffffffffffff8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f696e6c696e413879fd209a866b4decae2c00"]) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200000, 0x0) 15:42:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="23072cbd7000fbdbdf250c00000006000a0044f4000005000800030000000800ee0005ac0f0009000700b2622f10140000006eb89f3a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) [ 672.166029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:08 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1, &(0x7f0000000180)=""/127, 0x7f}, 0x2}], 0x1, 0x2, 0x0) [ 672.224011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.238349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.246508] Bluetooth: hci5 command 0x041b tx timeout 15:42:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB="fbdfffff"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)={0x14, r4, 0x17dd1918d9330745, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x9c, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200010e1}, 0x44001) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x90, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x4) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 672.305651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.315605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.402038] attempt to access beyond end of device [ 672.414229] loop4: rw=12288, want=8200, limit=20 [ 672.415197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.424810] attempt to access beyond end of device [ 672.452705] loop4: rw=12288, want=12296, limit=20 [ 672.474504] attempt to access beyond end of device [ 672.489641] loop4: rw=12288, want=8200, limit=20 [ 672.506152] attempt to access beyond end of device [ 672.513980] xt_conntrack: cannot load conntrack support for proto=10 [ 672.530960] loop4: rw=12288, want=12296, limit=20 15:42:09 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) 15:42:09 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x2) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) 15:42:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x5, 0x10001}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x65, 0x605fe0}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e7b5da6abefb4796fe40"]) 15:42:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 672.611765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:09 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="21000040be88e8656c0abc4c10ea002c766c03a2b9bd36eb523ccdb6105257da9e95c181528a89711fedf8afd67392a8232942eb5ba9f23542707998d157eeb31f7f50af52d61a9cd803fad1cefc1bfcc07ceb9c6a3c0eff4574164967b45c9214dedf9728d32edb7d83bc3cca309ed5d2f6cd091973d732af97bdd72368aa5223c37088b5a789849b6917291636b111ea5ee132e03991f3dd25a76d95036a3ecaf1cd419583840cd7ea198e840ed300000000000000000000000090b2210cccfccaee9a1a93f13bebad3e21cb184a8ab386cd438ee8c20c88e7d0149714c92a03463210fa8ec3a694528531051cc1ac96a601f525fdd739207d6445c76404cdd7b80e26834155779d31531cd819e79c5df3b1436eb14fab738f8731ccae86e73ef6a682c36c2304e411a5d2b33d53a5a1fa41ffa0753f74b957e5c6ea59479c0be5650bdc7066751c8a6a5c243ed5b4d41db78bab77ca4ac55fab701ca546b186b39e7d5f3ca33515079463d93eda772c5be2919fddf03fa473a71bb1552bd9d73a5e7904c3703e31b483714e73487758bd70d6559edd9c1e9dfff7254e0963dc673ac2a98e989f02f6a490c803f323b5e081e1"]) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x88d0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x8}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0x140000}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) [ 672.724917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, &(0x7f0000000300)={{0x3, @default}, [@remote, @rose, @rose, @netrom, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000380)=0x48) [ 672.790408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.885330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) write(r0, &(0x7f0000000040)="3842b39d9c90a0e4adf3f5c751beb04c8d4e0cf6beef975fcb3a92cf7979724936344420fc1c31be6b97ba107a245ceae62dbfb6e032b8c54e8f86b2961cad6866dfc1e7c9a0202dfa904294319c6f144ae2a47765e84011e3533c24", 0x5c) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 672.931943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.971712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.002177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:09 executing program 2: setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000240)=0x81, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20084040}, 0x1) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x2}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) 15:42:09 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x4, 0x8) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe09}, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00'}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a00000000000200000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030e06000000000000000000000000000e0000000200000000000002ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e8a1e09a5089cd9f62ce9e5be58e2b4f24cce2b0df3587655428c5ed795a6c22ab02e0f55694f63b038f6f5e3725907bd7b286ded579ffb2c707b523fd4829c968af1e485a552020f1bb2324736bb1ac345449b4dfd0be3acb2aeb72d54a860e0778dde1bf1a383ca08bd9ea25d09c2aebb915492871e63f0935b552f934fa3dd21c5804e8641913bece21007791191ffa"]) [ 673.054671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.068827] xt_conntrack: cannot load conntrack support for proto=10 [ 673.079623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:09 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c, 0x81800) r1 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/52, &(0x7f0000000180)=0x34) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x100, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r7, 0x0, 0x0) r8 = getgid() syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f0000000600)='./file0\x00', 0x1, 0x0, &(0x7f0000000640), 0x2000008, &(0x7f0000000680)={[{@quiet='quiet'}, {@uid={'uid', 0x3d, r6}}, {@part={'part', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x800}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@gid={'gid', 0x3d, r8}}], [{@fowner_eq={'fowner', 0x3d, r6}}]}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() r11 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xffffffffffffffff}, {}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x1, r4}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x5}, {0x8, 0x4, r7}, {0x8, 0x0, r9}, {0x8, 0x0, r10}, {0x8, 0x3, r11}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r12, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'veth0_macvtap\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20005804}, 0x4040000) [ 673.178845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:09 executing program 5: getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="669a245c04027ef86ced1a7c7100"]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x4, 0x4) 15:42:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 673.283193] attempt to access beyond end of device [ 673.293726] loop4: rw=12288, want=8200, limit=20 [ 673.305112] attempt to access beyond end of device [ 673.324616] loop4: rw=12288, want=12296, limit=20 [ 673.339662] attempt to access beyond end of device [ 673.350050] loop4: rw=12288, want=8200, limit=20 15:42:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 673.399107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.418840] attempt to access beyond end of device [ 673.454747] loop4: rw=12288, want=12296, limit=20 15:42:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) read$usbfs(r0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x101400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={r2, &(0x7f00000002c0)=""/108}) r3 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3f, 0x4000) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x3f) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x12b) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000380)) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) [ 673.484343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.502167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.549357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.593208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.610134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.668755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 15:42:10 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x2800, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000280)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000002c0)={0x57, "7cd5262d07525e0bc175883274f2fa29759f0578405e4c4d6ad0c436c70adb66", 0x1, 0xff, 0x3, 0x20000, 0x50c00, 0x4}) 15:42:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 673.936336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.984156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.013425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.038403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.055575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.070469] attempt to access beyond end of device [ 674.075437] loop4: rw=12288, want=8200, limit=20 [ 674.097438] attempt to access beyond end of device [ 674.105555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.125880] loop4: rw=12288, want=12296, limit=20 [ 674.137180] attempt to access beyond end of device 15:42:10 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={0x0, 0x1, 0x53}, 0x0, &(0x7f0000000080)="96", &(0x7f0000000140)=""/83) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-[{!\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) [ 674.143724] loop4: rw=12288, want=8200, limit=20 [ 674.150852] attempt to access beyond end of device [ 674.158566] loop4: rw=12288, want=12296, limit=20 15:42:10 executing program 4: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) [ 674.190372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x80, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa800, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x1407, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x78}}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) [ 674.327067] Bluetooth: hci5 command 0x040f tx timeout [ 674.332690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.354761] attempt to access beyond end of device [ 674.380318] loop4: rw=12288, want=8200, limit=20 15:42:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) [ 674.414576] attempt to access beyond end of device [ 674.423275] loop4: rw=12288, want=12296, limit=20 15:42:10 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008a8463d7a8e318ff01000063e827bbbda7875f"]) [ 674.471395] attempt to access beyond end of device [ 674.479131] loop4: rw=12288, want=8200, limit=20 [ 674.484269] attempt to access beyond end of device [ 674.494321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.498874] loop4: rw=12288, want=12296, limit=20 15:42:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) [ 674.518591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.579841] attempt to access beyond end of device [ 674.586105] loop4: rw=12288, want=8200, limit=20 [ 674.597802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.607605] attempt to access beyond end of device [ 674.613533] loop4: rw=12288, want=12296, limit=20 [ 674.619057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.630222] attempt to access beyond end of device [ 674.641320] loop4: rw=12288, want=8200, limit=20 [ 674.649141] attempt to access beyond end of device [ 674.654933] loop4: rw=12288, want=12296, limit=20 15:42:11 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) [ 674.681793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:11 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="756f6992"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000", @ANYRES16=r0, @ANYBLOB="000128bd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff000000008000000000ffffff00000a00060008021100000000000000060008021100e31600000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a0002000802110000010000"], 0x94}}, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3d}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}]}, 0x4c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000400)={0x9337}, 0x4) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000240)="0cf17c0c89a38f6a3e4053d67a1f81bf29b7ebd986f3e80e1673bb04b473dfc6d1c5ab8406061bb402fe3a87a5bd63c0372dd3b4cf852ec2a1af4e1246d7dad7db510b4f8b193740d09ca7f54dca10c042f226598e3b229092abdb297c6df06f563556539c149e0d91412da01e620133d70c8255af4a5d361c707e54a1e1186142b804f0cb9432e3dbb17278b3aee8c8ab0e027eeff73359ea1041c30c74023b668d115191a7d068e77928484049baedcfcfa9afbe42999f4b5e56d0a3236e2f7dbb0d54923fad2907") [ 674.858215] print_req_error: I/O error, dev loop4, sector 16 15:42:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000002280)=[{&(0x7f0000000080)=""/138, 0x8a}], 0x1, 0xd7, 0xffeffffc) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1f0) 15:42:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) [ 674.899327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.982731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:11 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r1, 0x5607) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11]) 15:42:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) [ 675.034801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.056703] print_req_error: I/O error, dev loop4, sector 16 [ 675.120708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:11 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) [ 675.216215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.303241] attempt to access beyond end of device [ 675.318499] loop4: rw=12288, want=8200, limit=20 [ 675.333665] attempt to access beyond end of device [ 675.344277] loop4: rw=12288, want=12296, limit=20 15:42:11 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000280)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x6, 0x5}}, @ver_80211n={0x0, 0xba, 0x0, 0x1, 0x0, 0x2}}, 0x4, @default, 0x4010, @val={0x0, 0x18, @random="81b08df2ed40963624ca65a9b314311f338c8a07b41dbc97"}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x200) [ 675.361749] attempt to access beyond end of device 15:42:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 15:42:11 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="96a4246b00"]) [ 675.394211] loop4: rw=12288, want=8200, limit=20 [ 675.410877] attempt to access beyond end of device [ 675.432986] loop4: rw=12288, want=12296, limit=20 15:42:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) [ 675.483644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.527666] attempt to access beyond end of device [ 675.555754] loop4: rw=12288, want=8200, limit=20 [ 675.576937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.588348] attempt to access beyond end of device [ 675.593307] loop4: rw=12288, want=12296, limit=20 [ 675.629044] attempt to access beyond end of device [ 675.634021] loop4: rw=12288, want=8200, limit=20 15:42:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='autogroup\x00') perf_event_open(&(0x7f00000010c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000002, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001080), 0xc}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x7fffffff, 0xfffc}, 0x0, 0x1, r0, 0xfd35a69314865034) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000f00)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000540)=""/60) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CHAR_RAW_GETSIZE64(r7, 0x80081272, &(0x7f0000000ec0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r5, @ANYBLOB="0600000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\b\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000fddbdf254b00000008a7fa00", @ANYRES32=r5, @ANYBLOB="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"], 0x828}}, 0x4040) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) prctl$PR_GET_SECCOMP(0x15) [ 675.669663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.675950] attempt to access beyond end of device [ 675.696002] loop4: rw=12288, want=12296, limit=20 15:42:12 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) chmod(&(0x7f0000000040)='./file0\x00', 0x12) [ 675.815229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:12 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000280)=0x22, 0x4) 15:42:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 675.903500] attempt to access beyond end of device [ 675.928567] loop4: rw=12288, want=8200, limit=20 15:42:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 675.970787] attempt to access beyond end of device [ 675.985287] xt_conntrack: cannot load conntrack support for proto=10 [ 675.991238] loop4: rw=12288, want=12296, limit=20 [ 676.000857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.009157] attempt to access beyond end of device 15:42:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 676.024823] loop4: rw=12288, want=8200, limit=20 [ 676.043790] attempt to access beyond end of device 15:42:12 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEXC(0xc, 0x2) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:42:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.081776] xt_conntrack: cannot load conntrack support for proto=10 [ 676.091418] loop4: rw=12288, want=12296, limit=20 [ 676.152449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.250199] attempt to access beyond end of device [ 676.256341] loop4: rw=12288, want=8200, limit=20 [ 676.285667] attempt to access beyond end of device [ 676.304658] loop4: rw=12288, want=12296, limit=20 15:42:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.326215] attempt to access beyond end of device [ 676.341202] loop4: rw=12288, want=8200, limit=20 [ 676.347099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:12 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @initial, {0x2, 0xffd}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @val={0x3, 0x1, 0x5}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}}, 0x3d) [ 676.397499] attempt to access beyond end of device [ 676.406291] Bluetooth: hci5 command 0x0419 tx timeout [ 676.414194] loop4: rw=12288, want=12296, limit=20 15:42:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.510263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.593384] f2fs_msg: 284 callbacks suppressed [ 676.593396] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 676.631234] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.700377] F2FS-fs (loop5): invalid crc value [ 676.718172] F2FS-fs (loop5): Failed to initialize F2FS segment manager 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.744853] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 676.772338] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 15:42:13 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'b', ' *:* ', 'rw\x00'}, 0x9) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000540)=[{0xc8, 0xff, 0x3, "805b1d7f84d7b3cbc1760dee6f508db7639f2dfc07f35a194d46a56f7fea8aee63ca3f5716bd46747226fab1f68f074733d32a3e705afc5c7dce9c3acea4da741daf7d7d49db7825dbc80c8d07038969e7a532eec0436a687b61940e8790b811a4c240fe8275437144d38ab56e6db483f96dc0dd28a2a119460862b93939e425ec244fe6ea632952b7873c504c4eeac30e9abc6ead345d57d45d9f96d6ea7277d31edfc4e8368ce4d24e795d757545f5da9886d35f3853"}, {0x18, 0x8a, 0x10000, 'S'}, {0xf0, 0x88, 0x5ffffffe, "38213ff5afcf4574179ef7a6139120738714f843949f215e8744a1ef673272992e0ad953bfcfd5b163fa4180904af6a084ffcc038e1b53579e188293829c2a44f3cbc678f2fc2ea964317d10fe38d08d6a9c0300e5b8815910e5af203b4d20b959d187a663210c542b70982a9e8426f34aa5f180b188a100b7991cdbd9db4734ed302499bc890ade9c47208590621f423cc20ec99eeea270d7b979c533f6365e3907687827d1edff18a13425ca861612f8b35d9effa28bb0be86758062e338b9ad66bf103bbb474f37519809f3873e90f69a9060e50b92543d1eeb"}], 0x1d0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x4, 0xfffffffc, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000003000)={&(0x7f0000002f40), 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x1c, r2, 0x1, 0x70bd2d, 0x255fdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004094}, 0x24004040) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x280602, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x32ac8cd8, 0x78}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x538}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x8010) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30044011}, 0x50) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f696e6c696e655f57ba2ef8e00b8bbe97eca94d518debd164656e7472792c00c933988460caa88d767f7cae8e91ac20cb73a65394a5c4c6eada2ebb8c04406c8d9d4eaf511a4953ed006dfc599b6ebc8d8d04dc37bd51a1f659e31fc55c33cdba90755beedc2ee3ff7bd58641888c929f298e3d98ad653dab5c6b62e80a"]) [ 676.797368] F2FS-fs (loop5): invalid crc value [ 676.813868] F2FS-fs (loop5): Failed to initialize F2FS segment manager 15:42:13 executing program 5: socketpair(0x1e, 0x4, 0xfffffffe, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3b750169", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x4840) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)=ANY=[@ANYBLOB]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/meminfo\x00', 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000680)={0x1f, 0x7ff, @any, 0x2000}, 0xe) memfd_create(&(0x7f0000000040)='.\\\x00', 0x1) 15:42:13 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="502000000802110000010802110000015050505050500502040000000000000064001040003f0000000000000003e00980710701017f01012e01ddec431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418fddc62d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"], 0x1f0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLERRORu(r1, &(0x7f0000000700)={0xf, 0x7, 0x1, {{0x2, '+\x9e'}, 0x8}}, 0xf) r2 = syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f00000002c0)="41231bab74f6c6d9839127bfe3ae0a545a3bf42ee02df6581b744806c104be432a8935e9bb407f84bad489d9370b77c3bbd34948ced9483827107bee3232acc5280fb4abc1cb8b383773cfc19d7cd909d12208ca5f8270010c3d1211ad4e5562a02cd219fa1ef16bef13365ccb2b8a5c0404419084ff204ff558a05ae37fce47a81a1ea4344db52edd9a49ffc8ffb3af9f30a845d633c3c6eb5cdcc9ea13b32591e8a45eab76ca1657a18bf6bfea2f7abeeef962fc97", 0xb6, 0x80000001}, {&(0x7f0000000380)="fbbddd1bc16cce7ad5c8e25ce10b0ebd33711457864923d3697155a9abbbbff66e0092e0e7d0665838d9502b4b1d0941cf13ee446cceb6a7278bf444665ef8306b0b7cfa050c630dcba39a5a2b38457bfe56d8b522d92079f24e442c425d645f9847477b8a6505f75b02cf897a26f590484adfa7f280a4573dc0acb7ccf7d9cd9fdcac7b26bf3d48d36e1f4410440f873e3b6caf", 0x94, 0x10000}, {&(0x7f0000000440)="8ef8de7c7a9b6be8d81cbffc28b056b19a9e8c1e57e9d6d5cc11fc43d8a1062fd05885efdc8d129036c1d234c421f8914613eda8965d94d9537fca3d65a4d394e548106e409b6362267d676b33e2c3453093187886f59f80f9be27308074bc8b7be632f1c69aaa62abf69b1e3e", 0x6d, 0x1f}, {&(0x7f00000004c0)="717cc4b31c8796814bc04d9352dec6d3304c99a013a417d738db2c2366ccb4bbdeaebe49f57a4e5acb4f731242a49be92f98c2fe28d83e62e38a1ed6a8f019270d1dc698fe860dc6f8cecae493354b5132438d2e08dbc1e26c8b51b9e7334cbfd41b1589b1afc203dc790a7e8273d061ae6b1c5595a244201eea772db283ab761a663a96f523eb09113d98a8c5c9615618233c", 0x93, 0x100000000}], 0x80, &(0x7f0000000600)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_lt={'uid<'}}, {@subj_role={'subj_role', 0x3d, '[&'}}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, '.-]#\''}}, {@permit_directio='permit_directio'}, {@seclabel='seclabel'}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000b40)={0x188, 0x6, &(0x7f0000000740)="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"}) openat(r2, &(0x7f00000006c0)='./file0\x00', 0x942, 0x40) 15:42:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.859237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.890031] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 676.913833] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 15:42:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 676.981084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:13 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) pkey_alloc(0x0, 0x0) 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 677.215082] attempt to access beyond end of device [ 677.232104] loop4: rw=12288, want=8200, limit=20 [ 677.246095] attempt to access beyond end of device [ 677.261525] loop4: rw=12288, want=12296, limit=20 [ 677.279940] attempt to access beyond end of device [ 677.295669] loop4: rw=12288, want=8200, limit=20 [ 677.312017] attempt to access beyond end of device [ 677.320606] loop4: rw=12288, want=12296, limit=20 [ 677.338517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.375137] attempt to access beyond end of device [ 677.386907] loop4: rw=12288, want=8200, limit=20 [ 677.399608] attempt to access beyond end of device 15:42:13 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x251b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:42:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 677.422019] loop4: rw=12288, want=12296, limit=20 [ 677.433224] attempt to access beyond end of device [ 677.440672] loop4: rw=12288, want=8200, limit=20 15:42:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:13 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1f0) 15:42:13 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x80000001, 0x8, &(0x7f0000001580)=[{&(0x7f0000000100)="f0e6f48d79f383ec502a45a418402fba1275cb1a0e3eb2a77f983a3efba8bfb4b892dd9ba859419fca6c4f1ae257c1946d5c2dec0667f96b0171efba292659a4ad56dc03bd79ed72a78647c172ceb010ef8cdda92a27144817efb1d7e40220bb1c60ba963e98ffb6e825e64d2597dc2774bc252a5112b9f11a293993057210477d15d523ae73bd08d577dfaa618bc31eed8d5495a684d51fdbe92c135e1811a7cb75b66370877aec937f3dd5eb89dbfb2acbfed30fb9bcfab84e3002e0973ea3f69fe27fb649b78f5efd9db1fdf7a3f70f8ed147008091fbfa74d36142bdcef65e9b3e3ac5e5", 0xe6, 0xdc}, {&(0x7f0000000200)="641b77bf6a6411dcf6ef5f03a2e67fb7775a559209f3f5cf8bcd2153e01d4cae7987240cbf1390057c9faec94446a3f1ee4187f52efd46f7600e3ea875fa43f7f606509bd123e7e938395bcc352575acfeb25977dbfdcd9e5fe0dc8cca925aa7d2e4b7d762c6cca176163358808e74a7ecf7e3aef70cecbb48590333d25a496d63aef4fa781c6fb537a8ab33e06e232f4ee2e9ef6f45f82bf354f08011734cabf1de8bf9b7894dbb0bfd02971fdd2e22b513889e61359745c47eb4dbf3dd78523c4572965887ee4d60dd30d58f3dfc5fa07b418af0187abfedf1b7b382b4a1d1b38a", 0xe2, 0x4}, {&(0x7f0000000300)="1b488f54c3b8eaefcb13ea5f7d9b5cae257fb7981b4b70c1183f6f9b6fbeadff14ca157dcd05ef3052f04ea89af42d26270b871a877a90a7399ebdbb06298244821bfd3f2fe9eaa421309f655dc4e487cf4f68e512", 0x55, 0x4}, {&(0x7f0000000380)="fdf9e8ed239479c2184e31e1528d6add143a723d53a97cc51787cc8856364c4f92583b9828eb78f34197b8d94451554ab8f2a05cd870c1be2eb961c3febd35be933ae193412f7a1afe26f58b8fa3d25e0f80a3f8c5163830b79dab10d6f5", 0x5e, 0xffffffff}, {&(0x7f0000000400)="ccf05947ba8fb73177bf639144c40aed8e3f1142f131c88849e05db3308cc0f6fe336e9d0009d4f186a43585c47efa271924d45ca16cdb03", 0x38, 0x4}, {&(0x7f0000000440)="f5c4e94fc85fd6ca566199e9ccfaf2f1e086d7d87d1fa991e353bb3898529316b12df23b37cea2df22eaaa407e52a00106a90119fc50c35e6257eee574570e67b2c61d87471c1d7304bdb8e14120cdfb36d2e1fa32f378a0e5efbfdffba3b0aaa2e07bc80c90dc367988ade4200a88928a5b2734c5f14bb69e46d4039976e03a28343d72dd5f91492b1bdb5f798f794637266dc9bbc59957e15bc758a06aa01f13b2ac704057f2fb032c1ea27989093c7272110476915cb38a", 0xb9, 0x6}, {&(0x7f0000000500)="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", 0x1000, 0x7a5}, {&(0x7f0000001500)="bbc49a2f3206c5b27bd9a0f30683399d3c8106eafdeb9728ae3b15baeaf36011370d48180e6c04ac63185997d172be7c6b66eedad1d1dc1c958a5f381d9435e8ac395d9333f8cd32ccad5b52237277f7ef2604daa1c926d03d3acfb0378e6858fd54327944d273957667d641d587de43", 0x70, 0x9}], 0x3017022, &(0x7f0000001640)={[{'f2fs\x00'}, {'f2fs\x00'}, {'f2fs\x00'}]}) [ 677.478086] attempt to access beyond end of device [ 677.487781] loop4: rw=12288, want=12296, limit=20 15:42:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 677.553158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@null=' \x00', 0x9, 'macvlan1\x00'}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:42:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f85c65ab352154b407acdfc0ef428276cae0c0b8676f480727ea74c71c0a0588e0b6a1659fddd658f6cf0de28abd0872d8ef1c179e13e67f226de70e4046068fc7f2e491226ff10fb6fa79e3d9bb217213f1600167c8885363e86d53666a5e0ada6f16b567d1a8409c4d562470b0bf578555d8f13c43f96dcd9431824971534f621c6"]) 15:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 677.889845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.920379] attempt to access beyond end of device 15:42:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000440)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_a, @device_b, @random="a4ed03c3c3bc", {0x3, 0x1}}, @void, @void, @val={0x3, 0x1, 0x78}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x3, 0x0, {0x2, 0x55b, 0x0, 0x213, 0x0, 0x1}, 0x8, 0x1000, 0x6}}, @val={0x72, 0x6}, [{0xdd, 0x9b, "fdb21f1160b04ca6990dc9a21423c391bb65d7ec5ccb98f2031c136e8596d9bee97a17b38c30b7966774da9de4f0c3cb30dd9b50b863eae9f140e3146cceb35800b1efb419dd3e5ad9310b9c18bbbba7358a1c9417e4f65a459c5002aefac2d0c0edc8fbe81d69e9dbbc2a9002c6530e0f1d95a2f73cff9f54f422fe561aac321be2262f8af8e05199da34f380d2e2dc09a974944d674bf1ba0599"}, {0xdd, 0x59, "69a443be5707f1b63475e4bb2364539707fde1f628af12b27acdc164b0f23861cd23b3739330da8a5ceacb6adba8219b47326851473dde5f8a5627bd48b6f40592beb67e851a34ba3f275967e3bb8166d42d00b51e5eccc7cc"}, {0xdd, 0xab, "6e5aa02490dc4988ca01753807264d409af2b320b346cc48bc116089cbf95176867f38886b36baf3492eec1fdd1ee30e91104d5fe04bcc17305ad689bb8b026fc012e0cdb9e789cbbc3aa4275cfa8fd187bcffa80c881fc9cd916b58fb949187e9d1fed0e3e0eeba9740b810494d13066a3270a84f12905997c1d57628dc148e29de0fa41790640ad4d60b61c6121164b05f0572faa22a526af1472309bb07ba0c5b3e8f90d5836740fcf3"}, {0xdd, 0xba, "caec1c795e8909e6e8193831ca1c94236ec731df40c2a2220c9b461e5158f7f18eb1d116f71d3f31fe454e5d843102fb592e63ff0dbb1aa1c71084f21274cb551d91e9ca00a3180f45f043d170bab2e4145c2aa7772d338e3258965d4e6bf4ff0906f7b89a1af51597dacd43bd2bb8dc9ab9b283c3261151d20262d11a60d026e0e189907580e0e2c1fd29051d40c8d5ed2ee698af9d54b2f1baa7537354e203aac771ea41072ceff033534014e2c95210e722edf1613b0a3a3f"}, {0xdd, 0xe4, "b8fe94a25a2afdf4c2619e46c5a6f30b51034d692775efc84a66388ca80d24f28d0c8f51ef2c0dcfd26f476e005a8d39f64ab753f5781d2db8cbfb53190784ce867de2ed13562416fa36c55f9ffb58e0ea8bd1221aefcb732059cad4b014214f33066fe0995734a593d0b13fa23d3e5b51f84ce5b0b02831a4505b132474d95665839bd58e21e3d2f097234a3ca4d15a5e66855ab7843b6d6a485ccd9cf73487a53097a037c17e3f7e2a14855b07a80fc939b663baf82f1a673da9892b0aa8cd191683467661d31f0b5879a21a3f4131a4b6f8e429987d96073e966046185dbf5c67213c"}, {0xdd, 0x6f, "fe83cb54671018741a40777d0f1921120fd1e37578bb34c9791b091792aadad50da4a70852f7503bb70db1500b29d9628660f81c928ff49213e96fe65bfb38c34fa9953350bd02e3adad190fff11010ddb89baf8132a3affb496f0da89dab278c63a40eac420ab72ddc91a0e69d6e5"}, {0xdd, 0x96, "db247ff6dfb4692a379fd88d4d6073c332ea246b72ea98780f1bfe097767d8bc2434bc1378499f21630ab09610b69a2b467aad7e16bbfc5f208a55e2e9607262c51a8a8b399803e6e430727730e2c57751307505cec1511cc89e5ed1160140e1a137b0cb7a580107bac76735d0f04c59993beed7888fd9d0156fb1aa766f8f39ac2089270d52b5fdf9d38acef49921af168486a41888"}, {0xdd, 0xad, "7b7e677861953112feacfe6d67df0f3f818306d1bc2c05e77b4f45fef2f532f8a4d0442e9efb1ff57a0bb5c96a9b8834923294ba4ee26642ba1abc9511d2dbbf5c154293e760a35b87edf711763790b1c4d770fc42150779aa2b676b4ee27ee801c1abc8a3d902447b2a9f4fed2adc5ebd6993d4d917579921ea25eaeb056c78a1c64d7d15aadafcbf92318f6478a507610a2a16473a4704923417a0b23fead9b7ff29b33d6f66279a94b403e4"}, {0xdd, 0xce, "0e9dac07005aa82725ba85e31a828eb8074b6142a3021e4125e08a271ef4578ba937b606bb951093e0daed09d6a9fa539f78185e02959cb4ad6062b0dff45c6ceafdd38d485f275cf75c2ef967b01c82548a0e096103690be3207dd9a02d480ae2b33fe5b7e0bf469759b3a77c3019c6a33c7c36eb236aae70a75aedcc0c0bb53f1a32184da9539898944af6fb0f528018bbca12505521fca3003219546e39fdfc2dffa9926b2bf7c397066b2cb6af0ec0ddf8820b13f97cf1656030e46aeb957aac9b80d648810b97737ada06fb"}, {0xdd, 0x68, "e643f55a3a0f742bb1deb7fdd57552d49dfe10ccbf400e4c7c94153d1192b407720c37f1d0f43f18bc6f1654482fc46291b1a17a77b050ebbb4027e0ae5c89ace58201fcfa35cda61c99394d44ba2d919498c2b666350865915374bf9604738ab2af1dde78b94550"}]}, 0x678) [ 677.948868] loop4: rw=12288, want=8200, limit=20 [ 677.966294] attempt to access beyond end of device [ 677.977306] loop4: rw=12288, want=12296, limit=20 15:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.000961] attempt to access beyond end of device [ 678.030860] loop4: rw=12288, want=8200, limit=20 15:42:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.051954] attempt to access beyond end of device [ 678.064832] loop4: rw=12288, want=12296, limit=20 15:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.116536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:14 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x20, 0x40, 0x0, 0xfffffffffffffffe, 0x2541, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x400007, 0x3}, 0x0, 0x80000, 0x2, 0x0, 0x400000000000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:42:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.461577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:15 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x3, 0xfffffffffffffff8}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x8c, r1, 0x4, 0x70bd2f, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) 15:42:15 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) rt_sigsuspend(&(0x7f0000000240)={[0xfffffffffffffffa]}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 15:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.713553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.734236] attempt to access beyond end of device [ 678.744894] loop4: rw=12288, want=8200, limit=20 15:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.760309] attempt to access beyond end of device [ 678.774157] loop4: rw=12288, want=12296, limit=20 [ 678.785228] attempt to access beyond end of device [ 678.807253] loop4: rw=12288, want=8200, limit=20 15:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) [ 678.822498] attempt to access beyond end of device [ 678.841190] loop4: rw=12288, want=12296, limit=20 15:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:15 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@my=0x1, 0xe22}, 0x6462, 0x9, 0x800, 0x1, 0x5, 0xffffffe1, 0x3, 0xfed8}) 15:42:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 678.978880] attempt to access beyond end of device [ 678.984962] loop4: rw=12288, want=8200, limit=20 [ 678.990160] attempt to access beyond end of device [ 678.997642] loop4: rw=12288, want=12296, limit=20 [ 679.049999] attempt to access beyond end of device [ 679.058532] loop4: rw=12288, want=8200, limit=20 [ 679.071660] attempt to access beyond end of device [ 679.081459] loop4: rw=12288, want=12296, limit=20 [ 679.137697] attempt to access beyond end of device [ 679.142908] loop4: rw=12288, want=8200, limit=20 [ 679.160652] attempt to access beyond end of device [ 679.179910] loop4: rw=12288, want=12296, limit=20 [ 679.192639] attempt to access beyond end of device [ 679.204603] loop4: rw=12288, want=8200, limit=20 [ 679.210647] attempt to access beyond end of device [ 679.218491] loop4: rw=12288, want=12296, limit=20 [ 679.296825] print_req_error: I/O error, dev loop4, sector 0 15:42:16 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1002, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:42:16 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/605], 0x1f0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x103241) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf253600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099001301000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x22040140) 15:42:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:42:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:16 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000440)=0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) dup2(r1, r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100005070000000010000026a4562026", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0000000200009800aec87d0d1b540282c79f000004000000080001007533320020000200000000000008000100"/64], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x4000000000002bc, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x8001, 0x100, 0x8, 0x5295}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaabc3, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0xfffffffffffffde2, 0x605fe0}], 0x1002, &(0x7f00000000c0)) chmod(&(0x7f0000000040)='./file0\x00', 0xa) 15:42:16 executing program 4: shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0xfff, 0xb2}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000180)=0x2f8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) [ 679.799406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 679.896212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.934843] attempt to access beyond end of device 15:42:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 679.937553] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 679.955480] loop4: rw=12288, want=8200, limit=20 [ 679.960372] attempt to access beyond end of device [ 679.968145] loop4: rw=12288, want=12296, limit=20 [ 679.979166] attempt to access beyond end of device 15:42:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 679.992684] loop4: rw=12288, want=8200, limit=20 [ 679.997322] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 680.013915] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 680.019892] attempt to access beyond end of device 15:42:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 680.044467] loop4: rw=12288, want=12296, limit=20 15:42:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:42:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 680.139611] attempt to access beyond end of device [ 680.146921] loop4: rw=12288, want=8200, limit=20 [ 680.169664] attempt to access beyond end of device 15:42:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 680.200043] loop4: rw=12288, want=12296, limit=20 [ 680.238516] attempt to access beyond end of device [ 680.272081] loop4: rw=12288, want=8200, limit=20 [ 680.294088] attempt to access beyond end of device [ 680.311375] loop4: rw=12288, want=12296, limit=20 [ 680.709127] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 15:42:17 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000240)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f8) 15:42:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:42:17 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='noinline_^entry,\x00']) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000180)="27b9aa4d5703fd16b47f036dce4ffad680ba2e467ff2e8c5194e18a05a59b1770aa55b5ee36d8e26750f0f67896ddde4a25305eeaeea14c69ceec56e0f18cc170e26fc5a5a5750ba819aee361c8af62e3c2e91350ec3d4f6989011d7b0609ee5cfa9c0f35ad8260eaea41e50891925ecbd2139b502ba88487e", 0x79, 0x9}, {&(0x7f0000000240)="ca9b1513dcaf2ecfc0c8b9a9e08d4b60dfe844b52e029c8fe04a3a58ef6af23d5ef1e3ca1df6718d9c1cfdf34b96240c07833e797787be18baff3d01a56b95e7153c0334e1af1ed999997c535a75b40f43dddf41f9f75ef0a4ad3e88d839804c40a8e8da129cc9edfb015de2716bc3615719ffaf981b13e897925c3e8bd113631bb0c73faf823062ffff84aeee6a06f92eb061b997d2a70e74fbbdf4a5b59fb154832024c106557cef6111b49fa49bc587165f58f10f7f4653161e67e5ed1026e2e990fc6b34cd5bac1f5f10c749", 0xce, 0x39b}], 0x1080070, &(0x7f0000000340)={[{@grpquota='grpquota'}, {@resize='resize'}, {@errors_continue='errors=continue'}, {@quota='quota'}, {@integrity='integrity'}, {@errors_remount='errors=remount-ro'}, {@gid={'gid'}}, {@resize='resize'}, {@integrity='integrity'}], [{@dont_appraise='dont_appraise'}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) 15:42:17 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xbf46}, 0x0, 0x10001, 0x40}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000340)={0x6, 0x2}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000300)=0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x121002, 0x0) r2 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x40000c4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0xd7, 0x200000) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) fchown(r1, r4, 0xee01) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000080)=0x2) [ 680.980625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:17 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffff]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x29a, @tick=0xa6f, 0x71, {0xfb, 0x8}, 0x2, 0x0, 0x1}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) 15:42:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 681.050913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 681.186826] attempt to access beyond end of device [ 681.192912] loop4: rw=12288, want=8200, limit=20 [ 681.211391] attempt to access beyond end of device [ 681.219013] loop4: rw=12288, want=12296, limit=20 [ 681.243374] attempt to access beyond end of device [ 681.257170] loop4: rw=12288, want=8200, limit=20 [ 681.297174] attempt to access beyond end of device [ 681.302464] loop4: rw=12288, want=12296, limit=20 [ 681.342278] attempt to access beyond end of device [ 681.351188] loop4: rw=12288, want=8200, limit=20 [ 681.358024] attempt to access beyond end of device [ 681.363551] loop4: rw=12288, want=12296, limit=20 [ 681.376692] attempt to access beyond end of device [ 681.381901] loop4: rw=12288, want=8200, limit=20 15:42:17 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000300)=0x8) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x1b4102, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000280)) 15:42:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:17 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='ntry,\x00']) [ 681.390599] attempt to access beyond end of device [ 681.398081] loop4: rw=12288, want=12296, limit=20 [ 681.409007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.506815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.556712] print_req_error: I/O error, dev loop4, sector 16 15:42:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0034a2399c1094070645f9a050e40015910b9c5ca120c4fae3972a227efa033c2aaaf30518ab923cb190feaf3ce090515e4c9270a713c1846682bd9130cffb9fc777ed1ba5187af00c1ab9fab1b5e4b663ff6c5643e943fcd9c438519e15b44e98e42e04d1d698d174f6f6ffa6504891f32875c83c48cd78f101014f21a83a41e37b2b6ace7b73a23b427081297f"]) 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:42:18 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="64c7f4965f6248b89b0e9027611daed5b02eaa4c469f3f1d9c916406ce72f8465edee7bac5d0f3cf0513776883ec68269a3bdf21f9b0f4392b2323f33d7c1c1b04f4f8c1be996eb48c64972552ac4bfd5e3348ccafc0b2f5c4249706852ec088b501f1434fd4fa12e6f7d295ebb95c467991b2e9e746d17802fb97380e3e19229083c249560e5082e49a1f9cc6a7793ebc46a33d53957dd8f2fa03bbff9ceff55e42c9517b8bc386df73c8f1c9", 0xad, 0x83e}, {&(0x7f0000000200)="788ead8f69d24171de9d2e791fb5cac1f8e1c050916787398b6455a75513421c6436e2f6b5f103e7351e57b84476bdf4c3d3b1318f3468f12824bbb211b1ad86fa73ab28ed080bb734dec0f21109a9d55ba7d3099738d1f1652c42b0d646271ba52d49e38e806c8bc457151ba42a4c525853c246983daf42c287364b818b9e29227711a1b32aaa9763d65f4067ea25b837169201c177a26232edbb676467a86ae12fa0e905a6589cb1ef00995ac06c7d5a1616c407", 0xb5, 0x8}], 0x2810043, &(0x7f0000000140)=ANY=[]) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x4c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x45089) 15:42:18 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1f0) connect$netlink(0xffffffffffffffff, &(0x7f0000000240), 0xc) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x400b20, 0x80) accept4$rose(r3, 0x0, &(0x7f0000000bc0), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={[], [], @remote}, @mcast2, [], [], 'team_slave_0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x170, 0x1d8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@local, [], @ipv6=@remote, [], @ipv6=@empty}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) fdatasync(r4) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/52, 0x34}], 0x3, &(0x7f0000000480)=""/13, 0xd}, 0x5}, {{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000640)}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/151, 0x97}, {&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000900)=""/210, 0xd2}], 0x7, &(0x7f0000000a80)=""/33, 0x21}, 0x1}], 0x2, 0x20, &(0x7f0000000b80)={r1, r2+10000000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000300)=[0x20, 0x1, 0x200, 0xff], 0x4, 0x80800}) [ 681.828685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 681.971159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.986596] f2fs_msg: 216 callbacks suppressed [ 681.986606] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 682.038415] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 682.045904] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 682.070796] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 682.082393] xt_conntrack: cannot load conntrack support for proto=10 15:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 682.099868] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 682.102553] F2FS-fs (loop5): invalid crc value 15:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 682.142899] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 682.154476] F2FS-fs (loop5): SIT is corrupted node# 0 vs 7 [ 682.165923] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 682.175678] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:42:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}, {&(0x7f0000011f00)="d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x600fe0}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000000100000000d63cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c889421e", 0x20, 0x605fe0}], 0x0, &(0x7f0000014b00)) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x80, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000280)="8f0c1acc6289205e9713a2efd8caa2076e8e95db81c34fbb44d79042c4ffaca97919f67f68dc505f4d79f1acfccd992265483dfcc7d96c27dd34cc8032e0120eee4025ea5dec6a6d64d0e5e94c257fa65816d5096aa5e6076e866dcaef7ba814eac2aeeaeb518485af96023ec1ecc63bafd02ec79b5e13b71dfb4efc188b4c64529ac5befaeba83c1e5a82583b133d89e8e87ad3", 0x94, 0xe0}, {&(0x7f0000000340)="7c03dfd4d30ce81e6e6edf02a6424a994bd1e57f8ce6149f5e91aa19bf2dde62ee86ef7a9cbfe8c211f6a95202d69ca2cdb1cbc48a0b749e10ee9c6a8d464bd11350849d938148b8ed8af2669e8604b962de1f2b1687c9cb8030ef6aa537f57456eef3eb49451ae78f93c17ecaadd34403e08b22f7e010049654233e40d23b2cafa466d8165a26ca0c17b17ea4fcd62571c4a0575a470cd2d8d887c10c3a3c9adf5ff84f99a14cf15551fcf54797006831c59eb379cecbf9602e322874b8537ecac9db0c3636902fadda88410a9702d1f6c1a2b53ba6ae007c5c20e250b6c6393484f05e2ecb3103c60906bd", 0xec, 0x8}, {&(0x7f0000000180)="138e7a560f59383aacc66e43dda296fb1a19b77672c2bd14584b4468d5f996bcda8588f19f826dda35468f8547731009361da19a623742bfaeeb95c6b0d7e57cee21ed0879b6396c718e", 0x4a, 0x2}, {&(0x7f0000000440)="e63346b6828b19073809b9ee0d56c005c612a3b68017d763e689ba", 0x1b}, {&(0x7f0000000480)="88e654e6cb06", 0x6, 0x8}, {&(0x7f0000000540)="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", 0x1000, 0x2fb}, {&(0x7f0000001540)="c933a1ee5d7762a3d5de62409fddb5a0caf8ed5cd475081d452d9991f0ac4133e1287dedacffa2499ffd1236774b8056b4b0d901bec6e00bd5eb2cbf9c1f5b148ffa8b06ae02ae0c3d7db7f52aeb97a9295bd5f41b8984bac206b2c87e1a31d9a92509e46994", 0x66, 0xffffffff}], 0x18450, &(0x7f0000001680)={[{@barrier='barrier'}, {@creator={'creator', 0x3d, "ab3e6c65"}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '+--'}}, {@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dlm_plock\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20040, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@default, @bcast}) 15:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) 15:42:18 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaab5d, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)={[{@noinline_dentry='noinline_dentry'}]}) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 682.394256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:42:18 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x20}}, 0x4, @default, 0x4010, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60, 0x1}, {0x9}, {0x0, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x7f, 0x1, 0x1, 0x2e, 0x1}}, [{0xdd, 0xec, "431b86a20778688b355f096c79747dc62378076a4359bc05dabeb18b5e5e25cbb2f6ba7c1364965706277f4031dfba82325d038db39b37714eb61cf957c3b918acb1bd268febb543031cab002ee91739e6878c1185395c0b24ac0d65ca84205fabb36e2ea71cbf0d962c4eda99c83b1f3feff3619a6bcbff7ace94758d6a8058eb5cb7132f198e853c1a968ee37c1d5861a9d2f831dee7d3c60e36efa8ab4844db8fe57256239b2186afa320358360a3d028d208731a36814271b505ebb08bbf292d232193eb894fbc7a20a4a8526dbb27c8fe23d9a6e054d2eed7bbb707d22f5c7fae837dfb2e313ffd418f"}, {0xdd, 0xc6, "2d788b13f06b8e77d647933b01001893d8cb276011a83b3b9fb465106294538e7e453efa76e831cddfdcc4bab060dd476a3af37478d112e4e344d5523f9b2b339a4b5077f79b93afab078df7f8f11a802ed55eb8458d43c783f17fa14f8f8f3005748ac7843e466741bac55c26d10b2d38927735400669996f07509da911a10d4f3e3f7c1e2813922c3f63ee9f83291c6a46b9639b0099d76f18a2e68b7e4a0c918d9ee14720c1f196c3d9402955f885754fabbcdf93fad963f55438061df981fc3c73670cd8"}]}, 0x1f0) r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xaaa9, 0x4003) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000300)) 15:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 15:42:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) [ 682.434774] xt_conntrack: cannot load conntrack support for proto=10 [ 682.491343] hfsplus: unable to parse mount options [ 682.523828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.567491] ------------[ cut here ]------------ [ 682.572784] WARNING: CPU: 1 PID: 26117 at net/wireless/sme.c:533 cfg80211_connect+0x1856/0x2120 [ 682.581629] Kernel panic - not syncing: panic_on_warn set ... [ 682.581629] [ 682.589022] CPU: 1 PID: 26117 Comm: syz-executor.3 Not tainted 4.14.206-syzkaller #0 [ 682.596906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.606266] Call Trace: [ 682.608869] dump_stack+0x1b2/0x283 [ 682.612530] panic+0x1f9/0x42d [ 682.615727] ? add_taint.cold+0x16/0x16 [ 682.619710] ? cfg80211_connect+0x1856/0x2120 [ 682.624211] ? __warn.cold+0x5/0x4b [ 682.627850] ? cfg80211_connect+0x1856/0x2120 [ 682.632357] __warn.cold+0x20/0x4b [ 682.635932] ? ist_end_non_atomic+0x10/0x10 [ 682.640268] ? cfg80211_connect+0x1856/0x2120 [ 682.644765] report_bug+0x208/0x249 [ 682.648401] do_error_trap+0x195/0x2d0 [ 682.652818] ? math_error+0x2d0/0x2d0 [ 682.656626] ? trace_hardirqs_on+0x10/0x10 [ 682.660872] ? deref_stack_reg+0x124/0x1a0 [ 682.665115] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 682.671010] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 682.675864] invalid_op+0x1b/0x40 [ 682.679330] RIP: 0010:cfg80211_connect+0x1856/0x2120 [ 682.684430] RSP: 0018:ffff88809c6ef448 EFLAGS: 00010212 [ 682.689820] RAX: 0000000000040000 RBX: ffff8880b4cd14d0 RCX: ffffc90008f03000 [ 682.697090] RDX: 00000000000005b6 RSI: ffffffff86c47036 RDI: ffffffff886b8278 [ 682.704361] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101699a2ba [ 682.711678] R10: ffff8880b4cd15d5 R11: ffff888096f025c0 R12: ffff88809c6ef5c0 [ 682.718952] R13: ffffffff886b8140 R14: ffff8880b4cd15f8 R15: ffff8880b4cd15d0 [ 682.726254] ? cfg80211_connect+0x1856/0x2120 [ 682.730859] ? cfg80211_connect+0x1856/0x2120 [ 682.735393] ? trace_hardirqs_on+0x10/0x10 [ 682.739639] ? memset+0x20/0x40 [ 682.742935] ? __cfg80211_disconnected+0x18e0/0x18e0 [ 682.748083] ? nl80211_crypto_settings+0x3a5/0x960 [ 682.753030] nl80211_connect+0x1379/0x1cd0 [ 682.757281] ? nl80211_update_connect_params+0x9a0/0x9a0 [ 682.762742] ? lock_acquire+0x170/0x3f0 [ 682.766727] ? nl80211_pre_doit+0x2d9/0x510 [ 682.771079] ? nl80211_pre_doit+0x79/0x510 [ 682.775324] genl_family_rcv_msg+0x572/0xb20 [ 682.779747] ? genl_rcv+0x40/0x40 [ 682.783210] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 682.788674] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 682.793699] ? __dev_queue_xmit+0xc96/0x2480 [ 682.798127] genl_rcv_msg+0xaf/0x140 [ 682.801860] netlink_rcv_skb+0x125/0x390 [ 682.805960] ? genl_family_rcv_msg+0xb20/0xb20 [ 682.810553] ? netlink_ack+0x9a0/0x9a0 [ 682.814452] ? lock_acquire+0x170/0x3f0 [ 682.818446] genl_rcv+0x24/0x40 [ 682.821735] netlink_unicast+0x437/0x610 [ 682.825808] ? netlink_sendskb+0xd0/0xd0 [ 682.831530] ? __check_object_size+0x179/0x22c [ 682.836128] netlink_sendmsg+0x62e/0xb80 [ 682.840206] ? nlmsg_notify+0x170/0x170 [ 682.844191] ? kernel_recvmsg+0x210/0x210 [ 682.848350] ? security_socket_sendmsg+0x83/0xb0 [ 682.853111] ? nlmsg_notify+0x170/0x170 [ 682.857090] sock_sendmsg+0xb5/0x100 [ 682.860832] ___sys_sendmsg+0x6c8/0x800 [ 682.864823] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 682.869583] ? __lock_acquire+0x5fc/0x3f20 [ 682.873856] ? do_futex+0x12b/0x1980 [ 682.877674] ? trace_hardirqs_on+0x10/0x10 [ 682.881916] ? dev_ifsioc+0x7d0/0x7d0 [ 682.885727] ? __fget+0x1fe/0x360 [ 682.889190] ? lock_acquire+0x170/0x3f0 [ 682.893168] ? lock_downgrade+0x740/0x740 [ 682.897319] ? __fget+0x225/0x360 [ 682.900794] ? __fdget+0x196/0x1f0 [ 682.904379] ? sockfd_lookup_light+0xb2/0x160 [ 682.908911] __sys_sendmsg+0xa3/0x120 [ 682.912720] ? SyS_shutdown+0x160/0x160 15:42:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) [ 682.916730] ? SyS_clock_gettime+0xf5/0x180 [ 682.921060] ? SyS_clock_settime+0x1a0/0x1a0 [ 682.925475] ? fput+0xb/0x140 [ 682.928591] SyS_sendmsg+0x27/0x40 [ 682.932140] ? __sys_sendmsg+0x120/0x120 [ 682.936207] do_syscall_64+0x1d5/0x640 [ 682.940109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 682.945304] RIP: 0033:0x45deb9 [ 682.948495] RSP: 002b:00007f6b58fefc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.956211] RAX: ffffffffffffffda RBX: 000000000002b040 RCX: 000000000045deb9 [ 682.964009] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 682.971281] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 682.978558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 682.985842] R13: 00007fffe6a3c1bf R14: 00007f6b58ff09c0 R15: 000000000118bf2c [ 682.994324] Kernel Offset: disabled [ 682.998122] Rebooting in 86400 seconds..