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", @ANYRES32=0x0, @ANYBLOB="e0fff3ffe0ff0e00f4ff000008000b00bd00000008000b00010000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x24008080) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="4000000210001fff00"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="efbf6afcad2aa9b6a7431aa481854ac2f81c94217dd1655519c97e853c15631b664ed53a0057ca"], 0x40}}, 0x0) (async) getpid() 16:39:25 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 16:39:25 executing program 3: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) [ 160.379389][ T6271] syz-executor.4: attempt to access beyond end of device [ 160.379389][ T6271] loop4: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 160.398674][ T6277] syz-executor.2: attempt to access beyond end of device [ 160.398674][ T6277] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:39:26 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0) 16:39:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(0x0, 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) 16:39:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 16:39:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x3, &(0x7f0000003140)=ANY=[@ANYBLOB="696e6f64655f7265616461686561645f626c6b733d3078303030303030303030303030303030302c6e6f6d626c6b5f696f5f7375626d69742c757365725f78617474722c6175746f5f64615f616c6c6f632c696e69e834745f697461626c653d3078303030303030303030303030303030332c6772706a71756f74613d"], 0x1, 0x45a, &(0x7f0000000940)="$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") bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) 16:39:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) 16:39:26 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) [ 160.512691][ T6312] loop3: detected capacity change from 0 to 128 [ 160.527436][ T6315] loop4: detected capacity change from 0 to 512 [ 160.540080][ T6310] loop5: detected capacity change from 0 to 2048 16:39:26 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x0) 16:39:26 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x0) [ 160.567503][ T6314] loop2: detected capacity change from 0 to 2048 16:39:26 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x732d}, 0x0) [ 160.645839][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.655456][ T6315] ext4: Unknown parameter 'inič4t_itable' 16:39:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x3, &(0x7f0000003140)=ANY=[@ANYBLOB="696e6f64655f7265616461686561645f626c6b733d3078303030303030303030303030303030302c6e6f6d626c6b5f696f5f7375626d69742c757365725f78617474722c6175746f5f64615f616c6c6f632c696e69e834745f697461626c653d3078303030303030303030303030303030332c6772706a71756f74613d"], 0x1, 0x45a, &(0x7f0000000940)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x3, &(0x7f0000003140)=ANY=[@ANYBLOB="696e6f64655f7265616461686561645f626c6b733d3078303030303030303030303030303030302c6e6f6d626c6b5f696f5f7375626d69742c757365725f78617474722c6175746f5f64615f616c6c6f632c696e69e834745f697461626c653d3078303030303030303030303030303030332c6772706a71756f74613d"], 0x1, 0x45a, &(0x7f0000000940)="$eJzs20tvG1UbAOB3JkmvX7+EUi69AIGCiLgkTVqgCzZUIHWDhASLsgxpWpWmDWqCRKuKBoTKEvUXAEskfgEr2CBgBWILe4RUoW4oLNCg8cy0zsUhviRO6+eRJjnHPva87xwf+8wcO4CeNZz/SSL+FxG/RMRgUV3cYLj4d/PG5am/blyeSiLLXv8jqbX788blqapp9bidZWUkjUg/SmL/Cvudu3jp7OTMzPSFsj42f+6dsbmLl549c27y9PTp6fMTR48eOTz+wvMTz3Ukz115rPvenz2w9/ib116dOnHtre+/TKPIO5bkURhqe5/DMbz4WNZ5ou1n31x21ZWT/i4GQlO2RUTeXQO18T8YfXG78wbjlQ+7GhywrrIsy7Yuu7WvKixkwF0siW5HAHRH9UGfn/9W2wZOP7ru+kvFCVCe981yK+7pjzSKE6SBJee3nTQcEScW/v4032LF6xAAAJ31dT7/eWal+V8a99e1+3+5NjQUEfdExO6IuDci9kTEfRG1tg9ExINN7n94SX35/Oen7S0ltkb5/O/Fcm2r3Molm7RqMtRX1nbV8h9ITp2ZmT5UHpORGNia18dX2cc3L//8SaP76ud/+ZbHUM0Fyzh+719yge7k5PxkOznXu/5BxL7+RfmXxz+5tRKQH5C9EbGvhefPj9mZp7440Oj+/85/FR1YZ8o+j3iy6P+FWJJ/JVl9fXJsW8xMHxqrXhXL/fDj1dca7b+t/Dsg7/8dsXL/l4aS+vXaueb3cfXXjxue07T6+t+SvFErbylve29yfv7CeMSWZGH57RO3H1vVq/Z5/iMHV8o/zd/j/vmsfNz+iMhfxA9FxMMR8UgZ+6MR8VhEHFwl/++OPf526/mvrzz/k031f/OFvrPfftVo/2vr/yO10kh5y1re/9YaYDvHDgAAAO4UxXfgk3T0VjlNR0eL7/DviR3pzOzc/NOnZt89f7L4rvxQDKTVla7Buuuh4+W14ao+saR+uHbdOMuybHutPjo1O7Nea+rA2uxsMP5zv/V1Ozpg3TW1jtboF23AHcnvNaF3Gf/Qu4x/6F3GP/Sulcb/lYibXQgF2GA+/6F3Gf/Qu1oe/8c6Gwew8Xz+Q09q53f9qxV2H1+vZ77bCn2bI4ymC5FuijBaK6SbI4yisDUi1tr4SmxUYN1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwMAAP//6jPozA==") bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) 16:39:26 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x101d0}, 0x0) [ 161.101118][ T6335] loop4: detected capacity change from 0 to 512 [ 161.116777][ T6335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.130469][ T6335] ext4: Unknown parameter 'inič4t_itable' [ 161.304878][ T6314] syz-executor.2: attempt to access beyond end of device [ 161.304878][ T6314] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) (async) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 16:39:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x3, &(0x7f0000003140)=ANY=[@ANYBLOB="696e6f64655f7265616461686561645f626c6b733d3078303030303030303030303030303030302c6e6f6d626c6b5f696f5f7375626d69742c757365725f78617474722c6175746f5f64615f616c6c6f632c696e69e834745f697461626c653d3078303030303030303030303030303030332c6772706a71756f74613d"], 0x1, 0x45a, &(0x7f0000000940)="$eJzs20tvG1UbAOB3JkmvX7+EUi69AIGCiLgkTVqgCzZUIHWDhASLsgxpWpWmDWqCRKuKBoTKEvUXAEskfgEr2CBgBWILe4RUoW4oLNCg8cy0zsUhviRO6+eRJjnHPva87xwf+8wcO4CeNZz/SSL+FxG/RMRgUV3cYLj4d/PG5am/blyeSiLLXv8jqbX788blqapp9bidZWUkjUg/SmL/Cvudu3jp7OTMzPSFsj42f+6dsbmLl549c27y9PTp6fMTR48eOTz+wvMTz3Ukz115rPvenz2w9/ib116dOnHtre+/TKPIO5bkURhqe5/DMbz4WNZ5ou1n31x21ZWT/i4GQlO2RUTeXQO18T8YfXG78wbjlQ+7GhywrrIsy7Yuu7WvKixkwF0siW5HAHRH9UGfn/9W2wZOP7ru+kvFCVCe981yK+7pjzSKE6SBJee3nTQcEScW/v4032LF6xAAAJ31dT7/eWal+V8a99e1+3+5NjQUEfdExO6IuDci9kTEfRG1tg9ExINN7n94SX35/Oen7S0ltkb5/O/Fcm2r3Molm7RqMtRX1nbV8h9ITp2ZmT5UHpORGNia18dX2cc3L//8SaP76ud/+ZbHUM0Fyzh+719yge7k5PxkOznXu/5BxL7+RfmXxz+5tRKQH5C9EbGvhefPj9mZp7440Oj+/85/FR1YZ8o+j3iy6P+FWJJ/JVl9fXJsW8xMHxqrXhXL/fDj1dca7b+t/Dsg7/8dsXL/l4aS+vXaueb3cfXXjxue07T6+t+SvFErbylve29yfv7CeMSWZGH57RO3H1vVq/Z5/iMHV8o/zd/j/vmsfNz+iMhfxA9FxMMR8UgZ+6MR8VhEHFwl/++OPf526/mvrzz/k031f/OFvrPfftVo/2vr/yO10kh5y1re/9YaYDvHDgAAAO4UxXfgk3T0VjlNR0eL7/DviR3pzOzc/NOnZt89f7L4rvxQDKTVla7Buuuh4+W14ao+saR+uHbdOMuybHutPjo1O7Nea+rA2uxsMP5zv/V1Ozpg3TW1jtboF23AHcnvNaF3Gf/Qu4x/6F3GP/Sulcb/lYibXQgF2GA+/6F3Gf/Qu1oe/8c6Gwew8Xz+Q09q53f9qxV2H1+vZ77bCn2bI4ymC5FuijBaK6SbI4yisDUi1tr4SmxUYN1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwMAAP//6jPozA==") bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) 16:39:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x51) (async) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ftruncate(r5, 0x800) (async) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) (async) lseek(r5, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 16:39:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) 16:39:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) [ 161.446696][ T6345] loop3: detected capacity change from 0 to 128 [ 161.449040][ T6344] loop4: detected capacity change from 0 to 512 [ 161.477361][ T6342] loop2: detected capacity change from 0 to 2048 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) [ 161.502764][ T6344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.515843][ T6344] ext4: Unknown parameter 'inič4t_itable' [ 161.536374][ T6350] loop5: detected capacity change from 0 to 128 16:39:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 16:39:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffff) (async) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 161.815187][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 161.815203][ T26] audit: type=1400 audit(1690648767.439:258): avc: denied { create } for pid=6370 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0x0) 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x18000000}, 0x0) [ 162.106076][ T26] audit: type=1400 audit(1690648767.479:259): avc: denied { ioctl } for pid=6370 comm="syz-executor.4" path="socket:[27819]" dev="sockfs" ino=27819 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.131271][ T26] audit: type=1400 audit(1690648767.599:260): avc: denied { write } for pid=6370 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d730000}, 0x0) 16:39:27 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0xd0010100}, 0x0) 16:39:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x51) (async) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ftruncate(r5, 0x800) (async) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 16:39:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) 16:39:28 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}, 0x0) 16:39:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 16:39:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xca, &(0x7f00000003c0)=""/202, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r3, 0xc}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @btf_id={0x18, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3, 0x59, &(0x7f0000000240)=""/89, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x8, 0x10263741}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r3, r4, 0x1, r5]}, 0x80) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000950000000000000085000000760000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x102, &(0x7f0000000bc0)=""/258, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000a00)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000d00)={r7, 0x800}, &(0x7f0000000d40)=0x8) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x8, [@datasec={0xb, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x84, 0x7c3be541}], "7f"}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000b40)=""/24, 0x48, 0x18}, 0x20) 16:39:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) (async) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) (async) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) [ 162.688073][ T6395] loop5: detected capacity change from 0 to 128 [ 162.714562][ T6393] loop2: detected capacity change from 0 to 2048 16:39:28 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0x0) [ 162.795894][ T6405] loop3: detected capacity change from 0 to 128 16:39:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) (async) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) 16:39:28 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0) 16:39:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) 16:39:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xca, &(0x7f00000003c0)=""/202, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r3, 0xc}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @btf_id={0x18, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3, 0x59, &(0x7f0000000240)=""/89, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x8, 0x10263741}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r3, r4, 0x1, r5]}, 0x80) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000950000000000000085000000760000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x102, &(0x7f0000000bc0)=""/258, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000a00)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000d00)={r7, 0x800}, &(0x7f0000000d40)=0x8) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x8, [@datasec={0xb, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x84, 0x7c3be541}], "7f"}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000b40)=""/24, 0x48, 0x18}, 0x20) 16:39:28 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x2) [ 163.499724][ T6393] syz-executor.2: attempt to access beyond end of device [ 163.499724][ T6393] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) 16:39:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xca, &(0x7f00000003c0)=""/202, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r3, 0xc}, 0x10) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @btf_id={0x18, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3, 0x59, &(0x7f0000000240)=""/89, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x8, 0x10263741}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r3, r4, 0x1, r5]}, 0x80) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000950000000000000085000000760000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x102, &(0x7f0000000bc0)=""/258, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000a00)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000d00)={r7, 0x800}, &(0x7f0000000d40)=0x8) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x8, [@datasec={0xb, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x84, 0x7c3be541}], "7f"}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000b40)=""/24, 0x48, 0x18}, 0x20) 16:39:29 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x4) 16:39:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffff0c) 16:39:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x51) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 16:39:29 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x12) [ 163.841861][ T6461] loop5: detected capacity change from 0 to 128 16:39:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) 16:39:29 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x18) 16:39:29 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x1200) [ 163.918355][ T6463] loop2: detected capacity change from 0 to 2048 [ 164.023616][ T6476] loop3: detected capacity change from 0 to 2048 16:39:30 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x1800) 16:39:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) 16:39:30 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000a00)=""/4096, 0x1000, 0x43, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) connect$unix(r4, &(0x7f0000000180)=@file={0x2, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x1010c0, 0x4e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) setuid(0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000480)=ANY=[@ANYBLOB="80"], 0x1, 0x23b, &(0x7f00000005c0)="$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") [ 164.462950][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.577602][ T6496] loop4: detected capacity change from 0 to 256 [ 164.584202][ T6496] FAT-fs (loop4): Unrecognized mount option "€" or missing value [ 164.592105][ T26] audit: type=1400 audit(1690648770.209:261): avc: denied { mounton } for pid=6490 comm="syz-executor.4" path="/root/syzkaller-testdir1018305900/syzkaller.g6BM6j/134/file1" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 164.631868][ T6476] syz-executor.3: attempt to access beyond end of device [ 164.631868][ T6476] loop3: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x7, 0x101}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000140)="9a4619189046bd8b2e7c7ea15cd3971fe4cdcca7ab2b63497522dea5e12e26760a89fb049a3cf2eb2ea43c0af058ab9c61d0d9308e10c5da9432eefaec1d1142fe525a52605625dcaf73", 0x4a, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x68b70100}, 0x700) 16:39:30 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x732d) 16:39:30 executing program 5: sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+10000000}, 0x8) r2 = perf_event_open(&(0x7f0000001ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:39:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000007700)=[{0x0}, {&(0x7f0000006640)=""/4096, 0x1000}], 0x2}, 0x2}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x778, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2100, 0x0) r1 = syz_io_uring_complete(0x0) sendto$inet6(r1, &(0x7f0000000000)="b9303476370b36d640b8a697f2695438a84e405b6f5a50169e653a0958d7ac711e4c810476bf9f3ae04913917925e8237d1be7ac500228fc08445edd8eed", 0x3e, 0x400a0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) 16:39:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffff0c) 16:39:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000007700)=[{0x0}, {&(0x7f0000006640)=""/4096, 0x1000}], 0x2}, 0x2}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x778, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2100, 0x0) (async) r1 = syz_io_uring_complete(0x0) sendto$inet6(r1, &(0x7f0000000000)="b9303476370b36d640b8a697f2695438a84e405b6f5a50169e653a0958d7ac711e4c810476bf9f3ae04913917925e8237d1be7ac500228fc08445edd8eed", 0x3e, 0x400a0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) 16:39:30 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x101d0) 16:39:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000007700)=[{0x0}, {&(0x7f0000006640)=""/4096, 0x1000}], 0x2}, 0x2}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000080), 0x778, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2100, 0x0) (async) r1 = syz_io_uring_complete(0x0) sendto$inet6(r1, &(0x7f0000000000)="b9303476370b36d640b8a697f2695438a84e405b6f5a50169e653a0958d7ac711e4c810476bf9f3ae04913917925e8237d1be7ac500228fc08445edd8eed", 0x3e, 0x400a0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) [ 164.855019][ T26] audit: type=1400 audit(1690648770.479:262): avc: denied { shutdown } for pid=6504 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.897092][ T6506] loop2: detected capacity change from 0 to 2048 16:39:30 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x40000) 16:39:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 16:39:30 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x1000000) [ 164.955978][ T26] audit: type=1400 audit(1690648770.479:263): avc: denied { read } for pid=6504 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.006063][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.019346][ T6528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6528 comm=syz-executor.3 [ 165.131696][ T6506] syz-executor.2: attempt to access beyond end of device [ 165.131696][ T6506] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:30 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000a00)=""/4096, 0x1000, 0x43, 0x0, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) connect$unix(r4, &(0x7f0000000180)=@file={0x2, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) open(&(0x7f0000000280)='./file1\x00', 0x1010c0, 0x4e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) (async) setuid(0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000480)=ANY=[@ANYBLOB="80"], 0x1, 0x23b, &(0x7f00000005c0)="$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") 16:39:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0xfffffde0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) fcntl$addseals(r1, 0x409, 0x8) 16:39:30 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x2000000) 16:39:31 executing program 5: sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+10000000}, 0x8) (async) r2 = perf_event_open(&(0x7f0000001ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:39:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 16:39:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffff0c) 16:39:31 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x4000000) 16:39:31 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (rerun: 32) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000a00)=""/4096, 0x1000, 0x43, 0x0, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) connect$unix(r4, &(0x7f0000000180)=@file={0x2, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x1010c0, 0x4e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) setuid(0x0) (async) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000480)=ANY=[@ANYBLOB="80"], 0x1, 0x23b, &(0x7f00000005c0)="$eJzs3bFrU10YB+C3bb6vrUuKCIIIXhDBKbQF94ooFIuKJUhFitGmUppSsFDQoa2T4OTi6OhWEXRw0/9BcHERF3G0m4P0SnslaW0qVZtcMc+z5OWe88s95wznJkNOrh+dm52aX5heW/sYfX1dURi5tZ6mXTEQ3dETmZUAAP4lX9I0PqeZvMcCALSH5z8AdJ49Pv8vtXFIAECL/f73/0cTr95XqiOn9tA17a2X7yZ/fYwAwP4an7h6fv31if7RePEwYu7+YnmxnL1m7aenYyZqUY3BKMbXiLQuq8+Njp0dTDb0R5Tnlr/nlxfLPdvzQ1GMgYgrF3bmh5LM9vx/cWBrfjiKcaj5/Yeb5v+Pk8e35EtRjDc3Yz5qMbXxkWRLfmkoSc5cHPsh37vZDwAAAAAAAAAAAAAAAAAAAAAAWqGU1A00O7+nVNqtPcvv/Xygxvk8DzbzhThSiHv5zh4AAAAAAAAAAAAAAAAAAAD+Dgt37s5WarXq7Xpx4/LMwe1XFPtcbCx8C29xLCJaPYvnq9W3Tyavjee/mG0smq/qs/wH9pOiOyI2i8OPRyovlz582tknVhpXugrZvlCpNdkskjZvTgAAAAAAAAAAAAAAAAAA0GEaPwPerUfa3gEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQA4a////B8Vqf/Zmu/TJGp/mOk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrbtwAAAP//j2usdg==") 16:39:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0xfffffde0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) fcntl$addseals(r1, 0x409, 0x8) 16:39:31 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x12000000) 16:39:31 executing program 4: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000a00)=""/4096, 0x1000, 0x43, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) connect$unix(r4, &(0x7f0000000180)=@file={0x2, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x1010c0, 0x4e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) setuid(0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000480)=ANY=[@ANYBLOB="80"], 0x1, 0x23b, &(0x7f00000005c0)="$eJzs3bFrU10YB+C3bb6vrUuKCIIIXhDBKbQF94ooFIuKJUhFitGmUppSsFDQoa2T4OTi6OhWEXRw0/9BcHERF3G0m4P0SnslaW0qVZtcMc+z5OWe88s95wznJkNOrh+dm52aX5heW/sYfX1dURi5tZ6mXTEQ3dETmZUAAP4lX9I0PqeZvMcCALSH5z8AdJ49Pv8vtXFIAECL/f73/0cTr95XqiOn9tA17a2X7yZ/fYwAwP4an7h6fv31if7RePEwYu7+YnmxnL1m7aenYyZqUY3BKMbXiLQuq8+Njp0dTDb0R5Tnlr/nlxfLPdvzQ1GMgYgrF3bmh5LM9vx/cWBrfjiKcaj5/Yeb5v+Pk8e35EtRjDc3Yz5qMbXxkWRLfmkoSc5cHPsh37vZDwAAAAAAAAAAAAAAAAAAAAAAWqGU1A00O7+nVNqtPcvv/Xygxvk8DzbzhThSiHv5zh4AAAAAAAAAAAAAAAAAAAD+Dgt37s5WarXq7Xpx4/LMwe1XFPtcbCx8C29xLCJaPYvnq9W3Tyavjee/mG0smq/qs/wH9pOiOyI2i8OPRyovlz582tknVhpXugrZvlCpNdkskjZvTgAAAAAAAAAAAAAAAAAA0GEaPwPerUfa3gEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQA4a////B8Vqf/Zmu/TJGp/mOk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrbtwAAAP//j2usdg==") 16:39:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) [ 165.703187][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.705600][ T6556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6556 comm=syz-executor.3 16:39:31 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x18000000) 16:39:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffff0c) [ 165.762285][ T6550] loop2: detected capacity change from 0 to 2048 [ 165.769003][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.781199][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.788671][ T6565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6565 comm=syz-executor.3 16:39:31 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x2d730000) [ 165.890745][ T6579] loop3: detected capacity change from 0 to 2048 [ 165.908958][ T6581] loop4: detected capacity change from 0 to 256 [ 165.915612][ T6581] FAT-fs (loop4): Unrecognized mount option "€" or missing value [ 166.247195][ T6550] syz-executor.2: attempt to access beyond end of device [ 166.247195][ T6550] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 166.259911][ T6579] syz-executor.3: attempt to access beyond end of device [ 166.259911][ T6579] loop3: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:32 executing program 5: sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+10000000}, 0x8) r2 = perf_event_open(&(0x7f0000001ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 16:39:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0xfffffde0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) fcntl$addseals(r1, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) (async) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0xfffffde0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) fcntl$addseals(r1, 0x409, 0x8) (async) 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xd0010100) 16:39:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff0c) 16:39:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffff0c) 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xeffdffff) 16:39:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xfffffdef) [ 166.603178][ T6591] loop2: detected capacity change from 0 to 2048 [ 166.626534][ T6592] loop3: detected capacity change from 0 to 2048 16:39:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x59, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x829509ad69d27f72, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x6611, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) close(0xffffffffffffffff) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) write$cgroup_subtree(r2, &(0x7f0000000bc0)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2b, 'pids'}, {0x2d, 'perf_event'}]}, 0x24) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000004c0)="9daca9c7b6419b00f028873b40dfe0cf41e60b39af83d68cf79afbf2c34503544cbc29782ad060d23188ed2ea9bacdc5d4a722e8eceabc5829de9acf2817926101d0a7c300aa2fc2585a1287edbfeca634e1bb70337978596705b472b293365eefad54750faacd6bc8304709e39a726b48c2db0eec620ff71d700acf977523a0d3bfb21fc8a2c9e546c392fd9a330e3c472f", 0x0, &(0x7f00000002c0)="1d583eadab9e42b5ca", &(0x7f0000000700)="9f295495221d0f39fda681d3ba33d41ccb022fd5b891ed130409cd0b0f265dbe40d281429be168511028f95caf9725fe2ec76c3f54cea01513526914a5b939ed1870251dd945d029252a9ad381311530d5f8ddfd9dc83a01fac6c305262d3f77214e236c66c10749e99fb107a79bf71f398a84dc68403d0427c4217efc8ce317f72b8bea8ecbafb995137d3c3470d5a693b154df41081dd9c69c5a8cf3f2940a8fcef95c9dabbb3deb3eb3b938fe25305d164edbba06ba71f4f8a61392a306a5f0f173bcde6171a39961d6ce72824f781fda3b444cd3529c", 0x3e000000}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000940)=""/105, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0xa, 0xc51d, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, r3, r4, r3, r5]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="41002000ff0000000000200000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x4, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r6, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xffffff7f) [ 166.698956][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.732606][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6603 comm=syz-executor.4 16:39:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000001010000000200000008"], 0x18) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x4, 0x5, 0xffffffffffffffff, 0x81, 0xfffffffffffffffc}, {0xfffffff7, 0x3ff, 0x9a8, 0x4ea6, 0x6080, 0x100000000}], ['\x00', '\x00']}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x893}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x15}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffd3c2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x732d00000000) 16:39:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) [ 166.790154][ T6615] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x4000000000000) [ 166.833943][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 166.846109][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.856645][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x100000000000000) [ 166.887648][ T6620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6620 comm=syz-executor.4 [ 166.889488][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.944881][ T6615] tipc: Invalid UDP bearer configuration [ 166.944896][ T6615] tipc: Enabling of bearer rejected, failed to enable media 16:39:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff0c) 16:39:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x6611, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x108) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x143, 0x44) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x10800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x67}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x0, 0x6, 0xb, 0x0, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x677a, 0x21, &(0x7f00000000c0)=""/33, 0x41000, 0x0, '\x00', r0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x897, 0x6, 0x4, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0xffffffffffffffff, r2, r3, 0x1]}, 0x80) 16:39:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 16:39:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x59, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x829509ad69d27f72, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x6611, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) close(0xffffffffffffffff) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) write$cgroup_subtree(r2, &(0x7f0000000bc0)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2b, 'pids'}, {0x2d, 'perf_event'}]}, 0x24) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000004c0)="9daca9c7b6419b00f028873b40dfe0cf41e60b39af83d68cf79afbf2c34503544cbc29782ad060d23188ed2ea9bacdc5d4a722e8eceabc5829de9acf2817926101d0a7c300aa2fc2585a1287edbfeca634e1bb70337978596705b472b293365eefad54750faacd6bc8304709e39a726b48c2db0eec620ff71d700acf977523a0d3bfb21fc8a2c9e546c392fd9a330e3c472f", 0x0, &(0x7f00000002c0)="1d583eadab9e42b5ca", &(0x7f0000000700)="9f295495221d0f39fda681d3ba33d41ccb022fd5b891ed130409cd0b0f265dbe40d281429be168511028f95caf9725fe2ec76c3f54cea01513526914a5b939ed1870251dd945d029252a9ad381311530d5f8ddfd9dc83a01fac6c305262d3f77214e236c66c10749e99fb107a79bf71f398a84dc68403d0427c4217efc8ce317f72b8bea8ecbafb995137d3c3470d5a693b154df41081dd9c69c5a8cf3f2940a8fcef95c9dabbb3deb3eb3b938fe25305d164edbba06ba71f4f8a61392a306a5f0f173bcde6171a39961d6ce72824f781fda3b444cd3529c", 0x3e000000}, 0x38) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000940)=""/105, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0xa, 0xc51d, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, r3, r4, r3, r5]}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="41002000ff0000000000200000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x4, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r6, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x200000000000000) 16:39:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000001010000000200000008"], 0x18) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 32) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4) (rerun: 32) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x4, 0x5, 0xffffffffffffffff, 0x81, 0xfffffffffffffffc}, {0xfffffff7, 0x3ff, 0x9a8, 0x4ea6, 0x6080, 0x100000000}], ['\x00', '\x00']}) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x893}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x15}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffd3c2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) (rerun: 32) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 166.995481][ T6591] syz-executor.2: attempt to access beyond end of device [ 166.995481][ T6591] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 167.008289][ T6592] syz-executor.3: attempt to access beyond end of device [ 167.008289][ T6592] loop3: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x400000000000000) 16:39:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x59, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x829509ad69d27f72, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x6611, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000280), 0x9) close(0xffffffffffffffff) (async) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) write$cgroup_subtree(r2, &(0x7f0000000bc0)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2b, 'pids'}, {0x2d, 'perf_event'}]}, 0x24) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000004c0)="9daca9c7b6419b00f028873b40dfe0cf41e60b39af83d68cf79afbf2c34503544cbc29782ad060d23188ed2ea9bacdc5d4a722e8eceabc5829de9acf2817926101d0a7c300aa2fc2585a1287edbfeca634e1bb70337978596705b472b293365eefad54750faacd6bc8304709e39a726b48c2db0eec620ff71d700acf977523a0d3bfb21fc8a2c9e546c392fd9a330e3c472f", 0x0, &(0x7f00000002c0)="1d583eadab9e42b5ca", &(0x7f0000000700)="9f295495221d0f39fda681d3ba33d41ccb022fd5b891ed130409cd0b0f265dbe40d281429be168511028f95caf9725fe2ec76c3f54cea01513526914a5b939ed1870251dd945d029252a9ad381311530d5f8ddfd9dc83a01fac6c305262d3f77214e236c66c10749e99fb107a79bf71f398a84dc68403d0427c4217efc8ce317f72b8bea8ecbafb995137d3c3470d5a693b154df41081dd9c69c5a8cf3f2940a8fcef95c9dabbb3deb3eb3b938fe25305d164edbba06ba71f4f8a61392a306a5f0f173bcde6171a39961d6ce72824f781fda3b444cd3529c", 0x3e000000}, 0x38) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 32) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000940)=""/105, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0xa, 0xc51d, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, r3, r4, r3, r5]}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="41002000ff0000000000200000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x4, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r3, r6, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) (rerun: 32) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockopt$inet_int(r7, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16:39:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 16:39:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000001010000000200000008"], 0x18) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000001010000000200000008"], 0x18) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x4, 0x5, 0xffffffffffffffff, 0x81, 0xfffffffffffffffc}, {0xfffffff7, 0x3ff, 0x9a8, 0x4ea6, 0x6080, 0x100000000}], ['\x00', '\x00']}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x893}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x15}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffd3c2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 16:39:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x6611, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x108) (async, rerun: 64) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x143, 0x44) (async, rerun: 64) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x10800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x67}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x0, 0x6, 0xb, 0x0, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x677a, 0x21, &(0x7f00000000c0)=""/33, 0x41000, 0x0, '\x00', r0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x897, 0x6, 0x4, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0xffffffffffffffff, r2, r3, 0x1]}, 0x80) [ 167.063294][ T6632] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 167.074535][ T6634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6634 comm=syz-executor.4 [ 167.100637][ T6626] loop2: detected capacity change from 0 to 2048 16:39:32 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x1200000000000000) [ 167.171594][ T6658] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 167.190534][ T6658] tipc: Invalid UDP bearer configuration [ 167.190563][ T6658] tipc: Enabling of bearer rejected, failed to enable media [ 167.217929][ T6660] tipc: Invalid UDP bearer configuration [ 167.217943][ T6660] tipc: Enabling of bearer rejected, failed to enable media 16:39:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff0c) 16:39:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 16:39:33 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9, 0x8000000, 0x0, 0xfffffffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbfec}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) 16:39:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x6611, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x108) (async) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x143, 0x44) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x10800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x67}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x0, 0x6, 0xb, 0x0, 0xfffffffffffffffe, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x677a, 0x21, &(0x7f00000000c0)=""/33, 0x41000, 0x0, '\x00', r0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x897, 0x6, 0x4, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, 0xffffffffffffffff, r2, r3, 0x1]}, 0x80) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x1800000000000000) 16:39:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}}}}], 0x28}}], 0x2, 0x0) socket$inet6(0xa, 0x4, 0x8000) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="fd36e0e0dcc36d0f69cda1143b9d1a32d72972f03a3696b7e3ee620fc87684c4759abe35bdcadd006d8fac3cc155766bd068cf4fa167c10480b8109f383b9047f9", 0x41}, {&(0x7f0000000100)="dc43486068c9cdcea892eed063514b44be1d6971c3227a67ea9a7754d8f3d33f3eefd316ca95161760ef9ed8f70b8130f86882e48a429cd67f9781596bec2944ee38f9c14529f45ee2b8e48c6d45ed8dbc676b354f8f91696908cfeb5faf2d0e35982122d124a0af440cf8c3c21ebfc304cf729056e20bdae422592dcb6e65fecd7324641ce3f9d0efad9122f3b62143dd3ab682369da0beedd206e042646c94e412df75e0b3264973553a525d3c853ab225160a72a54f2eec39f45fd9f46a40b50e07960813413d25c0fa98e4818745b9dcd48756f3dc857a24c3e94d3e90aa075b32", 0xe3}, {&(0x7f0000001040)="ff6fef0a56c74b591261341f5b16c77e2694864beac725c7ad3330c6a8bcaa9d37dfd2c4b0abed0b8b34a9473dd57d7f16925efa8dd312a890c7e88df43d1cacad966000ac4937c01dbb3fbaac40cc2ab7b88b03bc136c6ea1f0762f71826408feb3644efda76f92b9495b715a8ccf45ae0139e08d9603eb2f4dc275fe9bbb7ce28bc4f852cbfced4b9aa95140d738a744a67228540baa7155b580c0db12c61fd241dfa97c3a6f969b3041bd1da922a266d6e382cc56559e4854f6be76d854b245dcffd865e0d2ee327a5ed2af10f06840cb7937b19a6675ea2917cc58ea24898048021e793cc87ef70c01fa3ad315c5c1248a92f8726d15941272312d5551e40f882a44a4b991c0292e9eb93d9f0eb7fc7dd96670a89378c50c755f8533f93a3c58bd5ae9270acc26a8aaf3f0946562a6c54a8705ade1ceec67f81756a7a31e94512f792c64fd8599cafe7e45d82c7ebb750ce5c421e3f5f6da861cba1ad07967790d026f8d7c3bbd43583733f23b75a836eff495f7298e75958da4d1c3559d14579427b1f0e84f30ed6a2ce7c1bd36e3cc253c4d2bbed02d8a897d680a6d4ebfa49510014b172ca14e1d03a5665462f552d96003e72698da8a683a7e63d31701498ec70e399b432b04bc61f4c668e61caee5cec4c590fffd68137ff48135911784d872fb74b82638eef9895dafcd3064656b5b4c44ab2d7cc480265e57b60f96b1d11bb4ec298e58714d29b363f3f1a3fd5b3124e61dfe550e417e2f1e5235016fd313b8cde518b277328b6af7d949682892b1bac31b750ddcb7b189f8a8a69fcc86441fea2f6913a544cc9ead9a7fa40f75f26279a38d30a02630eae9e42cedab8062ac107bf6572bfae1328198f70dedc4f8ca9454296fee0a01f4dd8f72547afb9fa08303b4c31fddcb7a4f426b2f735121fbc3987817187b5e6a036d6bcc44ccd28684ecdc8c6c4436be353524074ba852246db9b81d177d8f860a6f53165aa0d608727adfe236fbc3c74ea982193a291c5e1224cb90ee79bafdaf424a72e1a7379ac1b2db9aa6ba54572d2979378aad2c7ea5e50edcb8afd49c24ce9f71430ee796bcdb475ebe829ed081fa1de679339e720a8a71e34f30c301081638cda2d6c012f7d55078b3e0f18e208793017aa684ad1f42cf42ca448b768e815a926b470bee834213820ed6f2849fbe6acb2a5f7fb78dffc37b86d67122ef92aa08ce5319acf439cdbccf5a63d0f9a0e0aac611f00b3f884003cc8a7f152cbcd54fca48ae1fd5617ad219e1fa955a3f36389f02014c8151ef1bbb3634731d6ed7bd5eec7d86f84931431696c037978129e0d92991f46a7ae2b61289fe508eae9c9e144d17dfa0a977fc754fb181c17f178a054e36cd3101ef7570dacd861cecbdd9ad62da0c476254b8fb1b607bbae62516971ef4635991df652323225fc47be81ecd9aae7795d1875cf9bc543bf187c3f24aa411cfbc55b5d1c7f90002a398fb66754141d70d4eb5759fb1248a6aef32e6b3719b86a3f6d2b88b33d572c3b29f18d9eca1f966457abe3b54a23a43bfe6bffdc694509ab0bed70235344a3bae541b9d45146be01b5835c8af8ad515e135a863007700c9f28edbfd4d8a82222ea24f7dd9cabef0583bb83658f577ef7525fee17c03723b4a6e5689cb6af33e01df03bee422eb7beb65946088d4e10e9d12e632514ff72a867ad26a4780a91bc46fd4613bd5a17061d10db0f4bb80e986bb8a620d18ab34ca18650676438e1134d49286a4eeb9d1e5c40e523c541dc9881b302bcf5e9ea5c07a6d34598663e925b36ae36aa4794f351e4ca95ae15794e98233c620bf1b314eef9fda89425faa459d1d9221ad844a9c37ebcd8ac04fab26b13690919f54fcd8dfa4ef59aed4ccb461148eeb0b5c387e907872e08a029b3de929c5056a47de7422336d10f1c609e3302acde55c502be10f7d5aa105b6445995cd4e3bb71ef551ffa7668cb193eb4eafd87f24126fd51a6b42bcefdcab09b52f1cf60287e900c09a06fdc2cf84f949079045ed6b86b44ecc7d2d7b500ab2a8cc09623d9bafeb3f66eb6bd1aac474b8a5e1394cfe4331f843492dce177a4afb6e36e65147152ab1659e982f0ae83cbed586d3112ded0caf9c3247000c9ece476c739587f1700bc001804587af728ba0457a1da95657e8d7049003f4901de512068c93745f0ff331eb31d5a8ab700531879781ddff5fc5a94a64ee8b0a04dec2cfa36cc8efde853911a8c69a10dd3b69ff5f996b9de7b65191dabf4fd569bbf2caf932824e64ee18e4b49c953f4f7e845bb7c4737d001965d11cefc24be24ecdd67bcedfb419a5e1b3d6775aa3a84e40c00a0f9013c56dabc79e598a171b821e3562491aaab565a7d3f77592619f5da8ce090997fbed2f7b7ed55a9ffd1343df090557da3d06377326cfb261c58cb806c36a4f76a97cca43742f9af6a6bfa5aa6109e1b14dc736c0d44197b8503aa8ec4beb10b010376d666a9cf78da7f95e61bdb703d68369387b0625feb2f44a9fad4b2b57b7726c5b705561081a68bd0f9d8677cc6ca081dd62a96ed8849eace155e767c86916cf70c53e9c25912995f7c1bceaa59988342ade0f50db321a1b38b25555475b82c0c44a4864e51bb7d96557992b2ef70a42a730bfc63445b3be8f6e5cae64d6fb9d990d648e0f7eecd33901b721d7838faf4e0804aba53121f628ecea689c7b63feb5ddcd806037aa4ece0076519bafe5109e4c4fb6f8075fe3cfe332c34d5477e334f62046d70095fddd47d2930e74ded96251aeece64c6606f77409d6eab42a69e746f08070b71809e64ed412a507959ecec9ebdbbc4b89920d5482e02df42022e2a102903073635aefd80941ed979a10f8076c675ec612a04266f203a46f5d37b804f933a14ebca6f26cb7ad69f3675dabc25bc033b2dedd76b47ec0c4cab0d27921acd73ceffee9a74f8bcdb90f7e4181d664d7cc2f796554cc488ffcd38795e3c6115651e8d0e863a426ebdd38cc8d80c6cb8deb958d427aaad1b7d4854ff21aabc1c2bbc46398d096fbf022c3e6efcf843e3a37baeff205c09938ffd7e35558986df336af3500b9f78f57318b5ae938c786931a7114e5b7ce5f10bc39969b6230260e05cd711ad69add64459cb866fc19aabcdb164f138138fe96078c74f83f336d9daf322fb4d3cdefd8b69ecdd04a9a1d68db1460674aa658e4a3b9cd024995684465d3660bb042b7cbfbd8a986cab59978239113c003bee113d8e885c98b77ddc7065bd9557f4b6b49dde27595abdfd4ac9567db75adb6d60624126f32a120f2f5b6d9728487d8be60721192e6924d62438f8d29a7d6f23a9b7ec947eba7eb725b657329d8c711844c667f3cbf11e9ec0f0845327096aed07da250a527fdd528d3a754539de001229e2374062d55c31a9947597145edb8fdc359399256b50e2064cb6050e6b4c1ab3fd2870b0d3367e9482550cb6db20f4dd6b3b34c1f33802c6bafd24b793c51f98e08c77c3dcc21f65a54b98b00893348413b4139517361a7ba3bc8ea8815395ad61a973bc30044de13cfd12857a0be358c53199d83ad171a7e9f85622f67c0f8f49388c96b4e984b604cc5b735efe305042073bcde7ceafb7078b88ff007d551f088b7c2e71b3a63c3136d62d0c9892255fd074c5ddc9b604563ad71c1c382c87c0db9b03dfc8cfbaf413f6c80d80ab8ec549334748895de92b7f3e71980e034283318da3ff31352d02277136c3eb91429bbc4b7f5c40a1d8e5ec5ec25dc4d5c397109ad51ea58965b868631c9525fc1e669d4477f4e019b5788464318947886b7d3d87a132d1ae5ed9445c6a4b3fc51a7125a1defd444be3a30f6382e12d9fa2b0f7f40cde5ff0e18013d14c5240e08cd1357b996e98de4b11fb7515c9684236b04223109d6b29bde752abaef49af7259aefdec945c6d3814c205d1e24f2f166717ae02d64a33ab35efb46b1afec7d1b52d29242b9c75a7512ebddf8dcfcc484ba1d8d9b8f727a7d786c7cc1128066c587dfdaf021b89d813f54221359db861d9f4cad896f8f9033c59c414bb671b666b35dabcfad364d06182a74b1dc290d6b4c4fe19ff2a210d0124cab3ebd761f30c10b9e266b6d0db592cfbcc93b8a902f10b315962d498b6b2f5393a99dbb353804be03b4f71dc4e4d35f80ab9a110bf33f8fbbbd9cdb0452be4b2ee190bcf1404811ac421ff9f764a60bd1d8db53748b8274e192fd8c053c6806366cfdde2579d7bb4a63da30dd2b56c54daf5c646ad2c421a840f5a03262b0b90fc3f1494477da49779e717f717663fc5106eb1f4ee45e1b90b1ffb46b65e658e7384f19c06c91a64cd3657779f5a073b2ea86cf756d97caa67f04c93cffc0ab9bd68c0180d848cdb2a4d199fe1e29f7150e14b83dd86efb8c0b047f99ca7e41e99c2f4d344b5f2924e85ae1377a3c2bcf37c7c6010f9f4ff460a931fc51c263adc3a00c894f62780dc96e9259286b9b4babbc128517cc4d3a1fda01a94eec68fcc951ddafffff9578e35fe34de1a6066fafd1ca42f6139fc1e37db6d8b8f8da178e3c35afc13c72d70436fab42fc1ecccb6ef93ff7471d5c59b835517098c174295b47ca60047cde43dd39f64fb18c6c89431c391bc8a7290591963969583c9e1d2c54882d16008999d210f55aaf724ea991b89a4c1b561faba601fce4abac0569c36a029c009ffea8df64b980e6549ebc855decc816485b31b335658fa0971c0052b775c56a303641507d3044eeb45c1554ede48312a6bee40100b57e560d59619991bddc8b84dc4c1d1d7f0e5eacb600e8f20a3a5c63f56898b9594867582dd7f2434d153e22182be37f3b70f3da06c7ac06491436cf0138d4bd91fd194d85c5e3c22d81cf7974d5bc86792d8930e8c4694e7eb4f3cad1ee872f027138df752162198210653cf5f6f19caccf0e36d8bf3b73990fc011e02c9a657dac67c6d1b7a3d0ed4c0800ffc3108810aa9d948e08e2054abc6c35d6411876f0a844ebc60665f66fb967a9e378776ee4869f514758bf3d13bc2612bb63668256203f616068b461cc9ece351a41aa4577474569c9931ffbb3bac34fb82d81a0b880014abb6d9968b48943caef99d4c1081bfcf47211c79864a10884b4459b53a45c507fb09c29e8356128a91fa5fbf9171cbd1c1dc7128d8003bd448ffc4863d3dd74ec1f3af285f9d355c1312cbf1058b450a286d643e99a2691e8890877764f377bac976f88c514cda111f94f52739f749c8a9d6711669fb471873a241cb6222012a8c9abb93d9333a68618579c9aa6a633f5d3f19dc2297c056482008a1061c9f6481312bf0408903741ee7616c0f703651b818d78cc226911dba2fc632a1dff712c602425bc044ab5c4c40b3f4c550b09aae5c3220925d1f363c71a53e5fa741441ca2b1c1a3927835382ffd312c5523e0b2dcf62f45914bc2a8fd277fcb50f08b99325dae95bb737a193966777ef6a0c6dd4fe89d2847d306cd0802f0e2a61579a129f664fc67ba2921e875691ae53cf9e284254c33550b74754c5a6f8ddc3c8c285e132142980a2bced6f6002e4ba3212a9a598de4d0f1bb0f2e462249ff94c6da3d98db9af0456c729da86a8bb3eebd8c2ec5c6c4926745ff5fb5007f1f681f5eb37f8cf422a384dd457429cc581cdc8a8b29dc378f0979ceeb110f6e30efe61ccc535ead7679e1d8f6680c58155a3fc10c01909183f5f387ac233a8bd1151ebe0644fa64df1e385b15e83dc58a72f59f1ca72a371f81587b24b3a42be8dea7ecb47dda41a8a", 0x1000}, {&(0x7f0000000200)="b9b700b408abec00059fb629fa3963801d6550be2c1910c3d09f4f406115bbed9f5b88a752a397c1752a25a5c8ed0de3ab0d58203455d37339f4f98ceb2613e448ee1495cab29ff3d1dc7a0cec8d5ef58509acb2edb43007dca3", 0x5a}], 0x4, &(0x7f00000002c0)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x9, 0x0, [@local]}}}], 0x28}, 0x20000044) 16:39:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}}}}], 0x28}}], 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}}}}], 0x28}}], 0x2, 0x0) socket$inet6(0xa, 0x4, 0x8000) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="fd36e0e0dcc36d0f69cda1143b9d1a32d72972f03a3696b7e3ee620fc87684c4759abe35bdcadd006d8fac3cc155766bd068cf4fa167c10480b8109f383b9047f9", 0x41}, {&(0x7f0000000100)="dc43486068c9cdcea892eed063514b44be1d6971c3227a67ea9a7754d8f3d33f3eefd316ca95161760ef9ed8f70b8130f86882e48a429cd67f9781596bec2944ee38f9c14529f45ee2b8e48c6d45ed8dbc676b354f8f91696908cfeb5faf2d0e35982122d124a0af440cf8c3c21ebfc304cf729056e20bdae422592dcb6e65fecd7324641ce3f9d0efad9122f3b62143dd3ab682369da0beedd206e042646c94e412df75e0b3264973553a525d3c853ab225160a72a54f2eec39f45fd9f46a40b50e07960813413d25c0fa98e4818745b9dcd48756f3dc857a24c3e94d3e90aa075b32", 0xe3}, {&(0x7f0000001040)="ff6fef0a56c74b591261341f5b16c77e2694864beac725c7ad3330c6a8bcaa9d37dfd2c4b0abed0b8b34a9473dd57d7f16925efa8dd312a890c7e88df43d1cacad966000ac4937c01dbb3fbaac40cc2ab7b88b03bc136c6ea1f0762f71826408feb3644efda76f92b9495b715a8ccf45ae0139e08d9603eb2f4dc275fe9bbb7ce28bc4f852cbfced4b9aa95140d738a744a67228540baa7155b580c0db12c61fd241dfa97c3a6f969b3041bd1da922a266d6e382cc56559e4854f6be76d854b245dcffd865e0d2ee327a5ed2af10f06840cb7937b19a6675ea2917cc58ea24898048021e793cc87ef70c01fa3ad315c5c1248a92f8726d15941272312d5551e40f882a44a4b991c0292e9eb93d9f0eb7fc7dd96670a89378c50c755f8533f93a3c58bd5ae9270acc26a8aaf3f0946562a6c54a8705ade1ceec67f81756a7a31e94512f792c64fd8599cafe7e45d82c7ebb750ce5c421e3f5f6da861cba1ad07967790d026f8d7c3bbd43583733f23b75a836eff495f7298e75958da4d1c3559d14579427b1f0e84f30ed6a2ce7c1bd36e3cc253c4d2bbed02d8a897d680a6d4ebfa49510014b172ca14e1d03a5665462f552d96003e72698da8a683a7e63d31701498ec70e399b432b04bc61f4c668e61caee5cec4c590fffd68137ff48135911784d872fb74b82638eef9895dafcd3064656b5b4c44ab2d7cc480265e57b60f96b1d11bb4ec298e58714d29b363f3f1a3fd5b3124e61dfe550e417e2f1e5235016fd313b8cde518b277328b6af7d949682892b1bac31b750ddcb7b189f8a8a69fcc86441fea2f6913a544cc9ead9a7fa40f75f26279a38d30a02630eae9e42cedab8062ac107bf6572bfae1328198f70dedc4f8ca9454296fee0a01f4dd8f72547afb9fa08303b4c31fddcb7a4f426b2f735121fbc3987817187b5e6a036d6bcc44ccd28684ecdc8c6c4436be353524074ba852246db9b81d177d8f860a6f53165aa0d608727adfe236fbc3c74ea982193a291c5e1224cb90ee79bafdaf424a72e1a7379ac1b2db9aa6ba54572d2979378aad2c7ea5e50edcb8afd49c24ce9f71430ee796bcdb475ebe829ed081fa1de679339e720a8a71e34f30c301081638cda2d6c012f7d55078b3e0f18e208793017aa684ad1f42cf42ca448b768e815a926b470bee834213820ed6f2849fbe6acb2a5f7fb78dffc37b86d67122ef92aa08ce5319acf439cdbccf5a63d0f9a0e0aac611f00b3f884003cc8a7f152cbcd54fca48ae1fd5617ad219e1fa955a3f36389f02014c8151ef1bbb3634731d6ed7bd5eec7d86f84931431696c037978129e0d92991f46a7ae2b61289fe508eae9c9e144d17dfa0a977fc754fb181c17f178a054e36cd3101ef7570dacd861cecbdd9ad62da0c476254b8fb1b607bbae62516971ef4635991df652323225fc47be81ecd9aae7795d1875cf9bc543bf187c3f24aa411cfbc55b5d1c7f90002a398fb66754141d70d4eb5759fb1248a6aef32e6b3719b86a3f6d2b88b33d572c3b29f18d9eca1f966457abe3b54a23a43bfe6bffdc694509ab0bed70235344a3bae541b9d45146be01b5835c8af8ad515e135a863007700c9f28edbfd4d8a82222ea24f7dd9cabef0583bb83658f577ef7525fee17c03723b4a6e5689cb6af33e01df03bee422eb7beb65946088d4e10e9d12e632514ff72a867ad26a4780a91bc46fd4613bd5a17061d10db0f4bb80e986bb8a620d18ab34ca18650676438e1134d49286a4eeb9d1e5c40e523c541dc9881b302bcf5e9ea5c07a6d34598663e925b36ae36aa4794f351e4ca95ae15794e98233c620bf1b314eef9fda89425faa459d1d9221ad844a9c37ebcd8ac04fab26b13690919f54fcd8dfa4ef59aed4ccb461148eeb0b5c387e907872e08a029b3de929c5056a47de7422336d10f1c609e3302acde55c502be10f7d5aa105b6445995cd4e3bb71ef551ffa7668cb193eb4eafd87f24126fd51a6b42bcefdcab09b52f1cf60287e900c09a06fdc2cf84f949079045ed6b86b44ecc7d2d7b500ab2a8cc09623d9bafeb3f66eb6bd1aac474b8a5e1394cfe4331f843492dce177a4afb6e36e65147152ab1659e982f0ae83cbed586d3112ded0caf9c3247000c9ece476c739587f1700bc001804587af728ba0457a1da95657e8d7049003f4901de512068c93745f0ff331eb31d5a8ab700531879781ddff5fc5a94a64ee8b0a04dec2cfa36cc8efde853911a8c69a10dd3b69ff5f996b9de7b65191dabf4fd569bbf2caf932824e64ee18e4b49c953f4f7e845bb7c4737d001965d11cefc24be24ecdd67bcedfb419a5e1b3d6775aa3a84e40c00a0f9013c56dabc79e598a171b821e3562491aaab565a7d3f77592619f5da8ce090997fbed2f7b7ed55a9ffd1343df090557da3d06377326cfb261c58cb806c36a4f76a97cca43742f9af6a6bfa5aa6109e1b14dc736c0d44197b8503aa8ec4beb10b010376d666a9cf78da7f95e61bdb703d68369387b0625feb2f44a9fad4b2b57b7726c5b705561081a68bd0f9d8677cc6ca081dd62a96ed8849eace155e767c86916cf70c53e9c25912995f7c1bceaa59988342ade0f50db321a1b38b25555475b82c0c44a4864e51bb7d96557992b2ef70a42a730bfc63445b3be8f6e5cae64d6fb9d990d648e0f7eecd33901b721d7838faf4e0804aba53121f628ecea689c7b63feb5ddcd806037aa4ece0076519bafe5109e4c4fb6f8075fe3cfe332c34d5477e334f62046d70095fddd47d2930e74ded96251aeece64c6606f77409d6eab42a69e746f08070b71809e64ed412a507959ecec9ebdbbc4b89920d5482e02df42022e2a102903073635aefd80941ed979a10f8076c675ec612a04266f203a46f5d37b804f933a14ebca6f26cb7ad69f3675dabc25bc033b2dedd76b47ec0c4cab0d27921acd73ceffee9a74f8bcdb90f7e4181d664d7cc2f796554cc488ffcd38795e3c6115651e8d0e863a426ebdd38cc8d80c6cb8deb958d427aaad1b7d4854ff21aabc1c2bbc46398d096fbf022c3e6efcf843e3a37baeff205c09938ffd7e35558986df336af3500b9f78f57318b5ae938c786931a7114e5b7ce5f10bc39969b6230260e05cd711ad69add64459cb866fc19aabcdb164f138138fe96078c74f83f336d9daf322fb4d3cdefd8b69ecdd04a9a1d68db1460674aa658e4a3b9cd024995684465d3660bb042b7cbfbd8a986cab59978239113c003bee113d8e885c98b77ddc7065bd9557f4b6b49dde27595abdfd4ac9567db75adb6d60624126f32a120f2f5b6d9728487d8be60721192e6924d62438f8d29a7d6f23a9b7ec947eba7eb725b657329d8c711844c667f3cbf11e9ec0f0845327096aed07da250a527fdd528d3a754539de001229e2374062d55c31a9947597145edb8fdc359399256b50e2064cb6050e6b4c1ab3fd2870b0d3367e9482550cb6db20f4dd6b3b34c1f33802c6bafd24b793c51f98e08c77c3dcc21f65a54b98b00893348413b4139517361a7ba3bc8ea8815395ad61a973bc30044de13cfd12857a0be358c53199d83ad171a7e9f85622f67c0f8f49388c96b4e984b604cc5b735efe305042073bcde7ceafb7078b88ff007d551f088b7c2e71b3a63c3136d62d0c9892255fd074c5ddc9b604563ad71c1c382c87c0db9b03dfc8cfbaf413f6c80d80ab8ec549334748895de92b7f3e71980e034283318da3ff31352d02277136c3eb91429bbc4b7f5c40a1d8e5ec5ec25dc4d5c397109ad51ea58965b868631c9525fc1e669d4477f4e019b5788464318947886b7d3d87a132d1ae5ed9445c6a4b3fc51a7125a1defd444be3a30f6382e12d9fa2b0f7f40cde5ff0e18013d14c5240e08cd1357b996e98de4b11fb7515c9684236b04223109d6b29bde752abaef49af7259aefdec945c6d3814c205d1e24f2f166717ae02d64a33ab35efb46b1afec7d1b52d29242b9c75a7512ebddf8dcfcc484ba1d8d9b8f727a7d786c7cc1128066c587dfdaf021b89d813f54221359db861d9f4cad896f8f9033c59c414bb671b666b35dabcfad364d06182a74b1dc290d6b4c4fe19ff2a210d0124cab3ebd761f30c10b9e266b6d0db592cfbcc93b8a902f10b315962d498b6b2f5393a99dbb353804be03b4f71dc4e4d35f80ab9a110bf33f8fbbbd9cdb0452be4b2ee190bcf1404811ac421ff9f764a60bd1d8db53748b8274e192fd8c053c6806366cfdde2579d7bb4a63da30dd2b56c54daf5c646ad2c421a840f5a03262b0b90fc3f1494477da49779e717f717663fc5106eb1f4ee45e1b90b1ffb46b65e658e7384f19c06c91a64cd3657779f5a073b2ea86cf756d97caa67f04c93cffc0ab9bd68c0180d848cdb2a4d199fe1e29f7150e14b83dd86efb8c0b047f99ca7e41e99c2f4d344b5f2924e85ae1377a3c2bcf37c7c6010f9f4ff460a931fc51c263adc3a00c894f62780dc96e9259286b9b4babbc128517cc4d3a1fda01a94eec68fcc951ddafffff9578e35fe34de1a6066fafd1ca42f6139fc1e37db6d8b8f8da178e3c35afc13c72d70436fab42fc1ecccb6ef93ff7471d5c59b835517098c174295b47ca60047cde43dd39f64fb18c6c89431c391bc8a7290591963969583c9e1d2c54882d16008999d210f55aaf724ea991b89a4c1b561faba601fce4abac0569c36a029c009ffea8df64b980e6549ebc855decc816485b31b335658fa0971c0052b775c56a303641507d3044eeb45c1554ede48312a6bee40100b57e560d59619991bddc8b84dc4c1d1d7f0e5eacb600e8f20a3a5c63f56898b9594867582dd7f2434d153e22182be37f3b70f3da06c7ac06491436cf0138d4bd91fd194d85c5e3c22d81cf7974d5bc86792d8930e8c4694e7eb4f3cad1ee872f027138df752162198210653cf5f6f19caccf0e36d8bf3b73990fc011e02c9a657dac67c6d1b7a3d0ed4c0800ffc3108810aa9d948e08e2054abc6c35d6411876f0a844ebc60665f66fb967a9e378776ee4869f514758bf3d13bc2612bb63668256203f616068b461cc9ece351a41aa4577474569c9931ffbb3bac34fb82d81a0b880014abb6d9968b48943caef99d4c1081bfcf47211c79864a10884b4459b53a45c507fb09c29e8356128a91fa5fbf9171cbd1c1dc7128d8003bd448ffc4863d3dd74ec1f3af285f9d355c1312cbf1058b450a286d643e99a2691e8890877764f377bac976f88c514cda111f94f52739f749c8a9d6711669fb471873a241cb6222012a8c9abb93d9333a68618579c9aa6a633f5d3f19dc2297c056482008a1061c9f6481312bf0408903741ee7616c0f703651b818d78cc226911dba2fc632a1dff712c602425bc044ab5c4c40b3f4c550b09aae5c3220925d1f363c71a53e5fa741441ca2b1c1a3927835382ffd312c5523e0b2dcf62f45914bc2a8fd277fcb50f08b99325dae95bb737a193966777ef6a0c6dd4fe89d2847d306cd0802f0e2a61579a129f664fc67ba2921e875691ae53cf9e284254c33550b74754c5a6f8ddc3c8c285e132142980a2bced6f6002e4ba3212a9a598de4d0f1bb0f2e462249ff94c6da3d98db9af0456c729da86a8bb3eebd8c2ec5c6c4926745ff5fb5007f1f681f5eb37f8cf422a384dd457429cc581cdc8a8b29dc378f0979ceeb110f6e30efe61ccc535ead7679e1d8f6680c58155a3fc10c01909183f5f387ac233a8bd1151ebe0644fa64df1e385b15e83dc58a72f59f1ca72a371f81587b24b3a42be8dea7ecb47dda41a8a", 0x1000}, {&(0x7f0000000200)="b9b700b408abec00059fb629fa3963801d6550be2c1910c3d09f4f406115bbed9f5b88a752a397c1752a25a5c8ed0de3ab0d58203455d37339f4f98ceb2613e448ee1495cab29ff3d1dc7a0cec8d5ef58509acb2edb43007dca3", 0x5a}], 0x4, &(0x7f00000002c0)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x9, 0x0, [@local]}}}], 0x28}, 0x20000044) [ 167.344821][ T6626] syz-executor.2: attempt to access beyond end of device [ 167.344821][ T6626] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 16:39:33 executing program 3: syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x9c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0xc400, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "8855203dd08ec552b70072976551562e07ebb668dff0c371abb00ffd55053160", "2e3d2e26aedc4b7ac3703958b6028397d39f3cb89da654b3a5a40b2d94889d9e5bbbd0a56f3e93b454500b6cf64e926e", "288c98ba079899105f387dcfa89def2e7628827154d308ef7acd0a1e", {"0f8e2b7973d2bc7ec1e2b8e27eb2caff", "8efb496a9bb5d30e2d0e12246da9f15a"}}}}}}}}, 0x0) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xd001010000000000) 16:39:33 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9, 0x8000000, 0x0, 0xfffffffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbfec}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x71) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) 16:39:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) socket(0x10, 0x803, 0x0) [ 167.492983][ T6688] loop2: detected capacity change from 0 to 2048 16:39:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x0) 16:39:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x3c}}}}], 0x28}}], 0x2, 0x0) (async) socket$inet6(0xa, 0x4, 0x8000) (async) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="fd36e0e0dcc36d0f69cda1143b9d1a32d72972f03a3696b7e3ee620fc87684c4759abe35bdcadd006d8fac3cc155766bd068cf4fa167c10480b8109f383b9047f9", 0x41}, {&(0x7f0000000100)="dc43486068c9cdcea892eed063514b44be1d6971c3227a67ea9a7754d8f3d33f3eefd316ca95161760ef9ed8f70b8130f86882e48a429cd67f9781596bec2944ee38f9c14529f45ee2b8e48c6d45ed8dbc676b354f8f91696908cfeb5faf2d0e35982122d124a0af440cf8c3c21ebfc304cf729056e20bdae422592dcb6e65fecd7324641ce3f9d0efad9122f3b62143dd3ab682369da0beedd206e042646c94e412df75e0b3264973553a525d3c853ab225160a72a54f2eec39f45fd9f46a40b50e07960813413d25c0fa98e4818745b9dcd48756f3dc857a24c3e94d3e90aa075b32", 0xe3}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000200)="b9b700b408abec00059fb629fa3963801d6550be2c1910c3d09f4f406115bbed9f5b88a752a397c1752a25a5c8ed0de3ab0d58203455d37339f4f98ceb2613e448ee1495cab29ff3d1dc7a0cec8d5ef58509acb2edb43007dca3", 0x5a}], 0x4, &(0x7f00000002c0)=[@rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x9, 0x0, [@local]}}}], 0x28}, 0x20000044) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xeffdffff00000000) 16:39:33 executing program 3: syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x9c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0xc400, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "8855203dd08ec552b70072976551562e07ebb668dff0c371abb00ffd55053160", "2e3d2e26aedc4b7ac3703958b6028397d39f3cb89da654b3a5a40b2d94889d9e5bbbd0a56f3e93b454500b6cf64e926e", "288c98ba079899105f387dcfa89def2e7628827154d308ef7acd0a1e", {"0f8e2b7973d2bc7ec1e2b8e27eb2caff", "8efb496a9bb5d30e2d0e12246da9f15a"}}}}}}}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x9c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0xc400, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "8855203dd08ec552b70072976551562e07ebb668dff0c371abb00ffd55053160", "2e3d2e26aedc4b7ac3703958b6028397d39f3cb89da654b3a5a40b2d94889d9e5bbbd0a56f3e93b454500b6cf64e926e", "288c98ba079899105f387dcfa89def2e7628827154d308ef7acd0a1e", {"0f8e2b7973d2bc7ec1e2b8e27eb2caff", "8efb496a9bb5d30e2d0e12246da9f15a"}}}}}}}}, 0x0) (async) 16:39:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:33 executing program 5: creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9, 0x8000000, 0x0, 0xfffffffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbfec}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9, 0x8000000, 0x0, 0xfffffffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0xbfec}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x71) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) (async) 16:39:33 executing program 3: syz_emit_ethernet(0xd2, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x9c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0xc400, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "8855203dd08ec552b70072976551562e07ebb668dff0c371abb00ffd55053160", "2e3d2e26aedc4b7ac3703958b6028397d39f3cb89da654b3a5a40b2d94889d9e5bbbd0a56f3e93b454500b6cf64e926e", "288c98ba079899105f387dcfa89def2e7628827154d308ef7acd0a1e", {"0f8e2b7973d2bc7ec1e2b8e27eb2caff", "8efb496a9bb5d30e2d0e12246da9f15a"}}}}}}}}, 0x0) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xffffff7f00000000) 16:39:33 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 167.640479][ T6688] syz-executor.2: attempt to access beyond end of device [ 167.640479][ T6688] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:33 executing program 0: r0 = epoll_create(0x8172) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10}) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 16:39:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0xffffffff00000000) [ 167.783460][ T6717] loop2: detected capacity change from 0 to 2048 16:39:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x0) 16:39:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:39:33 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000000200)={[{@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@showexec}, {@fat=@umask={'umask', 0x3d, 0xffff}}, {@fat=@uid={'uid', 0x3d, 0xee01}}, {@nodots}, {@fat=@gid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@quiet}, {@fat=@dmask}, {@dots}, {@dots}, {@nodots}]}, 0x1, 0x183, &(0x7f00000005c0)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x75ad3000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) fcntl$notify(r1, 0x402, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x100000000011, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}}, 0x0) 16:39:33 executing program 0: r0 = epoll_create(0x8172) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10}) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 16:39:33 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000024005186000000000000000000000000fa99a4b8203ec9e38ea5f8", @ANYRES32=r5, @ANYBLOB="00007c0f44619f6516130000"], 0x78}}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x1, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20, 0x2000}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:33 executing program 0: r0 = epoll_create(0x8172) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10}) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) (async) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 16:39:33 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 167.909485][ T6717] syz-executor.2: attempt to access beyond end of device [ 167.909485][ T6717] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 167.949271][ T6730] loop3: detected capacity change from 0 to 256 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 32) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000024005186000000000000000000000000fa99a4b8203ec9e38ea5f8", @ANYRES32=r5, @ANYBLOB="00007c0f44619f6516130000"], 0x78}}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r6 = socket$tipc(0x1e, 0x1, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20, 0x2000}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async, rerun: 64) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:33 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000000200)={[{@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@showexec}, {@fat=@umask={'umask', 0x3d, 0xffff}}, {@fat=@uid={'uid', 0x3d, 0xee01}}, {@nodots}, {@fat=@gid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@quiet}, {@fat=@dmask}, {@dots}, {@dots}, {@nodots}]}, 0x1, 0x183, &(0x7f00000005c0)="$eJzs3TFLG2EYB/AnaZqETtkKpcNBl06h7SdIKSmUHghKBp0UoksigllOp3wMP6AfQDJli+hpTkNchOQ0+f2We+DPC8+zvDfdc4dfTwf9s9HJ9eeraDYrUe1EJ6aVaEU1Ho0DANgk09ksbma5snsBANbD+x8Ats/e/sH/32na3U2SZsRknPWyXv7M87//0u6P5F6rODXJst6Hef4zz5Pn+cf49JD/WprX4/u3PL/L/uykC3kj+qsfHwAAAAAAAAAAAAAAAAAAAAAAStFO5pbu92m3X8rz6sl+oIX9PbX4UlvbGAAAAAAAAAAAAAAAAAAAAPCujS4uB0fD4fG5QrExRfI22hjG647XI6L05os7olHmBQUAAAAAAAAAAAAAAAAAAFuk+Oi37E4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDzF//9XV5Q9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvvNgAA///0XTU5") (async) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000000200)={[{@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@showexec}, {@fat=@umask={'umask', 0x3d, 0xffff}}, {@fat=@uid={'uid', 0x3d, 0xee01}}, {@nodots}, {@fat=@gid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@quiet}, {@fat=@dmask}, {@dots}, {@dots}, {@nodots}]}, 0x1, 0x183, &(0x7f00000005c0)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x75ad3000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) fcntl$notify(r1, 0x402, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x100000000011, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}}, 0x0) 16:39:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, 0x31, 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0x100000000, 0xffffffffffffffff) [ 167.981853][ T26] audit: type=1400 audit(1690648773.609:264): avc: denied { map } for pid=6727 comm="syz-executor.3" path="socket:[28327]" dev="sockfs" ino=28327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.005635][ T26] audit: type=1400 audit(1690648773.609:265): avc: denied { read } for pid=6727 comm="syz-executor.3" path="socket:[28327]" dev="sockfs" ino=28327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.062249][ T6750] loop3: detected capacity change from 0 to 256 [ 168.091269][ T6750] FAT-fs (loop3): Unrecognized mount option "@" or missing value [ 168.091646][ T6742] loop2: detected capacity change from 0 to 2048 [ 168.127405][ T26] audit: type=1400 audit(1690648773.739:266): avc: denied { create } for pid=6753 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 16:39:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0x0) 16:39:33 executing program 5: syz_emit_ethernet(0x1ec, &(0x7f00000000c0)={@empty, @dev, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "13574b", 0x1b6, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x87, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x33, 0x12, 0x4, 0x9, 0x6, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @local, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @empty}]}, @routing={0x2e, 0x8, 0x2, 0x40, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}]}], {0x4e22, 0x4e24, 0xbe, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}, "e7292b31e5525477911a78b8025e4e54590e7031032721c95a7ec39c20a718c762405a2cb1b0322ec7136a8b41e344425121960115edfba181cd1a3edea2cfa69906d055bfd04615669221d8584988a82404825c2ef13c9bb6de3518a8601b4d898127b3385dfdb1c047479a172a5e7630b5268fad3ae1185529dcb3799db212e84804d8d9e57a576c5be4228cbe3cd61c7c35b67930fabdef260953456516a3ce0680aa0fe52eaa02c9a08840a8"}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="402b7742c9fc", @remote, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x1, 0x5, 0x0, 0x0, "0af877969e07a06b"}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@x25={0x805, {0x2, 0x1, 0x1f, "9b73ccd2b381a09ccd78aa1f14844c6bf2050f1b012641ee74730471626bb660822be968bc72"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x916, 0x616, 0x537, 0xe2]}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @random="44f32bd0da03", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @remote, @multicast, @empty}}}}, &(0x7f0000000340)={0x1, 0x3, [0xd5b, 0x89f, 0x809, 0x4f3]}) 16:39:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, 0x31, 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0x100000000, 0xffffffffffffffff) (async) sendfile(r1, r2, &(0x7f0000000000)=0x100000000, 0xffffffffffffffff) 16:39:33 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000024005186000000000000000000000000fa99a4b8203ec9e38ea5f8", @ANYRES32=r5, @ANYBLOB="00007c0f44619f6516130000"], 0x78}}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20, 0x2000}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x20, 0x2000}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @IFLA_LINKMODE={0x5, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:33 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000000200)={[{@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@showexec}, {@fat=@umask={'umask', 0x3d, 0xffff}}, {@fat=@uid={'uid', 0x3d, 0xee01}}, {@nodots}, {@fat=@gid}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@fat=@quiet}, {@fat=@dmask}, {@dots}, {@dots}, {@nodots}]}, 0x1, 0x183, &(0x7f00000005c0)="$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") socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x75ad3000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x75ad3000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) fcntl$notify(r1, 0x402, 0x80000000) (async) fcntl$notify(r1, 0x402, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x100000000011, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}}, 0x0) 16:39:33 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1, 0x31, 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0x100000000, 0xffffffffffffffff) 16:39:33 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:33 executing program 5: syz_emit_ethernet(0x1ec, &(0x7f00000000c0)={@empty, @dev, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "13574b", 0x1b6, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x87, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x33, 0x12, 0x4, 0x9, 0x6, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @local, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @empty}]}, @routing={0x2e, 0x8, 0x2, 0x40, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}]}], {0x4e22, 0x4e24, 0xbe, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}, "e7292b31e5525477911a78b8025e4e54590e7031032721c95a7ec39c20a718c762405a2cb1b0322ec7136a8b41e344425121960115edfba181cd1a3edea2cfa69906d055bfd04615669221d8584988a82404825c2ef13c9bb6de3518a8601b4d898127b3385dfdb1c047479a172a5e7630b5268fad3ae1185529dcb3799db212e84804d8d9e57a576c5be4228cbe3cd61c7c35b67930fabdef260953456516a3ce0680aa0fe52eaa02c9a08840a8"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="402b7742c9fc", @remote, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x1, 0x5, 0x0, 0x0, "0af877969e07a06b"}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@x25={0x805, {0x2, 0x1, 0x1f, "9b73ccd2b381a09ccd78aa1f14844c6bf2050f1b012641ee74730471626bb660822be968bc72"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x916, 0x616, 0x537, 0xe2]}) (async, rerun: 32) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @random="44f32bd0da03", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @remote, @multicast, @empty}}}}, &(0x7f0000000340)={0x1, 0x3, [0xd5b, 0x89f, 0x809, 0x4f3]}) (rerun: 32) 16:39:33 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x40}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x4}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="131e0592106961858623235a2f0418f64c6bc143c278ed6c6706d5b4fff7a89ffad58c8394b858a882d05d604fdb7a85da3d85e01a40a3c8c5a5bedc4cf290a7abf4b56f352534c86241b9e2354eb36a38222d5318d59ff3f4d7037a20ea80a34f033488598b45058498e3e00df13ac9b7fe328d273829da336a9cdc2c90", 0x7e}, {&(0x7f0000000140)="85fa1d983cecdffc1fdc2ef9c9132654ec8865a40a570df1f9a613e3d8c875eb79cd6314365593be8643a06fe02bf30b5890b362b85e65fc78", 0x39}, {&(0x7f0000000240)="845eeff932c75d0a1d087ae2791885f87e4d00f3aab5b55e6e9e47e8c46ab83c601cc6f94053d1438e68ba5f195327682bd6041b06b1782f989877633bda0c3a1d8c821720ecc334d8871156d26107ed6d73e892f47c13d7f62c3f625f80aab989bf3b4693d0ade330280d094cc7e7726bc548937490a89da33649139deefcd4d898ac928845f41c711df23a402b06e82f95c523f1743b6d60080f85434d95b18f", 0xa1}, {&(0x7f00000003c0)="257943562fefe41b09346be31b83255c6f42fd6ce7303eb1a4597b8f54b103cea981f70caed71137fecf2346bb98316c9ac82dfac39c6df40b17ce4283c55f23c0bc8198180434730b84b9ddc8c38888afa9e712cbb6a3ac59409002c149f7616f0847e9cc1c69684adeda5818f802e9f8605e8e393e3868644fd13f93e37a0285c654bd5660176dd1f1d67c3e1d4899a5c8a61bfef65967ccf48a191f6b33c83b7555a996690e177b1d45aad8958ac398218065a2cfd79d", 0xb8}], 0x4, 0x0, 0x0, 0x4}, 0x50) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 168.273933][ T6767] loop3: detected capacity change from 0 to 256 16:39:33 executing program 5: syz_emit_ethernet(0x1ec, &(0x7f00000000c0)={@empty, @dev, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "13574b", 0x1b6, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x87, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x33, 0x12, 0x4, 0x9, 0x6, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @local, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @empty}]}, @routing={0x2e, 0x8, 0x2, 0x40, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}]}], {0x4e22, 0x4e24, 0xbe, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}, "e7292b31e5525477911a78b8025e4e54590e7031032721c95a7ec39c20a718c762405a2cb1b0322ec7136a8b41e344425121960115edfba181cd1a3edea2cfa69906d055bfd04615669221d8584988a82404825c2ef13c9bb6de3518a8601b4d898127b3385dfdb1c047479a172a5e7630b5268fad3ae1185529dcb3799db212e84804d8d9e57a576c5be4228cbe3cd61c7c35b67930fabdef260953456516a3ce0680aa0fe52eaa02c9a08840a8"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x1ec, &(0x7f00000000c0)={@empty, @dev, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "13574b", 0x1b6, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x87, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x33, 0x12, 0x4, 0x9, 0x6, 0x40, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @local, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @empty}]}, @routing={0x2e, 0x8, 0x2, 0x40, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}]}], {0x4e22, 0x4e24, 0xbe, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100, @val=0x80}, "e7292b31e5525477911a78b8025e4e54590e7031032721c95a7ec39c20a718c762405a2cb1b0322ec7136a8b41e344425121960115edfba181cd1a3edea2cfa69906d055bfd04615669221d8584988a82404825c2ef13c9bb6de3518a8601b4d898127b3385dfdb1c047479a172a5e7630b5268fad3ae1185529dcb3799db212e84804d8d9e57a576c5be4228cbe3cd61c7c35b67930fabdef260953456516a3ce0680aa0fe52eaa02c9a08840a8"}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="402b7742c9fc", @remote, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x1, 0x5, 0x0, 0x0, "0af877969e07a06b"}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@x25={0x805, {0x2, 0x1, 0x1f, "9b73ccd2b381a09ccd78aa1f14844c6bf2050f1b012641ee74730471626bb660822be968bc72"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x916, 0x616, 0x537, 0xe2]}) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @random="44f32bd0da03", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @remote, @multicast, @empty}}}}, &(0x7f0000000340)={0x1, 0x3, [0xd5b, 0x89f, 0x809, 0x4f3]}) 16:39:33 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 168.350890][ T6774] loop2: detected capacity change from 0 to 2048 16:39:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22000003, &(0x7f0000000100)=ANY=[@ANYBLOB="6a71666d743f766673b6c362576e6f75696433ef322cee6f75696433322c61c009a846603c27da96de5d5324479a9e75746f5f64615f616c6c6f632c6a71666d743d76667376302c6772706a71756f74613d220851ca7987187f04bbe6322f6f5b8cb11822f8626429de3b9795431aca7f4fee2e382de888"], 0x84, 0x46a, &(0x7f00000004c0)="$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") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3, 0x27}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={r0, 0x800, 0x3}, 0x8) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24058805}, 0x4) 16:39:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x0) 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 16:39:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "22fd5f", 0x4c, 0x3c, 0x0, @private2, @mcast2, {[@hopopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x5}, {}, {}, {0x8, 0x88be, 0x88641100, {{}, 0xffffa888}}}}}}}, 0xfdef) 16:39:34 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x40}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x4}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="131e0592106961858623235a2f0418f64c6bc143c278ed6c6706d5b4fff7a89ffad58c8394b858a882d05d604fdb7a85da3d85e01a40a3c8c5a5bedc4cf290a7abf4b56f352534c86241b9e2354eb36a38222d5318d59ff3f4d7037a20ea80a34f033488598b45058498e3e00df13ac9b7fe328d273829da336a9cdc2c90", 0x7e}, {&(0x7f0000000140)="85fa1d983cecdffc1fdc2ef9c9132654ec8865a40a570df1f9a613e3d8c875eb79cd6314365593be8643a06fe02bf30b5890b362b85e65fc78", 0x39}, {&(0x7f0000000240)="845eeff932c75d0a1d087ae2791885f87e4d00f3aab5b55e6e9e47e8c46ab83c601cc6f94053d1438e68ba5f195327682bd6041b06b1782f989877633bda0c3a1d8c821720ecc334d8871156d26107ed6d73e892f47c13d7f62c3f625f80aab989bf3b4693d0ade330280d094cc7e7726bc548937490a89da33649139deefcd4d898ac928845f41c711df23a402b06e82f95c523f1743b6d60080f85434d95b18f", 0xa1}, {&(0x7f00000003c0)="257943562fefe41b09346be31b83255c6f42fd6ce7303eb1a4597b8f54b103cea981f70caed71137fecf2346bb98316c9ac82dfac39c6df40b17ce4283c55f23c0bc8198180434730b84b9ddc8c38888afa9e712cbb6a3ac59409002c149f7616f0847e9cc1c69684adeda5818f802e9f8605e8e393e3868644fd13f93e37a0285c654bd5660176dd1f1d67c3e1d4899a5c8a61bfef65967ccf48a191f6b33c83b7555a996690e177b1d45aad8958ac398218065a2cfd79d", 0xb8}], 0x4, 0x0, 0x0, 0x4}, 0x50) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 1) [ 168.517852][ T6774] bio_check_eod: 1 callbacks suppressed [ 168.517872][ T6774] syz-executor.2: attempt to access beyond end of device [ 168.517872][ T6774] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 16:39:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) (rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6) (async) recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x0) 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 16:39:34 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x40}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2}, 0x10) (async) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x4}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="131e0592106961858623235a2f0418f64c6bc143c278ed6c6706d5b4fff7a89ffad58c8394b858a882d05d604fdb7a85da3d85e01a40a3c8c5a5bedc4cf290a7abf4b56f352534c86241b9e2354eb36a38222d5318d59ff3f4d7037a20ea80a34f033488598b45058498e3e00df13ac9b7fe328d273829da336a9cdc2c90", 0x7e}, {&(0x7f0000000140)="85fa1d983cecdffc1fdc2ef9c9132654ec8865a40a570df1f9a613e3d8c875eb79cd6314365593be8643a06fe02bf30b5890b362b85e65fc78", 0x39}, {&(0x7f0000000240)="845eeff932c75d0a1d087ae2791885f87e4d00f3aab5b55e6e9e47e8c46ab83c601cc6f94053d1438e68ba5f195327682bd6041b06b1782f989877633bda0c3a1d8c821720ecc334d8871156d26107ed6d73e892f47c13d7f62c3f625f80aab989bf3b4693d0ade330280d094cc7e7726bc548937490a89da33649139deefcd4d898ac928845f41c711df23a402b06e82f95c523f1743b6d60080f85434d95b18f", 0xa1}, {&(0x7f00000003c0)="257943562fefe41b09346be31b83255c6f42fd6ce7303eb1a4597b8f54b103cea981f70caed71137fecf2346bb98316c9ac82dfac39c6df40b17ce4283c55f23c0bc8198180434730b84b9ddc8c38888afa9e712cbb6a3ac59409002c149f7616f0847e9cc1c69684adeda5818f802e9f8605e8e393e3868644fd13f93e37a0285c654bd5660176dd1f1d67c3e1d4899a5c8a61bfef65967ccf48a191f6b33c83b7555a996690e177b1d45aad8958ac398218065a2cfd79d", 0xb8}], 0x4, 0x0, 0x0, 0x4}, 0x50) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 168.568064][ T6801] loop0: detected capacity change from 0 to 512 [ 168.577275][ T6801] ext4: Unknown parameter 'jqfmt?vfs¶ĂbWnouid3ď2' 16:39:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "22fd5f", 0x4c, 0x3c, 0x0, @private2, @mcast2, {[@hopopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x5}, {}, {}, {0x8, 0x88be, 0x88641100, {{}, 0xffffa888}}}}}}}, 0xfdef) 16:39:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x0) 16:39:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22000003, &(0x7f0000000100)=ANY=[@ANYBLOB="6a71666d743f766673b6c362576e6f75696433ef322cee6f75696433322c61c009a846603c27da96de5d5324479a9e75746f5f64615f616c6c6f632c6a71666d743d76667376302c6772706a71756f74613d220851ca7987187f04bbe6322f6f5b8cb11822f8626429de3b9795431aca7f4fee2e382de888"], 0x84, 0x46a, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0mSaU8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXigckNHau40TO8Gx47rBv5+0yczurGdmZyeZ3dl1AAOrnP1IInZGxC8RMVaPLk9Qrv+6eePy3F83Ls8lUa2+8kdSS/fnjctzRdJivx15ZCKNSD9MYn+LfBcuXjozW6nMX8jjU4tn355auHjpydNnZ0/Nn5o/N3P8+LGj0888PfPUhtRzNCvrvvfOH9h74vVPXpqrxhvff5mVd2e+vbEedeNd51mO8vJjWTNS+/lo159+ZxltCCdDfSwI61KKiKy5hmv9fyxKsdR4Y/HiB30tHNBT1Wq1uqVpbakIXK0C/2NJ9LsEQH8U/+iz699iuY3Dj767/lz9Aiir9818qW8ZijT7tbV+xT7ao/zLEfHa1b8/zZZoeR8CAGBjfZ2Nf55oNf5L496GdLvyuaHxiDgcEbsj4u6I2BMR90TU0t4XEfevM//yinjz+OenbR1VrE3Z+O/ZfG5r+fgvLZKMl/LYaK3+w8mbpyvzR/JjMhHDW7L49Bp5fPPCzx+vtq1x/JctWf7FWDAvx+9DK27QnZxdnO2mzo2uvx+xb6hV/ZNbMwFJROyNiH0dfH52zE4//sWBLLxrR/P2/67/GjZgnqn6ecRj9fa/GivqX0jqOa02Pzm1NSrzR6aKs6LZDz9ee7kxPtwQ7qr+GyBr/+0tz/+8/kU3KOZrF9afx7VfP1r1mqbT838kebUWHsnXvTu7uHhhOmIkX7Fs/czSvkW8SJ/Vf+JQ6/6/O+Kfz/L99kdEdhI/EBEPRsTBvOwPRcTDEXFojfp/9/wjb619hPrb/ifXav+I8aRxvr6DQOnMt1+tln977X+sFprI17Tz96/dAnZz7AAAAGCzSGvPwCfp5K1wmk5O1p/h3xPb08r5hcXD5Xjn3Mn6s/LjMZwWd7rGGu6HTuf3hov4zIr40Yi4q/ak0bZafHLufKVXc+pAe3as0v8zv5X6XTqg59Y1j9b8RhuwiXlfEwaX/g+DS/+HwaX/w+Bq1f+vRNzsQ1GA28z/fxhc+j8MLv0fBpf+DwOp+ZX44utWOnnTfymw+0RXuw9QoNSjT47GL+3oQSDSvh+6zgPpnVCMg3lgS0S0u9eVnrbpyvMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg8/s3AAD//2lB4A8=") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3, 0x27}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={r0, 0x800, 0x3}, 0x8) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24058805}, 0x4) 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 168.657495][ T6801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6801 comm=syz-executor.0 [ 168.674074][ T6809] loop2: detected capacity change from 0 to 2048 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16:39:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "22fd5f", 0x4c, 0x3c, 0x0, @private2, @mcast2, {[@hopopts={0x2f}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x5}, {}, {}, {0x8, 0x88be, 0x88641100, {{}, 0xffffa888}}}}}}}, 0xfdef) [ 168.735858][ T6830] FAULT_INJECTION: forcing a failure. [ 168.735858][ T6830] name failslab, interval 1, probability 0, space 0, times 0 [ 168.748586][ T6830] CPU: 1 PID: 6830 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 168.758946][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 168.769034][ T6830] Call Trace: [ 168.772333][ T6830] [ 168.775395][ T6830] dump_stack_lvl+0xda/0x130 [ 168.780039][ T6830] dump_stack+0x15/0x20 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 168.784253][ T6830] should_fail_ex+0x21f/0x230 [ 168.788973][ T6830] ? alloc_pipe_info+0xaf/0x360 [ 168.793895][ T6830] __should_failslab+0x92/0xa0 [ 168.798878][ T6830] should_failslab+0x9/0x20 [ 168.803519][ T6830] slab_pre_alloc_hook+0x38/0x180 [ 168.808607][ T6830] ? alloc_pipe_info+0xaf/0x360 [ 168.813534][ T6830] __kmem_cache_alloc_node+0x48/0x1d0 [ 168.819128][ T6830] ? alloc_pipe_info+0xaf/0x360 [ 168.824099][ T6830] kmalloc_trace+0x2a/0xa0 [ 168.828562][ T6830] alloc_pipe_info+0xaf/0x360 [ 168.833296][ T6830] splice_direct_to_actor+0x636/0x690 [ 168.838784][ T6830] ? fsnotify_perm+0x58/0x3b0 [ 168.843505][ T6830] ? direct_file_splice_eof+0x70/0x70 [ 168.848957][ T6830] ? security_file_permission+0x5a/0x70 [ 168.854823][ T6830] do_splice_direct+0x10d/0x190 [ 168.859797][ T6830] ? do_splice_direct+0x190/0x190 [ 168.860230][ T6836] loop0: detected capacity change from 0 to 512 [ 168.864907][ T6830] do_sendfile+0x3b6/0x9a0 [ 168.875736][ T6830] __x64_sys_sendfile64+0x110/0x150 [ 168.880968][ T6830] do_syscall_64+0x41/0xc0 [ 168.883742][ T6836] ext4: Unknown parameter 'jqfmt?vfs¶ĂbWnouid3ď2' [ 168.885413][ T6830] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 168.898018][ T6830] RIP: 0033:0x7fa29008fb29 [ 168.902506][ T6830] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 168.922252][ T6830] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 168.930807][ T6830] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 168.939231][ T6830] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 168.947334][ T6830] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 168.955390][ T6830] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 168.963484][ T6830] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 168.971725][ T6830] 16:39:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 2) 16:39:34 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001800)=@newtaction={0x1ee8, 0x30, 0x20, 0x70bd29, 0x25dfdbff, {}, [{0x1e88, 0x1, [@m_ife={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xed, 0x6, "812b3d52eeee65b19c9650f82326fb5e120e3a1d260ab21026d2a9e4d5ea2102eaab464fe10dbab84e4650ada45faa7740ab006e038476671a15afdce88d9c8da3e1ef735ca65cb158268a5a05544b2bf7ec4a76cc2f762846852f74713fb7c5828f10c0ef4c5d960e95c6a6b371b57b9e3b6451c2f8ce8744ef643b7abf7ca352423d7ff63e2c9a8266629eee9bca4188d7d5d68e6c816868d1551b74b2d4d950c06174fa73d045bd92d0e9cecc447ee1ef2e26526dd76562a00a22193abf77cb5c73c0dfe63e817f72d569ed466c88ae7cc76297853fb6a7aff7d2e0bfacd1f245c8a97e3ee4d3df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x1d38, 0xd, 0x0, 0x0, {{0xb}, {0xd0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xfffffffd, 0x1f, 0x80000000, 0x8, 0x8001, 0x101, 0x2, 0x9, 0x9, 0x9, 0x1, 0x51d4, 0x1f, 0x9bc2, 0x7, 0x80, 0x5, 0x3, 0x200, 0x8000, 0xd0, 0x20, 0x1f, 0x9, 0x2, 0x200, 0x22ba, 0x0, 0x8000000, 0x2, 0x1, 0x8000, 0x2, 0x2, 0x4, 0x400000, 0xce, 0x4a38637c, 0x200, 0x9, 0x8, 0x0, 0xffff, 0x2, 0x2000000, 0x101, 0x2, 0x5, 0x6, 0x20, 0xfffffffe, 0x1000, 0xc001, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x31, 0x6, 0x1, 0x8, 0x0, 0x7fffffff, 0x8, 0xffff, 0x200, 0x1, 0x7, 0x7, 0x7, 0x4, 0x75, 0x7, 0xf1b, 0xffff8000, 0x3, 0x0, 0x3ff, 0xdc29, 0x96, 0x4, 0xf94, 0x1, 0x9, 0x10000, 0x3, 0xffffffff, 0x401, 0x7, 0xe0, 0x28f, 0x0, 0x2, 0x8, 0x1, 0x7, 0x80, 0x4, 0x2, 0x7, 0x8, 0x48ab, 0x5, 0x9513, 0x32b, 0xffffffff, 0x764f, 0x5, 0x0, 0xfffffff7, 0x0, 0x8001, 0x10001, 0x0, 0x3, 0x5, 0x10000, 0x9, 0x2, 0x2, 0xa75, 0x4, 0x15bf, 0x8001, 0x9, 0xff, 0x7f, 0x0, 0x1, 0x0, 0x8d, 0x5a, 0x8, 0x0, 0x0, 0xfffffff9, 0x4, 0x3, 0x7fff, 0xcd, 0xffff, 0x4, 0x1, 0x400, 0x7f, 0x7, 0x100, 0x0, 0x4, 0x7f, 0x2, 0x0, 0x1, 0x3, 0x5fd23be5, 0x3, 0x1bd, 0x3, 0x7, 0x3, 0x3, 0xffffffff, 0x81, 0x6, 0x622e, 0x81, 0x4, 0x280, 0x7fff, 0x20, 0x1ff, 0x6, 0x0, 0x0, 0x4b600000, 0xfffffffd, 0x1, 0x643, 0x9, 0xdd63, 0x3f, 0x4, 0x3, 0x9, 0x9, 0x9, 0x7, 0x0, 0x2, 0x8f8, 0x1, 0x4, 0x100, 0x27, 0x5, 0xaae3, 0x9, 0xfc000000, 0x7fff, 0x80, 0x5, 0x1, 0x2c, 0x0, 0x3, 0x7, 0xfffffffe, 0x4229, 0x7f, 0x371, 0xffffffff, 0x915, 0xffff, 0x6, 0x40, 0xffff, 0x7, 0x400, 0xf00c, 0x62c3, 0x9552, 0x3, 0x6, 0x4ff, 0xc2aa, 0x401, 0x200, 0x8, 0x6, 0x6, 0x1, 0xfffffffa, 0x9, 0xf346, 0x0, 0x8000, 0x4, 0x1, 0x8, 0xae0, 0x1, 0x3ff, 0x800, 0x40, 0x1, 0x8, 0xfdc6, 0x6c, 0xff, 0x9519, 0x1, 0x1ff, 0x8, 0x459]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc37}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x517, 0x253, 0xc64, 0x4, 0x7ff, 0x5189, 0x1ff, 0xda, 0x0, 0xffffffff, 0x6, 0x2, 0x80000000, 0xffff, 0x10001, 0x0, 0x1, 0x0, 0x5, 0x4, 0x3, 0x8, 0x401, 0xffff7fff, 0x6, 0x944c, 0x4, 0x1f, 0x8001, 0x101, 0x5, 0x80, 0x3, 0x5, 0x9, 0x3, 0x4, 0x9, 0x3f, 0x3, 0x1, 0x8001, 0x80000001, 0x7, 0x28, 0x7f, 0x1, 0x190, 0x5129, 0xffffffff, 0x8001, 0x0, 0x8, 0x1, 0x6, 0x0, 0x6, 0x20, 0x1000, 0x9312, 0x200, 0x7ff, 0x200, 0x8, 0x4, 0x8, 0x3ff, 0x8, 0xbec, 0x1, 0x0, 0xa2b, 0xa85d, 0x100, 0x1f, 0xfff, 0x578, 0x1f, 0x0, 0x0, 0x3, 0x6, 0x0, 0xed14, 0x20, 0x20, 0x78f, 0x7aa, 0x8, 0x200, 0x7fffffff, 0x7, 0x0, 0x9, 0x800, 0x1, 0x9, 0x0, 0x80000001, 0x7, 0x6, 0x800, 0xe93, 0x1, 0x2, 0x67b4571a, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x7, 0x9, 0x9, 0x401, 0x0, 0x9, 0x0, 0x5, 0xb7, 0x163, 0x1, 0x3, 0x7fff, 0x1, 0x1, 0x8a, 0x9, 0x0, 0xff, 0x3, 0x1, 0x7, 0x8, 0x9, 0x9d44, 0x8, 0x68ff, 0x8001, 0x4, 0x40d2a266, 0x40, 0x1, 0x9, 0x5, 0x8001, 0xffffffff, 0x3e0, 0x100, 0xff, 0xa34d, 0x7, 0x7dff18c5, 0x2, 0x0, 0x3ff, 0x3, 0x6, 0x0, 0x2, 0x2, 0x35f, 0x9, 0x4, 0x1f, 0xfffffffe, 0x9365, 0xfffffffb, 0x20, 0x9, 0xfff, 0x401, 0xd1e0, 0xa3c, 0x1ff, 0x3, 0xd8, 0x7, 0xfffffffd, 0x8, 0x7, 0x7, 0x6, 0x3, 0x2b9, 0x9490, 0x6ec9, 0x8, 0x9, 0x80000001, 0xfff, 0x6, 0x7, 0x7f, 0x0, 0x6, 0x2, 0x3, 0x10000, 0x9, 0x3, 0x101, 0x4, 0x7ff, 0xfff, 0x9, 0x1f, 0x2, 0x1a33, 0xfffffff8, 0x7079, 0x8, 0x9, 0x8, 0x8000, 0xfff, 0x10000, 0x20, 0x4, 0x6, 0x2, 0x8, 0x35, 0x9, 0x39f0000, 0xffff, 0x7, 0x100, 0x0, 0x4, 0x100, 0x1, 0x1ff, 0x1, 0x4, 0x8, 0x16, 0x7fffffff, 0x7fffffff, 0x7, 0xfff, 0x3, 0x10000, 0x0, 0x59, 0x8, 0x9, 0x10001, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x4f2c, 0x4, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x24ecce61, 0x1, 0xffffffff, 0x12, 0xdfae, {0x3, 0x0, 0x7, 0xff, 0x7, 0x5}, {0x2, 0x1, 0x0, 0x8, 0x5, 0x80000000}, 0x9, 0xe0, 0x101}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0xd40e, 0x9, 0x0, {0x3d, 0x0, 0x8, 0x401, 0x4}, {0xf2, 0x0, 0x200, 0x80, 0x5, 0x400}, 0x75db, 0x7, 0x401}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0xa0e1, 0x0, 0x8001, 0x5, 0x3, 0x5, 0x3, 0x0, 0x81, 0x0, 0x8, 0xfffffff8, 0x2, 0x9, 0x8, 0x601, 0x7, 0x9, 0x2, 0x80, 0x7, 0xffffff00, 0x7fff, 0x7fffffff, 0x0, 0x7, 0x7fff, 0x1, 0xffff, 0x1, 0xbb, 0xd8d4, 0x3, 0xb4e, 0xfffffff9, 0x40, 0x4, 0x8000, 0x3, 0xfff, 0xed, 0x3ff, 0x0, 0xce, 0x7, 0x9, 0x0, 0x80000000, 0xf547, 0xfffffff9, 0x5ea6, 0x5, 0xa6bc, 0x4, 0x20, 0x5, 0x9, 0x8001, 0xfffffff8, 0x6, 0x4a90, 0xff, 0x5, 0x1000, 0x3, 0xfffffffe, 0x4, 0x0, 0x9, 0x1f, 0x1000, 0x6, 0xd0, 0xac, 0x1, 0x1, 0x2, 0x19, 0x3f, 0x6, 0x64a8, 0x2, 0x2bc80000, 0x6, 0x0, 0x6, 0x100, 0x401, 0x7ff, 0x8, 0x4, 0x80, 0x4, 0xfff, 0x7ff, 0xfffffffe, 0x6, 0x7bf, 0x1, 0x0, 0x8, 0x5, 0x101, 0x80, 0x3f, 0x0, 0x0, 0x7, 0x5, 0x0, 0x2, 0x80, 0x1, 0x9, 0x3f00, 0x1, 0x9, 0x4, 0x2, 0x4, 0x1c, 0x8, 0x2, 0x7, 0xc0, 0x2, 0x8, 0x76c, 0xff, 0x8, 0x1ff, 0x80000001, 0x1, 0x6, 0x2, 0x3, 0xc80, 0x7f, 0x80, 0x9, 0x8, 0x7, 0xfff, 0x0, 0x6, 0x1, 0x3ff, 0x0, 0x2, 0x5, 0x6f, 0x7ff, 0x3c, 0x2, 0x269, 0x8, 0x8, 0x6, 0x101, 0x8, 0x7, 0x1, 0x3f, 0x4, 0x488, 0x6, 0x2, 0xce5a, 0x1, 0x2, 0xa882, 0x8, 0x81, 0x3, 0x4, 0x7f, 0x8405, 0x7, 0x1f, 0x1f, 0x4, 0xefa, 0x47, 0xffffffff, 0x7, 0x3, 0x9, 0x0, 0x7, 0x9618, 0x7, 0x4, 0xde2, 0x4, 0xff, 0x800, 0x80000000, 0xfffffff7, 0x1f, 0x2, 0x9, 0x8000, 0x2, 0x2cef65bd, 0x0, 0x8001, 0x3080, 0x4, 0x2, 0x8a8, 0x7, 0x7ff, 0x2, 0x5, 0x2, 0xffffffff, 0x9, 0x4, 0x2, 0xff, 0x8, 0x80000001, 0x27, 0xfc, 0x6914, 0x1, 0x2, 0x7, 0x0, 0x48000000, 0x3, 0x8, 0xba, 0x3f, 0x0, 0x4, 0xd82a, 0xfe7, 0x9, 0x1, 0x1, 0x100, 0x7, 0x5, 0x3, 0x0, 0x8, 0x1000, 0x3, 0x7, 0x74de, 0x5, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4c, 0x1, [@m_ife={0x48, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x5}}}}]}]}, 0x1ee8}}, 0x45000) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r7, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:39:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x45}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x3, 0xffe0}, {0x5, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x1) r6 = memfd_secret(0x80000) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0x4}, @jmp={0x5, 0x1, 0x6, 0x0, 0x3, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0xd, 0x5, 0x5, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}]}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x6, 0x8, 0x6}, 0x10}, 0x80) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000300)=""/50, 0xcb, 0x32}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x3, 0x20a, 0x0, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, r9, 0x3, 0x0, 0x3, 0xa}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0xb, 0x0, 0xff, 0x3f, 0x28, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000d40)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1a, 0x2, &(0x7f00000015c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}], &(0x7f0000001680)='GPL\x00', 0x6, 0xd0, &(0x7f00000016c0)=""/208, 0x41000, 0x15, '\x00', r8, 0x12, r9, 0x8, &(0x7f00000017c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x5, 0xb, 0x61, 0xffffff7f}, 0x10, 0x0, r10, 0x0, &(0x7f00000018c0)=[r7, r7, r11, r7, r12, r7, r7, r7]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@newchain={0x2c, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc}, {0xffff, 0x8}, {0xffe0, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1c, 0x7ff, 0x1, 0x1d, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, r14, 0x0, 0x3, 0x1}, 0x48) r15 = creat(&(0x7f0000000180)='./file0\x00', 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x3, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x6, 0xb, 0x4, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x2, 0x2, 0x7, 0x6, 0x2}], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, &(0x7f00000000c0), 0x41100, 0x4, '\x00', 0x0, 0x7, r6, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xf, 0x2, 0x3ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000001c0)=[r15]}, 0x80) 16:39:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) ftruncate(r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x3}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x400, 0x5, 0x7ff, 0x2c9b, 0xc9d1}) write(r0, &(0x7f00000000c0)="90", 0x1) 16:39:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22000003, &(0x7f0000000100)=ANY=[@ANYBLOB="6a71666d743f766673b6c362576e6f75696433ef322cee6f75696433322c61c009a846603c27da96de5d5324479a9e75746f5f64615f616c6c6f632c6a71666d743d76667376302c6772706a71756f74613d220851ca7987187f04bbe6322f6f5b8cb11822f8626429de3b9795431aca7f4fee2e382de888"], 0x84, 0x46a, &(0x7f00000004c0)="$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") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3, 0x27}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000000c0)={r0, 0x800, 0x3}, 0x8) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24058805}, 0x4) [ 168.988064][ T6809] syz-executor.2: attempt to access beyond end of device [ 168.988064][ T6809] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 169.006796][ T6836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6836 comm=syz-executor.0 16:39:34 executing program 1: socket$tipc(0x1e, 0x1, 0x0) (async) r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001800)=@newtaction={0x1ee8, 0x30, 0x20, 0x70bd29, 0x25dfdbff, {}, [{0x1e88, 0x1, [@m_ife={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xed, 0x6, "812b3d52eeee65b19c9650f82326fb5e120e3a1d260ab21026d2a9e4d5ea2102eaab464fe10dbab84e4650ada45faa7740ab006e038476671a15afdce88d9c8da3e1ef735ca65cb158268a5a05544b2bf7ec4a76cc2f762846852f74713fb7c5828f10c0ef4c5d960e95c6a6b371b57b9e3b6451c2f8ce8744ef643b7abf7ca352423d7ff63e2c9a8266629eee9bca4188d7d5d68e6c816868d1551b74b2d4d950c06174fa73d045bd92d0e9cecc447ee1ef2e26526dd76562a00a22193abf77cb5c73c0dfe63e817f72d569ed466c88ae7cc76297853fb6a7aff7d2e0bfacd1f245c8a97e3ee4d3df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x1d38, 0xd, 0x0, 0x0, {{0xb}, {0xd0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xfffffffd, 0x1f, 0x80000000, 0x8, 0x8001, 0x101, 0x2, 0x9, 0x9, 0x9, 0x1, 0x51d4, 0x1f, 0x9bc2, 0x7, 0x80, 0x5, 0x3, 0x200, 0x8000, 0xd0, 0x20, 0x1f, 0x9, 0x2, 0x200, 0x22ba, 0x0, 0x8000000, 0x2, 0x1, 0x8000, 0x2, 0x2, 0x4, 0x400000, 0xce, 0x4a38637c, 0x200, 0x9, 0x8, 0x0, 0xffff, 0x2, 0x2000000, 0x101, 0x2, 0x5, 0x6, 0x20, 0xfffffffe, 0x1000, 0xc001, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x31, 0x6, 0x1, 0x8, 0x0, 0x7fffffff, 0x8, 0xffff, 0x200, 0x1, 0x7, 0x7, 0x7, 0x4, 0x75, 0x7, 0xf1b, 0xffff8000, 0x3, 0x0, 0x3ff, 0xdc29, 0x96, 0x4, 0xf94, 0x1, 0x9, 0x10000, 0x3, 0xffffffff, 0x401, 0x7, 0xe0, 0x28f, 0x0, 0x2, 0x8, 0x1, 0x7, 0x80, 0x4, 0x2, 0x7, 0x8, 0x48ab, 0x5, 0x9513, 0x32b, 0xffffffff, 0x764f, 0x5, 0x0, 0xfffffff7, 0x0, 0x8001, 0x10001, 0x0, 0x3, 0x5, 0x10000, 0x9, 0x2, 0x2, 0xa75, 0x4, 0x15bf, 0x8001, 0x9, 0xff, 0x7f, 0x0, 0x1, 0x0, 0x8d, 0x5a, 0x8, 0x0, 0x0, 0xfffffff9, 0x4, 0x3, 0x7fff, 0xcd, 0xffff, 0x4, 0x1, 0x400, 0x7f, 0x7, 0x100, 0x0, 0x4, 0x7f, 0x2, 0x0, 0x1, 0x3, 0x5fd23be5, 0x3, 0x1bd, 0x3, 0x7, 0x3, 0x3, 0xffffffff, 0x81, 0x6, 0x622e, 0x81, 0x4, 0x280, 0x7fff, 0x20, 0x1ff, 0x6, 0x0, 0x0, 0x4b600000, 0xfffffffd, 0x1, 0x643, 0x9, 0xdd63, 0x3f, 0x4, 0x3, 0x9, 0x9, 0x9, 0x7, 0x0, 0x2, 0x8f8, 0x1, 0x4, 0x100, 0x27, 0x5, 0xaae3, 0x9, 0xfc000000, 0x7fff, 0x80, 0x5, 0x1, 0x2c, 0x0, 0x3, 0x7, 0xfffffffe, 0x4229, 0x7f, 0x371, 0xffffffff, 0x915, 0xffff, 0x6, 0x40, 0xffff, 0x7, 0x400, 0xf00c, 0x62c3, 0x9552, 0x3, 0x6, 0x4ff, 0xc2aa, 0x401, 0x200, 0x8, 0x6, 0x6, 0x1, 0xfffffffa, 0x9, 0xf346, 0x0, 0x8000, 0x4, 0x1, 0x8, 0xae0, 0x1, 0x3ff, 0x800, 0x40, 0x1, 0x8, 0xfdc6, 0x6c, 0xff, 0x9519, 0x1, 0x1ff, 0x8, 0x459]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc37}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x517, 0x253, 0xc64, 0x4, 0x7ff, 0x5189, 0x1ff, 0xda, 0x0, 0xffffffff, 0x6, 0x2, 0x80000000, 0xffff, 0x10001, 0x0, 0x1, 0x0, 0x5, 0x4, 0x3, 0x8, 0x401, 0xffff7fff, 0x6, 0x944c, 0x4, 0x1f, 0x8001, 0x101, 0x5, 0x80, 0x3, 0x5, 0x9, 0x3, 0x4, 0x9, 0x3f, 0x3, 0x1, 0x8001, 0x80000001, 0x7, 0x28, 0x7f, 0x1, 0x190, 0x5129, 0xffffffff, 0x8001, 0x0, 0x8, 0x1, 0x6, 0x0, 0x6, 0x20, 0x1000, 0x9312, 0x200, 0x7ff, 0x200, 0x8, 0x4, 0x8, 0x3ff, 0x8, 0xbec, 0x1, 0x0, 0xa2b, 0xa85d, 0x100, 0x1f, 0xfff, 0x578, 0x1f, 0x0, 0x0, 0x3, 0x6, 0x0, 0xed14, 0x20, 0x20, 0x78f, 0x7aa, 0x8, 0x200, 0x7fffffff, 0x7, 0x0, 0x9, 0x800, 0x1, 0x9, 0x0, 0x80000001, 0x7, 0x6, 0x800, 0xe93, 0x1, 0x2, 0x67b4571a, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x7, 0x9, 0x9, 0x401, 0x0, 0x9, 0x0, 0x5, 0xb7, 0x163, 0x1, 0x3, 0x7fff, 0x1, 0x1, 0x8a, 0x9, 0x0, 0xff, 0x3, 0x1, 0x7, 0x8, 0x9, 0x9d44, 0x8, 0x68ff, 0x8001, 0x4, 0x40d2a266, 0x40, 0x1, 0x9, 0x5, 0x8001, 0xffffffff, 0x3e0, 0x100, 0xff, 0xa34d, 0x7, 0x7dff18c5, 0x2, 0x0, 0x3ff, 0x3, 0x6, 0x0, 0x2, 0x2, 0x35f, 0x9, 0x4, 0x1f, 0xfffffffe, 0x9365, 0xfffffffb, 0x20, 0x9, 0xfff, 0x401, 0xd1e0, 0xa3c, 0x1ff, 0x3, 0xd8, 0x7, 0xfffffffd, 0x8, 0x7, 0x7, 0x6, 0x3, 0x2b9, 0x9490, 0x6ec9, 0x8, 0x9, 0x80000001, 0xfff, 0x6, 0x7, 0x7f, 0x0, 0x6, 0x2, 0x3, 0x10000, 0x9, 0x3, 0x101, 0x4, 0x7ff, 0xfff, 0x9, 0x1f, 0x2, 0x1a33, 0xfffffff8, 0x7079, 0x8, 0x9, 0x8, 0x8000, 0xfff, 0x10000, 0x20, 0x4, 0x6, 0x2, 0x8, 0x35, 0x9, 0x39f0000, 0xffff, 0x7, 0x100, 0x0, 0x4, 0x100, 0x1, 0x1ff, 0x1, 0x4, 0x8, 0x16, 0x7fffffff, 0x7fffffff, 0x7, 0xfff, 0x3, 0x10000, 0x0, 0x59, 0x8, 0x9, 0x10001, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x4f2c, 0x4, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x24ecce61, 0x1, 0xffffffff, 0x12, 0xdfae, {0x3, 0x0, 0x7, 0xff, 0x7, 0x5}, {0x2, 0x1, 0x0, 0x8, 0x5, 0x80000000}, 0x9, 0xe0, 0x101}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0xd40e, 0x9, 0x0, {0x3d, 0x0, 0x8, 0x401, 0x4}, {0xf2, 0x0, 0x200, 0x80, 0x5, 0x400}, 0x75db, 0x7, 0x401}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0xa0e1, 0x0, 0x8001, 0x5, 0x3, 0x5, 0x3, 0x0, 0x81, 0x0, 0x8, 0xfffffff8, 0x2, 0x9, 0x8, 0x601, 0x7, 0x9, 0x2, 0x80, 0x7, 0xffffff00, 0x7fff, 0x7fffffff, 0x0, 0x7, 0x7fff, 0x1, 0xffff, 0x1, 0xbb, 0xd8d4, 0x3, 0xb4e, 0xfffffff9, 0x40, 0x4, 0x8000, 0x3, 0xfff, 0xed, 0x3ff, 0x0, 0xce, 0x7, 0x9, 0x0, 0x80000000, 0xf547, 0xfffffff9, 0x5ea6, 0x5, 0xa6bc, 0x4, 0x20, 0x5, 0x9, 0x8001, 0xfffffff8, 0x6, 0x4a90, 0xff, 0x5, 0x1000, 0x3, 0xfffffffe, 0x4, 0x0, 0x9, 0x1f, 0x1000, 0x6, 0xd0, 0xac, 0x1, 0x1, 0x2, 0x19, 0x3f, 0x6, 0x64a8, 0x2, 0x2bc80000, 0x6, 0x0, 0x6, 0x100, 0x401, 0x7ff, 0x8, 0x4, 0x80, 0x4, 0xfff, 0x7ff, 0xfffffffe, 0x6, 0x7bf, 0x1, 0x0, 0x8, 0x5, 0x101, 0x80, 0x3f, 0x0, 0x0, 0x7, 0x5, 0x0, 0x2, 0x80, 0x1, 0x9, 0x3f00, 0x1, 0x9, 0x4, 0x2, 0x4, 0x1c, 0x8, 0x2, 0x7, 0xc0, 0x2, 0x8, 0x76c, 0xff, 0x8, 0x1ff, 0x80000001, 0x1, 0x6, 0x2, 0x3, 0xc80, 0x7f, 0x80, 0x9, 0x8, 0x7, 0xfff, 0x0, 0x6, 0x1, 0x3ff, 0x0, 0x2, 0x5, 0x6f, 0x7ff, 0x3c, 0x2, 0x269, 0x8, 0x8, 0x6, 0x101, 0x8, 0x7, 0x1, 0x3f, 0x4, 0x488, 0x6, 0x2, 0xce5a, 0x1, 0x2, 0xa882, 0x8, 0x81, 0x3, 0x4, 0x7f, 0x8405, 0x7, 0x1f, 0x1f, 0x4, 0xefa, 0x47, 0xffffffff, 0x7, 0x3, 0x9, 0x0, 0x7, 0x9618, 0x7, 0x4, 0xde2, 0x4, 0xff, 0x800, 0x80000000, 0xfffffff7, 0x1f, 0x2, 0x9, 0x8000, 0x2, 0x2cef65bd, 0x0, 0x8001, 0x3080, 0x4, 0x2, 0x8a8, 0x7, 0x7ff, 0x2, 0x5, 0x2, 0xffffffff, 0x9, 0x4, 0x2, 0xff, 0x8, 0x80000001, 0x27, 0xfc, 0x6914, 0x1, 0x2, 0x7, 0x0, 0x48000000, 0x3, 0x8, 0xba, 0x3f, 0x0, 0x4, 0xd82a, 0xfe7, 0x9, 0x1, 0x1, 0x100, 0x7, 0x5, 0x3, 0x0, 0x8, 0x1000, 0x3, 0x7, 0x74de, 0x5, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4c, 0x1, [@m_ife={0x48, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x5}}}}]}]}, 0x1ee8}}, 0x45000) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r7, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 169.077340][ T6847] loop0: detected capacity change from 0 to 512 [ 169.113205][ T6847] ext4: Unknown parameter 'jqfmt?vfs¶ĂbWnouid3ď2' 16:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:39:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) (async) ftruncate(r0, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x3}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x400, 0x5, 0x7ff, 0x2c9b, 0xc9d1}) write(r0, &(0x7f00000000c0)="90", 0x1) 16:39:34 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001800)=@newtaction={0x1ee8, 0x30, 0x20, 0x70bd29, 0x25dfdbff, {}, [{0x1e88, 0x1, [@m_ife={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xed, 0x6, "812b3d52eeee65b19c9650f82326fb5e120e3a1d260ab21026d2a9e4d5ea2102eaab464fe10dbab84e4650ada45faa7740ab006e038476671a15afdce88d9c8da3e1ef735ca65cb158268a5a05544b2bf7ec4a76cc2f762846852f74713fb7c5828f10c0ef4c5d960e95c6a6b371b57b9e3b6451c2f8ce8744ef643b7abf7ca352423d7ff63e2c9a8266629eee9bca4188d7d5d68e6c816868d1551b74b2d4d950c06174fa73d045bd92d0e9cecc447ee1ef2e26526dd76562a00a22193abf77cb5c73c0dfe63e817f72d569ed466c88ae7cc76297853fb6a7aff7d2e0bfacd1f245c8a97e3ee4d3df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x1d38, 0xd, 0x0, 0x0, {{0xb}, {0xd0c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xfffffffd, 0x1f, 0x80000000, 0x8, 0x8001, 0x101, 0x2, 0x9, 0x9, 0x9, 0x1, 0x51d4, 0x1f, 0x9bc2, 0x7, 0x80, 0x5, 0x3, 0x200, 0x8000, 0xd0, 0x20, 0x1f, 0x9, 0x2, 0x200, 0x22ba, 0x0, 0x8000000, 0x2, 0x1, 0x8000, 0x2, 0x2, 0x4, 0x400000, 0xce, 0x4a38637c, 0x200, 0x9, 0x8, 0x0, 0xffff, 0x2, 0x2000000, 0x101, 0x2, 0x5, 0x6, 0x20, 0xfffffffe, 0x1000, 0xc001, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x31, 0x6, 0x1, 0x8, 0x0, 0x7fffffff, 0x8, 0xffff, 0x200, 0x1, 0x7, 0x7, 0x7, 0x4, 0x75, 0x7, 0xf1b, 0xffff8000, 0x3, 0x0, 0x3ff, 0xdc29, 0x96, 0x4, 0xf94, 0x1, 0x9, 0x10000, 0x3, 0xffffffff, 0x401, 0x7, 0xe0, 0x28f, 0x0, 0x2, 0x8, 0x1, 0x7, 0x80, 0x4, 0x2, 0x7, 0x8, 0x48ab, 0x5, 0x9513, 0x32b, 0xffffffff, 0x764f, 0x5, 0x0, 0xfffffff7, 0x0, 0x8001, 0x10001, 0x0, 0x3, 0x5, 0x10000, 0x9, 0x2, 0x2, 0xa75, 0x4, 0x15bf, 0x8001, 0x9, 0xff, 0x7f, 0x0, 0x1, 0x0, 0x8d, 0x5a, 0x8, 0x0, 0x0, 0xfffffff9, 0x4, 0x3, 0x7fff, 0xcd, 0xffff, 0x4, 0x1, 0x400, 0x7f, 0x7, 0x100, 0x0, 0x4, 0x7f, 0x2, 0x0, 0x1, 0x3, 0x5fd23be5, 0x3, 0x1bd, 0x3, 0x7, 0x3, 0x3, 0xffffffff, 0x81, 0x6, 0x622e, 0x81, 0x4, 0x280, 0x7fff, 0x20, 0x1ff, 0x6, 0x0, 0x0, 0x4b600000, 0xfffffffd, 0x1, 0x643, 0x9, 0xdd63, 0x3f, 0x4, 0x3, 0x9, 0x9, 0x9, 0x7, 0x0, 0x2, 0x8f8, 0x1, 0x4, 0x100, 0x27, 0x5, 0xaae3, 0x9, 0xfc000000, 0x7fff, 0x80, 0x5, 0x1, 0x2c, 0x0, 0x3, 0x7, 0xfffffffe, 0x4229, 0x7f, 0x371, 0xffffffff, 0x915, 0xffff, 0x6, 0x40, 0xffff, 0x7, 0x400, 0xf00c, 0x62c3, 0x9552, 0x3, 0x6, 0x4ff, 0xc2aa, 0x401, 0x200, 0x8, 0x6, 0x6, 0x1, 0xfffffffa, 0x9, 0xf346, 0x0, 0x8000, 0x4, 0x1, 0x8, 0xae0, 0x1, 0x3ff, 0x800, 0x40, 0x1, 0x8, 0xfdc6, 0x6c, 0xff, 0x9519, 0x1, 0x1ff, 0x8, 0x459]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc37}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x517, 0x253, 0xc64, 0x4, 0x7ff, 0x5189, 0x1ff, 0xda, 0x0, 0xffffffff, 0x6, 0x2, 0x80000000, 0xffff, 0x10001, 0x0, 0x1, 0x0, 0x5, 0x4, 0x3, 0x8, 0x401, 0xffff7fff, 0x6, 0x944c, 0x4, 0x1f, 0x8001, 0x101, 0x5, 0x80, 0x3, 0x5, 0x9, 0x3, 0x4, 0x9, 0x3f, 0x3, 0x1, 0x8001, 0x80000001, 0x7, 0x28, 0x7f, 0x1, 0x190, 0x5129, 0xffffffff, 0x8001, 0x0, 0x8, 0x1, 0x6, 0x0, 0x6, 0x20, 0x1000, 0x9312, 0x200, 0x7ff, 0x200, 0x8, 0x4, 0x8, 0x3ff, 0x8, 0xbec, 0x1, 0x0, 0xa2b, 0xa85d, 0x100, 0x1f, 0xfff, 0x578, 0x1f, 0x0, 0x0, 0x3, 0x6, 0x0, 0xed14, 0x20, 0x20, 0x78f, 0x7aa, 0x8, 0x200, 0x7fffffff, 0x7, 0x0, 0x9, 0x800, 0x1, 0x9, 0x0, 0x80000001, 0x7, 0x6, 0x800, 0xe93, 0x1, 0x2, 0x67b4571a, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x7, 0x9, 0x9, 0x401, 0x0, 0x9, 0x0, 0x5, 0xb7, 0x163, 0x1, 0x3, 0x7fff, 0x1, 0x1, 0x8a, 0x9, 0x0, 0xff, 0x3, 0x1, 0x7, 0x8, 0x9, 0x9d44, 0x8, 0x68ff, 0x8001, 0x4, 0x40d2a266, 0x40, 0x1, 0x9, 0x5, 0x8001, 0xffffffff, 0x3e0, 0x100, 0xff, 0xa34d, 0x7, 0x7dff18c5, 0x2, 0x0, 0x3ff, 0x3, 0x6, 0x0, 0x2, 0x2, 0x35f, 0x9, 0x4, 0x1f, 0xfffffffe, 0x9365, 0xfffffffb, 0x20, 0x9, 0xfff, 0x401, 0xd1e0, 0xa3c, 0x1ff, 0x3, 0xd8, 0x7, 0xfffffffd, 0x8, 0x7, 0x7, 0x6, 0x3, 0x2b9, 0x9490, 0x6ec9, 0x8, 0x9, 0x80000001, 0xfff, 0x6, 0x7, 0x7f, 0x0, 0x6, 0x2, 0x3, 0x10000, 0x9, 0x3, 0x101, 0x4, 0x7ff, 0xfff, 0x9, 0x1f, 0x2, 0x1a33, 0xfffffff8, 0x7079, 0x8, 0x9, 0x8, 0x8000, 0xfff, 0x10000, 0x20, 0x4, 0x6, 0x2, 0x8, 0x35, 0x9, 0x39f0000, 0xffff, 0x7, 0x100, 0x0, 0x4, 0x100, 0x1, 0x1ff, 0x1, 0x4, 0x8, 0x16, 0x7fffffff, 0x7fffffff, 0x7, 0xfff, 0x3, 0x10000, 0x0, 0x59, 0x8, 0x9, 0x10001, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x4f2c, 0x4, 0x8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x24ecce61, 0x1, 0xffffffff, 0x12, 0xdfae, {0x3, 0x0, 0x7, 0xff, 0x7, 0x5}, {0x2, 0x1, 0x0, 0x8, 0x5, 0x80000000}, 0x9, 0xe0, 0x101}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0xd40e, 0x9, 0x0, {0x3d, 0x0, 0x8, 0x401, 0x4}, {0xf2, 0x0, 0x200, 0x80, 0x5, 0x400}, 0x75db, 0x7, 0x401}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0xa0e1, 0x0, 0x8001, 0x5, 0x3, 0x5, 0x3, 0x0, 0x81, 0x0, 0x8, 0xfffffff8, 0x2, 0x9, 0x8, 0x601, 0x7, 0x9, 0x2, 0x80, 0x7, 0xffffff00, 0x7fff, 0x7fffffff, 0x0, 0x7, 0x7fff, 0x1, 0xffff, 0x1, 0xbb, 0xd8d4, 0x3, 0xb4e, 0xfffffff9, 0x40, 0x4, 0x8000, 0x3, 0xfff, 0xed, 0x3ff, 0x0, 0xce, 0x7, 0x9, 0x0, 0x80000000, 0xf547, 0xfffffff9, 0x5ea6, 0x5, 0xa6bc, 0x4, 0x20, 0x5, 0x9, 0x8001, 0xfffffff8, 0x6, 0x4a90, 0xff, 0x5, 0x1000, 0x3, 0xfffffffe, 0x4, 0x0, 0x9, 0x1f, 0x1000, 0x6, 0xd0, 0xac, 0x1, 0x1, 0x2, 0x19, 0x3f, 0x6, 0x64a8, 0x2, 0x2bc80000, 0x6, 0x0, 0x6, 0x100, 0x401, 0x7ff, 0x8, 0x4, 0x80, 0x4, 0xfff, 0x7ff, 0xfffffffe, 0x6, 0x7bf, 0x1, 0x0, 0x8, 0x5, 0x101, 0x80, 0x3f, 0x0, 0x0, 0x7, 0x5, 0x0, 0x2, 0x80, 0x1, 0x9, 0x3f00, 0x1, 0x9, 0x4, 0x2, 0x4, 0x1c, 0x8, 0x2, 0x7, 0xc0, 0x2, 0x8, 0x76c, 0xff, 0x8, 0x1ff, 0x80000001, 0x1, 0x6, 0x2, 0x3, 0xc80, 0x7f, 0x80, 0x9, 0x8, 0x7, 0xfff, 0x0, 0x6, 0x1, 0x3ff, 0x0, 0x2, 0x5, 0x6f, 0x7ff, 0x3c, 0x2, 0x269, 0x8, 0x8, 0x6, 0x101, 0x8, 0x7, 0x1, 0x3f, 0x4, 0x488, 0x6, 0x2, 0xce5a, 0x1, 0x2, 0xa882, 0x8, 0x81, 0x3, 0x4, 0x7f, 0x8405, 0x7, 0x1f, 0x1f, 0x4, 0xefa, 0x47, 0xffffffff, 0x7, 0x3, 0x9, 0x0, 0x7, 0x9618, 0x7, 0x4, 0xde2, 0x4, 0xff, 0x800, 0x80000000, 0xfffffff7, 0x1f, 0x2, 0x9, 0x8000, 0x2, 0x2cef65bd, 0x0, 0x8001, 0x3080, 0x4, 0x2, 0x8a8, 0x7, 0x7ff, 0x2, 0x5, 0x2, 0xffffffff, 0x9, 0x4, 0x2, 0xff, 0x8, 0x80000001, 0x27, 0xfc, 0x6914, 0x1, 0x2, 0x7, 0x0, 0x48000000, 0x3, 0x8, 0xba, 0x3f, 0x0, 0x4, 0xd82a, 0xfe7, 0x9, 0x1, 0x1, 0x100, 0x7, 0x5, 0x3, 0x0, 0x8, 0x1000, 0x3, 0x7, 0x74de, 0x5, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4c, 0x1, [@m_ife={0x48, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x5}}}}]}]}, 0x1ee8}}, 0x45000) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r7, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) 16:39:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x45}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x3, 0xffe0}, {0x5, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x1) r6 = memfd_secret(0x80000) (async) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0x4}, @jmp={0x5, 0x1, 0x6, 0x0, 0x3, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0xd, 0x5, 0x5, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}]}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x6, 0x8, 0x6}, 0x10}, 0x80) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000300)=""/50, 0xcb, 0x32}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x3, 0x20a, 0x0, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, r9, 0x3, 0x0, 0x3, 0xa}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0xb, 0x0, 0xff, 0x3f, 0x28, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) (async) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000d40)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1a, 0x2, &(0x7f00000015c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}], &(0x7f0000001680)='GPL\x00', 0x6, 0xd0, &(0x7f00000016c0)=""/208, 0x41000, 0x15, '\x00', r8, 0x12, r9, 0x8, &(0x7f00000017c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x5, 0xb, 0x61, 0xffffff7f}, 0x10, 0x0, r10, 0x0, &(0x7f00000018c0)=[r7, r7, r11, r7, r12, r7, r7, r7]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@newchain={0x2c, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc}, {0xffff, 0x8}, {0xffe0, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1c, 0x7ff, 0x1, 0x1d, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, r14, 0x0, 0x3, 0x1}, 0x48) r15 = creat(&(0x7f0000000180)='./file0\x00', 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x3, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x6, 0xb, 0x4, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x2, 0x2, 0x7, 0x6, 0x2}], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, &(0x7f00000000c0), 0x41100, 0x4, '\x00', 0x0, 0x7, r6, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xf, 0x2, 0x3ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000001c0)=[r15]}, 0x80) [ 169.129371][ T6855] loop2: detected capacity change from 0 to 2048 [ 169.147909][ T6858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6858 comm=syz-executor.0 [ 169.194036][ T6865] FAULT_INJECTION: forcing a failure. [ 169.194036][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 169.206844][ T6865] CPU: 1 PID: 6865 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 169.217309][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 169.227432][ T6865] Call Trace: [ 169.230739][ T6865] [ 169.233697][ T6865] dump_stack_lvl+0xda/0x130 [ 169.238520][ T6865] dump_stack+0x15/0x20 [ 169.242710][ T6865] should_fail_ex+0x21f/0x230 [ 169.247455][ T6865] ? alloc_pipe_info+0x1ca/0x360 [ 169.252473][ T6865] __should_failslab+0x92/0xa0 [ 169.257252][ T6865] should_failslab+0x9/0x20 [ 169.261808][ T6865] slab_pre_alloc_hook+0x38/0x180 [ 169.266866][ T6865] ? alloc_pipe_info+0x1ca/0x360 [ 169.271869][ T6865] ? alloc_pipe_info+0x1ca/0x360 [ 169.276841][ T6865] __kmem_cache_alloc_node+0x48/0x1d0 [ 169.282254][ T6865] ? alloc_pipe_info+0x1ca/0x360 [ 169.287285][ T6865] __kmalloc+0x95/0x1a0 [ 169.291476][ T6865] ? kmalloc_trace+0x2a/0xa0 [ 169.296140][ T6865] alloc_pipe_info+0x1ca/0x360 [ 169.300954][ T6865] splice_direct_to_actor+0x636/0x690 [ 169.306456][ T6865] ? fsnotify_perm+0x58/0x3b0 [ 169.311193][ T6865] ? direct_file_splice_eof+0x70/0x70 [ 169.316735][ T6865] ? security_file_permission+0x5a/0x70 [ 169.322416][ T6865] do_splice_direct+0x10d/0x190 [ 169.327320][ T6865] ? do_splice_direct+0x190/0x190 [ 169.332370][ T6865] do_sendfile+0x3b6/0x9a0 [ 169.336893][ T6865] __x64_sys_sendfile64+0x110/0x150 [ 169.342133][ T6865] do_syscall_64+0x41/0xc0 [ 169.346576][ T6865] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.352544][ T6865] RIP: 0033:0x7fa29008fb29 [ 169.357068][ T6865] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 169.376717][ T6865] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.385311][ T6865] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 169.393400][ T6865] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 169.401379][ T6865] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 169.409399][ T6865] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 169.417529][ T6865] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 169.425586][ T6865] 16:39:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 3) 16:39:35 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffff04, 0x303080) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x45}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffe0}, {0x3, 0xffe0}, {0x5, 0x7}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x1) (async) r6 = memfd_secret(0x80000) (async) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x3}, @map_fd={0x18, 0x4}, @jmp={0x5, 0x1, 0x6, 0x0, 0x3, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0xd, 0x5, 0x5, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}]}, &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x6, 0x8, 0x6}, 0x10}, 0x80) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000300)=""/50, 0xcb, 0x32}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x3, 0x20a, 0x0, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, r9, 0x3, 0x0, 0x3, 0xa}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0xb, 0x0, 0xff, 0x3f, 0x28, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) (async) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000d40)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1a, 0x2, &(0x7f00000015c0)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}], &(0x7f0000001680)='GPL\x00', 0x6, 0xd0, &(0x7f00000016c0)=""/208, 0x41000, 0x15, '\x00', r8, 0x12, r9, 0x8, &(0x7f00000017c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x5, 0xb, 0x61, 0xffffff7f}, 0x10, 0x0, r10, 0x0, &(0x7f00000018c0)=[r7, r7, r11, r7, r12, r7, r7, r7]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@newchain={0x2c, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc}, {0xffff, 0x8}, {0xffe0, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1c, 0x7ff, 0x1, 0x1d, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, r14, 0x0, 0x3, 0x1}, 0x48) (async) r15 = creat(&(0x7f0000000180)='./file0\x00', 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x3, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x6, 0xb, 0x4, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x2, 0x2, 0x7, 0x6, 0x2}], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, &(0x7f00000000c0), 0x41100, 0x4, '\x00', 0x0, 0x7, r6, 0x8, &(0x7f0000000100)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xf, 0x2, 0x3ff}, 0x10, 0x0, r0, 0x0, &(0x7f00000001c0)=[r15]}, 0x80) 16:39:35 executing program 0: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x3f, 0xe0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1, 0x0, 0x577b}, r1, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000001580)='svcsock_marker\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002980)={0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="dc0000e0ffffffffff0000000008000100736671004c0002a05900"/97], 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000280)=""/94, 0x5e}], 0x2, 0x200, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x7a05, 0x1700) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40086602, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 16:39:35 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) ftruncate(r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x3}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x400, 0x5, 0x7ff, 0x2c9b, 0xc9d1}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x400, 0x5, 0x7ff, 0x2c9b, 0xc9d1}) write(r0, &(0x7f00000000c0)="90", 0x1) (async) write(r0, &(0x7f00000000c0)="90", 0x1) 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) [ 169.548161][ T6855] syz-executor.2: attempt to access beyond end of device [ 169.548161][ T6855] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 16:39:35 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffff04, 0x303080) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffff04, 0x303080) (async) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) 16:39:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=r0, @ANYBLOB="0002000000000000"], 0x20}}, 0x800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x7, 0x20, 0x0, 0x917}, {0xfffa, 0x20, 0xac, 0x7fff}, {0x101, 0x8, 0x2, 0x8000}, {0xa43b, 0x4, 0x0, 0x8000}]}, 0x10) [ 169.589096][ T6884] __nla_validate_parse: 40 callbacks suppressed [ 169.589112][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.589269][ T26] audit: type=1400 audit(1690648775.219:267): avc: denied { create } for pid=6878 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 16:39:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0xa, 0x300) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=r0, @ANYBLOB="0002000000000000"], 0x20}}, 0x800) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x7, 0x20, 0x0, 0x917}, {0xfffa, 0x20, 0xac, 0x7fff}, {0x101, 0x8, 0x2, 0x8000}, {0xa43b, 0x4, 0x0, 0x8000}]}, 0x10) 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) [ 169.684438][ T6897] loop2: detected capacity change from 0 to 2048 16:39:35 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffff04, 0x303080) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 169.725928][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.734313][ T26] audit: type=1400 audit(1690648775.309:268): avc: denied { write } for pid=6898 comm="syz-executor.3" name="pfkey" dev="proc" ino=4026532600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 169.770745][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.775530][ T6919] FAULT_INJECTION: forcing a failure. [ 169.775530][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 169.792757][ T6919] CPU: 0 PID: 6919 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 169.803124][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 169.813276][ T6919] Call Trace: [ 169.816574][ T6919] 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 169.817789][ T6895] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.819534][ T6919] dump_stack_lvl+0xda/0x130 [ 169.819570][ T6919] dump_stack+0x15/0x20 [ 169.819593][ T6919] should_fail_ex+0x21f/0x230 [ 169.819613][ T6919] ? copy_splice_read+0xc7/0x4b0 [ 169.847421][ T6919] __should_failslab+0x92/0xa0 [ 169.852266][ T6919] should_failslab+0x9/0x20 [ 169.861413][ T6919] slab_pre_alloc_hook+0x38/0x180 [ 169.866490][ T6919] ? copy_splice_read+0xc7/0x4b0 [ 169.871546][ T6919] ? copy_splice_read+0xc7/0x4b0 [ 169.876623][ T6919] __kmem_cache_alloc_node+0x48/0x1d0 [ 169.882167][ T6919] ? copy_splice_read+0xc7/0x4b0 [ 169.887149][ T6919] __kmalloc+0x95/0x1a0 [ 169.891336][ T6919] copy_splice_read+0xc7/0x4b0 [ 169.896160][ T6919] ? avc_policy_seqno+0x15/0x20 [ 169.901041][ T6919] ? selinux_file_permission+0x225/0x350 [ 169.906713][ T6919] ? splice_folio_into_pipe+0x290/0x290 [ 169.912345][ T6919] splice_direct_to_actor+0x2aa/0x690 [ 169.917768][ T6919] ? direct_file_splice_eof+0x70/0x70 [ 169.923254][ T6919] ? security_file_permission+0x5a/0x70 [ 169.928843][ T6919] do_splice_direct+0x10d/0x190 [ 169.933737][ T6919] ? do_splice_direct+0x190/0x190 [ 169.938888][ T6919] do_sendfile+0x3b6/0x9a0 [ 169.943333][ T6919] __x64_sys_sendfile64+0x110/0x150 [ 169.948823][ T6919] do_syscall_64+0x41/0xc0 [ 169.953280][ T6919] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 169.959218][ T6919] RIP: 0033:0x7fa29008fb29 [ 169.963720][ T6919] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 169.983457][ T6919] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.991903][ T6919] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 169.999906][ T6919] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 170.007909][ T6919] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 170.015926][ T6919] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 170.023986][ T6919] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 170.031985][ T6919] 16:39:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 4) 16:39:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=r0, @ANYBLOB="0002000000000000"], 0x20}}, 0x800) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=r0, @ANYBLOB="0002000000000000"], 0x20}}, 0x800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x7, 0x20, 0x0, 0x917}, {0xfffa, 0x20, 0xac, 0x7fff}, {0x101, 0x8, 0x2, 0x8000}, {0xa43b, 0x4, 0x0, 0x8000}]}, 0x10) 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000340)=0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$FS_IOC_FSGETXATTR(r0, 0x6611, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x1}, @ldst={0x2, 0x3, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) 16:39:35 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="e3132523ef2e01fddf1155ca0509cbd3b51c70db4e3a65f1a5c7a5df2570b005a730754ebed071280070c12e871f53386eb78676012753e8d03344a37c30e64fdb8cf84c17aed602e92d6d0e0c4adeb804515b4d95714471a7711e6a495164d0c808bd4a7431dcffc3ac0068a39c51c412ab708d67c405ebed8cacee24dffd2ef801226466c5c921bcd10ade9c58192537b0e24f41ffa781", 0x98}, {&(0x7f0000000140)="ed4a329b46cfca3a70dbb8e4df35d520abfa728d5d55c01f369a64", 0x1b}, {&(0x7f00000004c0)="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", 0x1000}], 0x3, &(0x7f00000014c0)="bbef4420f2f57d7f1bb4344254125b1c34174af7bfa45aabef3296e5f6351edb2a3a34c2d33c66021cc6fe8a17224a4d96c4fd7d6764824926e6cb8e2618a9fa24969a87e9", 0x45, 0x4000}, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001800)="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", 0x1000}], 0x1, &(0x7f0000000280)="d1b5d0e9e9c2439bc77063f49eaf0662eef5173de25ac9a190fd27ab881627504f385b9afa936fbf293384d6abddfe08456944716df93d5ead3839b249309420b6c4fb3768ee35dc776539027606fa26ad6ade386fb2b0465e282df8dcabc90dbe8779f577330a23473203d14b539406faece78b13071030bb2cab153a0abe8837f7e1a0f824eb5526b2ce", 0x8b}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x3}}, 0x10) 16:39:35 executing program 0: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x3f, 0xe0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1, 0x0, 0x577b}, r1, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000001580)='svcsock_marker\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002980)={0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="dc0000e0ffffffffff0000000008000100736671004c0002a05900"/97], 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000280)=""/94, 0x5e}], 0x2, 0x200, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x7a05, 0x1700) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40086602, &(0x7f0000000180)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 16:39:35 executing program 0: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x3f, 0xe0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x1, 0x0, 0x577b}, r1, 0x0, 0xffffffffffffffff, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000001580)='svcsock_marker\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002980)={0xffffffffffffffff}, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="dc0000e0ffffffffff0000000008000100736671004c0002a05900"/97], 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000280)=""/94, 0x5e}], 0x2, 0x200, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x7a05, 0x1700) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r9, 0x4) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40086602, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x64}}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@resgid}, {@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x12, 0x4c4, &(0x7f00000035c0)="$eJzs3c9vFNcdAPDvzHqpAdM1bQ8UqRQVKoNa1jYWYPUAVKrKCaktvVPXXluW16zlXX7YQpVR/4BKVdVW6qmnXirlD4gU8SdEkZCSe5SgRFECySGHJBvtepaAs+sfwfYg+/ORhnnvzc58vw+0s/NmHrsB7FsnI+JqRBQi4mxElLL2NFuutSorq697+uT+ZGtptd/4OIkka+scK8nWh1d3if6I+MO1iD8n345bX1qem6hWK4tZfbgxvzBcX1o+Nzs/MVOZqdwaGxu9OH5p/ML4yLb0czAiLv/m8T//9r/fXn7jl3ffvfnhmb+00hrItj/fj/U0S1uLu9r1YvvvoqMvIha3dphXViFbF3POAwCAzWldy/8gIn7Wvv4vRaF9dQoAAADsJc0rA/FFEtEEAAAA9qy0PQc2ScvZXICBSNNyeXUO74/iUFqt1Ru/mK7dvjW1Old2MIrp9Gy1MpLNFR6MYtKqj2ZzbDv182vqhYg4GhH/KB1s18uTtepU3jc/AAAAYJ84vGb8/1npSt4pAQAAADthMO8EAAAAgB1n/A8AAAB7n/E/AAAA7Gm/u369tTQ7v389dWfp9lztzrmpSn2uPH97sjxZW1woz9RqM+3v7Jvf6HjVWm3hQFauN4brS8s352vNQuPm7As/gQ0AAADsoqM/ffhOEhErvzrYXloO5J0UsCuSrbz4/Z3LA9h9hbwTAHLTl3cCQG6KeScA5G6j+wA9J++82aXNoAIAAF5JQz/u/fzfvQHY29K8EwAAdp3n/7B/FT2sg33v+xts39Lz/66azS0lBAAAbLuB9pKk5exZ4ECkabkccaT9swDFZHq2WhnJxgdvl4rfa9VH23smW/u/wwAAAAAAAAAAAAAAAAAAAAAAAACwjzWbSTQBAACAPS0i/SBpf5t/xFDp9MDa+wMHks9L7XVE3P3PjX/dm2g0Fkdb7Z88a2/8O2s/n8cdDAAAAGCtzji9M44HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO309Mn9yc6ym3E/+nVEDHaL3xf97XV/FCPi0KdJ9D23XxIRhW2Iv/IgIo51i5+00orBLItu8Q/mGD+NiMPbEB/2s4et88/Vbu+/NE62193ff33Z8rJ6n//SZ+e/Qo/zz5FNxjj+6LXhnvEfRBzv637+6cRPesQ/tcn4f/rj8nKvbc3/Rgx1/fxJXog13JhfGK4vLZ+bnZ+YqcxUbo2NjV4cvzR+YXxkeHq2Wsn+7Brj7z95/av1+n+oR/zBDfp/epP9//LRvSc/XC0Wu8U/c6r75++xHvHT7LPv51m5tX2oU15ZLT/vxP/fOrFe/6d69H+jf/8zm+z/2d//9b1NvhQA2AX1peW5iWq1svidC4/jpXbfqNAfO3VkBQWFnoW8z0wAAMB2++aiP+9MAAAAAAAAAAAAAAAAAAAAYP/aja8TWxtzJZ+uAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs6+sAAAD///XX0H0=") chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x0, 0x5}, {0xf, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) creat(&(0x7f0000000080)='./file1\x00', 0x0) [ 170.152002][ T6897] syz-executor.2: attempt to access beyond end of device [ 170.152002][ T6897] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 170.191242][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:35 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async, rerun: 32) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000340)=0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async, rerun: 32) ioctl$FS_IOC_FSGETXATTR(r0, 0x6611, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x1}, @ldst={0x2, 0x3, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) 16:39:35 executing program 0: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 16:39:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 170.233637][ T6933] tipc: Can't bind to reserved service type 0 [ 170.268697][ T6956] loop3: detected capacity change from 0 to 512 16:39:35 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="e3132523ef2e01fddf1155ca0509cbd3b51c70db4e3a65f1a5c7a5df2570b005a730754ebed071280070c12e871f53386eb78676012753e8d03344a37c30e64fdb8cf84c17aed602e92d6d0e0c4adeb804515b4d95714471a7711e6a495164d0c808bd4a7431dcffc3ac0068a39c51c412ab708d67c405ebed8cacee24dffd2ef801226466c5c921bcd10ade9c58192537b0e24f41ffa781", 0x98}, {&(0x7f0000000140)="ed4a329b46cfca3a70dbb8e4df35d520abfa728d5d55c01f369a64", 0x1b}, {&(0x7f00000004c0)="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", 0x1000}], 0x3, &(0x7f00000014c0)="bbef4420f2f57d7f1bb4344254125b1c34174af7bfa45aabef3296e5f6351edb2a3a34c2d33c66021cc6fe8a17224a4d96c4fd7d6764824926e6cb8e2618a9fa24969a87e9", 0x45, 0x4000}, 0x4) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x1, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001800)="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", 0x1000}], 0x1, &(0x7f0000000280)="d1b5d0e9e9c2439bc77063f49eaf0662eef5173de25ac9a190fd27ab881627504f385b9afa936fbf293384d6abddfe08456944716df93d5ead3839b249309420b6c4fb3768ee35dc776539027606fa26ad6ade386fb2b0465e282df8dcabc90dbe8779f577330a23473203d14b539406faece78b13071030bb2cab153a0abe8837f7e1a0f824eb5526b2ce", 0x8b}, 0x0) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) (async) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x3}}, 0x10) [ 170.288405][ T6944] loop2: detected capacity change from 0 to 2048 [ 170.298667][ T6956] EXT4-fs: Ignoring removed orlov option [ 170.343254][ T6956] EXT4-fs (loop3): 1 orphan inode deleted [ 170.349090][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.354745][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.371505][ T6956] ext4 filesystem being mounted at /root/syzkaller-testdir2940862597/syzkaller.2wtT6m/163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.398424][ T6972] FAULT_INJECTION: forcing a failure. [ 170.398424][ T6972] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 170.411798][ T6972] CPU: 1 PID: 6972 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 170.422166][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 170.432286][ T6972] Call Trace: [ 170.435641][ T6972] [ 170.438592][ T6972] dump_stack_lvl+0xda/0x130 [ 170.443218][ T6972] dump_stack+0x15/0x20 [ 170.447414][ T6972] should_fail_ex+0x21f/0x230 [ 170.452130][ T6972] __should_fail_alloc_page+0xfd/0x110 [ 170.457632][ T6972] __alloc_pages_bulk+0x106/0x6b0 [ 170.462744][ T6972] ? __kmalloc+0x95/0x1a0 [ 170.467110][ T6972] copy_splice_read+0xfa/0x4b0 [ 170.471969][ T6972] ? selinux_file_permission+0x225/0x350 [ 170.477670][ T6972] ? splice_folio_into_pipe+0x290/0x290 [ 170.483323][ T6972] splice_direct_to_actor+0x2aa/0x690 [ 170.488821][ T6972] ? direct_file_splice_eof+0x70/0x70 [ 170.494590][ T6972] ? security_file_permission+0x5a/0x70 [ 170.500256][ T6972] do_splice_direct+0x10d/0x190 [ 170.505218][ T6972] ? do_splice_direct+0x190/0x190 [ 170.510292][ T6972] do_sendfile+0x3b6/0x9a0 [ 170.510352][ T6944] syz-executor.2: attempt to access beyond end of device [ 170.510352][ T6944] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 170.514773][ T6972] __x64_sys_sendfile64+0x110/0x150 [ 170.534092][ T6972] do_syscall_64+0x41/0xc0 [ 170.538537][ T6972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 170.544537][ T6972] RIP: 0033:0x7fa29008fb29 [ 170.548957][ T6972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 170.568661][ T6972] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 170.577095][ T6972] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 170.585097][ T6972] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 16:39:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 5) 16:39:36 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000001540)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff61e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015ed22c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000340)=0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x6611, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x1}, @ldst={0x2, 0x3, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6d}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:36 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 16:39:36 executing program 1: socket$tipc(0x1e, 0x1, 0x0) (async) r0 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="e3132523ef2e01fddf1155ca0509cbd3b51c70db4e3a65f1a5c7a5df2570b005a730754ebed071280070c12e871f53386eb78676012753e8d03344a37c30e64fdb8cf84c17aed602e92d6d0e0c4adeb804515b4d95714471a7711e6a495164d0c808bd4a7431dcffc3ac0068a39c51c412ab708d67c405ebed8cacee24dffd2ef801226466c5c921bcd10ade9c58192537b0e24f41ffa781", 0x98}, {&(0x7f0000000140)="ed4a329b46cfca3a70dbb8e4df35d520abfa728d5d55c01f369a64", 0x1b}, {&(0x7f00000004c0)="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", 0x1000}], 0x3, &(0x7f00000014c0)="bbef4420f2f57d7f1bb4344254125b1c34174af7bfa45aabef3296e5f6351edb2a3a34c2d33c66021cc6fe8a17224a4d96c4fd7d6764824926e6cb8e2618a9fa24969a87e9", 0x45, 0x4000}, 0x4) (async) sendmsg$tipc(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="e3132523ef2e01fddf1155ca0509cbd3b51c70db4e3a65f1a5c7a5df2570b005a730754ebed071280070c12e871f53386eb78676012753e8d03344a37c30e64fdb8cf84c17aed602e92d6d0e0c4adeb804515b4d95714471a7711e6a495164d0c808bd4a7431dcffc3ac0068a39c51c412ab708d67c405ebed8cacee24dffd2ef801226466c5c921bcd10ade9c58192537b0e24f41ffa781", 0x98}, {&(0x7f0000000140)="ed4a329b46cfca3a70dbb8e4df35d520abfa728d5d55c01f369a64", 0x1b}, {&(0x7f00000004c0)="535abb0613bca24c25f9a550f2f39ee25f563fd65755bfaf4e763398b927ff8ddbb2a3e593eb26a6f1f77b560af1be9d8b2034ab0352656888c420c27ede6d363923c8cfe32011d69347c11d305c884a8cab13361e2da0c83eb57b55da13dc03ae0b14766061b6fb155e8dfdd3b877fc17d0c10f4a56daedde3012bbba5b5dba8038b69fb6c097b6b6553e9378d8ef11aebe16584c1acf111e28c0bc7aa374b1ef8f5c032387c012cef2ec4bbd1ccd88cec16da3a4eb5f6437c8e67df80787ddc1b545d1e80ebebe4f0a1dc5a1774f1c82ac63b21f16661c2dde99c99fc74028b6f8b7497b9089d8e8f740786ff7832d5d96da75c428127ad9ed81a2de8a2f32c9db1a98e2fda06565f0db634679317e24dc92b2e8b3b4c6387a1f571ffc599aec79c96c2b11de074413fd05c5b8abebaf62d8b5649836785be0dbe4ec974f60c11e335a259504f02c715f931db8ea449e50dc26bb761c70e74da3531f1450caab87be1cd093361a55a2675dc22ec66db2d6257518d5a0ce47b3d66b80cd3c6fb79f3c3ae38d6268f0448fb1ee23edb1735d883a1c8adb2701faef91c64b4fb2c6ec85ebc8e5fee3374117eebd77828507ba9465cff63ddd82aa4126b0aec1942dade6de54aa938fda8687b7ef2108f89eef3d6524217c7645c60b451889478361252994996ff1f21579f6489fa2b16d95c40401273495da34358db1bde19ef54bc8e02cd995f01b382362b27ede4ddc32327fb7e9a7104bd5f2589f693167bd2b130071b017abb6e89ce1e42140b82ba5cb15218550498fe99355fcac474d34079dac0a50ab6701b2cbbb93c9cccc25806d18a5e783eac510630cc38a921e3d9f5957f0e25ec3416a8c9e9647bdf7b021ea5d16718f428591883a2085c1bba21f55bbb9613f7c91c5c20ae05d3f6ac790ec4b408d49f6ea2c10070e905b5a26d43b2d6b5b2d606e6ec3181fee4f95db5dd923a41869ad3d98b396f2019a7b30911b30f5c785f2523b10a714df28abd965eebc31342e9871bfed4141124cdc8930558ef326bcd833cc8359841d089bf641777e75ae6980101bd53671eb1454a0fcf1c82789e84663cd20814ace8a696db6b86c841738f928e31fa15bba06bb0e91780368c5a8655f55f3b7f916b84de96a8ec520881634d995826681ac61696f235d1491b20f2932872a0cc4f33074aacbe2127133632641ef336e9a1ef9fe96019b06fba287e84fb5ebc6523dbb114319320c3fa39724fbbc89e4bd92a058e429ea568828509786998e8d00d931ac6a04f80a205297b7d771a0a7f778ad9f2ce5c34670d5923a225c8ca425c67aa0f876b162e8e2779e47bb121737343e1a40621cf5f3374f8302dfff105820c8072e07b79049ca67543906127b28e11b986379a129a0be969789b64f9e306500fd4fe6b98fab7d01e3d92ebc1420cf6cba61e2c762465bad4cb85233c3f4e96e9a5b5a9157971ec6c5c90e0e4631f9901f961b9d97c02faac8d4ae6ad6907cc3fe59fecfdd2889411faa266138d0835e3bae0f93225e8f7a0949538bca06235dcffe34285e3bc547ea5d6815dbc9a59225bf73ab0eec06237e5e6551e6ec786cd531c88052efa2b3d3be420d8b2f83a4793c561aa4bc574f4d0d989d6e06fe4bccfeaf3e0cdcd971e0811aee8b3a472665b307b0025bccba996aa32d3470c345d22099fe682ef3c0574a85684f2fb7e4b84052cda14446a5b908d45aa85ef52bee3b2ac03267837ad5158b1a1f951adc6a2783c370f28846f81afc11f3d8674ce3284fc4e1b6eab481c39abd5d2f8cbf26d18a1324ebd9de6f529d46db026f6448173b056b7baf08eae46be926c58e649f2b768b871e1d101901dab523265aa4698585d8cecbefc71b88c1f0ace9dd584c2faf8dc203e46174eb2e80e655d81e547d268e09d1c7108a241f89fdb61a77fecbf0fc4fe8230cabb77de95faa540effdc78e0302525004b627d06aca1f3337b67a9cce91898081329b1f907a1e8d18ee3cb1c3b2cd28b29e28ffe1e1b6767baf05bc3d0beeb02a367ab26b37f6abbd131951a2235bef2fb889d12c75369c2dbd3bb9ffa0bb6dc100c364cba8deac928d2725f0d44db6ba17692b9183bff4e10172681495bb71b016ea4181af9c6c6466e1f8ee4c38a3f1e6abaa3086b860778c9ec9635b74924d6de4f3ee224aa2cb89d82ecfc076278262b65b47d104189a4ab3431f9a3ca330bcae47c41468d9593a7e207d4518671491f1356de0541f207e327af788c628651d1d8602011e9dba733e83f384004c83ba2a842a0b5c29280364488d4647e14c8dc58e37de625b4d2595d47946eaee8d5b9c6c41b583a73a51b7910a05fd0edd4facd54972864f28d793786f57259b8b2398beaca8aff24809e76ed7acba7dcd57c6e5a0442793766ef18baff9505d65f0b7c87f05812907b45dca30628593d5061d984ff3fbf3ff3a4540e8f9cbe899a521ac17b3e3264057eed171b64942978391301bf1686cb4cbf56325e22cc979c1c5d2f53611f2c794e1f22e9b07d23a9c298ef13ccb0582712c855c52878a06f5c469f6e9a08636d0b6b243143ac1c81fb850e12733c2fc5cf6b67987d1d9f4896e404115c22f8bc166a53f95c987f8b4530062f4551251b57a709666340e44aeb8f368facd110ad32470d2a121f731bd9e9844510190baabb3caf04846c69f933c67ea80c4bc4e049e4e466b17ec8e9b06fe9ea75fda4f92bf347db9027ec7595ea793d7581b0213c07f98ad9d4cea3e1b9713fa2a853a1a62c80bf42db3201f4066b111fb9770356eb68a222a1b18dddf5dc314467126cf4250cc92b29a59fce678525f2733aa79c713d2628a4d1b34c4c22636410c147d19a2843eef0bd0c0837321c277e41bba88327f04a2570ff474310aebe1df15d0f694157a8a278ab47d55f427d8e8c2be3b2c2607b0588ada6a8012c59633135e06a79690daf4d9213b49d4911c24c47ec51b5c250981f0decaffefdd8226966dba54f16849cb7ea46e93972b54ccaee07eedcc1af8717c29a2a715a3ad989ae301f43148d8a459e808e6794869abeb6deec3652ceb87733ddaf07c536a1de6bc351b936ec23c8e7fd064def2c68058721da6cd43e1778be4df60a8b275029e30a7b403a8ea210714c235a260235298ae62f01e43d56a30f59d8845236d48cd0609e7fd6510b776b54a210356bb80d2de504c66c9918fd9f6d23ffae89e401b3de2366b080e0570b3f3616ac6288905fbebe15f3ebcbc53a7a633c74955ee430d46282bcf620847c7ccf3368c14e99363ab36f6ab1e5f3d984ccd49f02bc82317ff2425f1f059fdbc867243f5ebd69af22f786defd362786a61573b4d0dd0f0b9e1eafd78ee7343b6b1b02601d059cb886fd8fff93a7467a8236fc06220d74ddb65cb305394ff7730939980c629d46941a545187c0a90b40248ea1dad0b65f8d224585b3706e000e17e2c163e82e5ef5d6164b15cf6cae0e180335934051835c2f2a40cf152261634d8385b75d38fd5b2a17a6525902bde95ad0696b400ddfe4c796338651a74fd7d5d880909dfab5d5b54505315519f527da3d8d863210b238202de05694868e9389e761742f3a063dbbd8ad40844f8438c5b076b955b62a378c3e7d58cf1dccba41e6745c2e0d613a1c3c05a55ea8ae6272580078d0d3ba8e5b477c9a935685c1410af1c6133c631fa2bc196b04f1b9eb27eacb88501f043a4a4b3b75cebb4230bed9329a321199b78fc50ff9fcffe77c7f7bcac07e0e63ab21c85538a10c538d4fe2797a95af39578f78bd2e0ac1fc9d1c0a66f16f93d227ff94bd5e360e3c1ff5c2d7b39d1dfe4bded708d54b8f7cecbd16df9a8651953a9a252ccfb28756f5f75275ebe00b408b4a0cecf0572ce5fc8dbfddc090e7e62d7b6e2b33dc9fa13e78c164f005fec4bed1fde9013ec9da2d87dd9db7327b6678266e7cf1541d01f22e282dbaee3897d3138c011e6e0c44dc89947388c4581e10b9fb123ce295c0d05c1fd778ee7e4110668e23bbaf722c2692c538aa30bbddc2d99c1256b0d5130205828d6c31dd00a09221b416b391f5f3e541b97bab14f04142086c994b5bfcf8223e972e11e17fc3f9603e264094f5bd93fb4ec7f816426d191182061a817c634bb2e48c0e17449d5e9132071e95e6d85a23827b3617e0b849d2d7dd34aa9cc505414ac5aed843f51e8572ba945e95e2346876a890ac299d6a8daf97bd80cbe708bf76fd9f220a1b382a24c076f801d92bf45898f854e8f6e8fe11253f4ea0ee3526cb405dd77c0181ccf5ecdde8e0c5cc199c35a6658be70456b059703ed7f20f494086e590703c8e72844b5e032c1af564bc6d0b7294c6fe545b1741d070915f0f4cd0c1c1b44928604d6c3ea07f1ba0c68a1886ce6308a79a147463ff4a01fe1356d6a5e6909307dece6870a6fdee409208c07ce31620ce7378489c42247fda46b5e8b5b252ab19f048f1e9d094c1a898f7ece43b180c0177b90d430c4e36a307587cd55a515fa91eb7e0aec8e4eebc4c2bb45fc9a6a0e5db2cc65da35728e24bea95b79a368275623ddbceed96c4afd0ca9ae5b3138e4059fa4176d78e54bb6702a8b92963b8627a87ac96a4fd4a62d380f50b02ce2ce38e62c6ccca8650bba46eed4731ab786fa52d1ce73cebbdf99b173bd430fe7b953e2a2bfb1908d587a4cc3952a4b16abf0c2bfce9ec2b9408efe3c7d77aca0b62bb4136d3b4f8236c6b4f9c794cfddfd2ea44b24426ccfe503dcfddb7a8ef30b753932a0cdfdef7dd05b68f164b8d3406909c523d3d2cd2de9cca88510b5eb70184d0228572982c176d4cf7f814b62aadd092e655e01eae144dcf7a41d4c20ca62c2c2b87aaa1f1e18010e66b264c7f9a253268806f32e0fcdcb28937b31c2afcbc7568b6c2cbe97149b95c925f6a39c199f1df5753973c699bc696a9a7dc788ae2fc8937cbe5b80246fedb7b64760cef7f7f3ad56b94224f092efbbffc967dcae581a22e130849fd465f8f0d50a02dbd1595805bb2a2e0743d20a50527eaf54b478261c78301f0fe4361c51318251d0007f9bf8990fc3d3dfe4c5ce57b411cf86fa3e97db5d334547fec83eae2950335867bb82fd48d2418c50348f06242e5dde4108401e41501241c7e2db433a970fcad407012eca4ab107a3b5cf5a232928bb7ea0c9114303c1b1f22af19c248ec2985d02e26b28c8e90d3db58698ddbb57f09e7d3b7c5727dbe601d903cf61dea6cf3996acb06c541b76b9897b5cf2ff319ae999668cb7131f452b2576fc8462408ca24e60eb3b00b7c790a353fa98039ac3ae18e217cd271821e847c48fc52f668d3d4e559cc8c8e50fa33e31794717883a88dc34724a23829a7860455105b3f9b81c52f6b1201c49628fbbf59b3f08609e9dbf224b3da842c5fd3d73f3ba960578823504f5e47b0c0c8de467926a66676fb496f9618e4b8a440a606854934a4967f1b3a8d7b003607d475f885b80e7991984d4882b52549c987b34a7a9cdbb28b0a01f7c1eca20e9d3b57525db3ae3eaf27d93b8a1bc22c4fdcb48d01a60cf29eb7b4d4f9bca9382bfee6fa2ae4ceaaa76bbca3e31ed6f9f9df6f54a4666cad9fc4bc2bfa83c3c2bb8e3dd5382b26d53eff1ea54aa9fea3476dfbafe343043584b501d7d3949d4fcdbedb0463cd8048a8d8ecaa58a6dfc779c8710249f6d42e093e21366f402ae6bf5299c6500b08f92295fe5b8ffabd6d0f61e19f0964140b9db6110d3379059e14dc30beb7723a57fc11ea7cf236fc720e4f858e1ec4ecb21f", 0x1000}], 0x3, &(0x7f00000014c0)="bbef4420f2f57d7f1bb4344254125b1c34174af7bfa45aabef3296e5f6351edb2a3a34c2d33c66021cc6fe8a17224a4d96c4fd7d6764824926e6cb8e2618a9fa24969a87e9", 0x45, 0x4000}, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001800)="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", 0x1000}], 0x1, &(0x7f0000000280)="d1b5d0e9e9c2439bc77063f49eaf0662eef5173de25ac9a190fd27ab881627504f385b9afa936fbf293384d6abddfe08456944716df93d5ead3839b249309420b6c4fb3768ee35dc776539027606fa26ad6ade386fb2b0465e282df8dcabc90dbe8779f577330a23473203d14b539406faece78b13071030bb2cab153a0abe8837f7e1a0f824eb5526b2ce", 0x8b}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x3}}, 0x10) 16:39:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x64}}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@resgid}, {@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x12, 0x4c4, &(0x7f00000035c0)="$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") (async) chdir(&(0x7f0000000000)='./file0\x00') (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x0, 0x5}, {0xf, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) (async, rerun: 64) creat(&(0x7f0000000080)='./file1\x00', 0x0) [ 170.593069][ T6972] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 170.601192][ T6972] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 170.609166][ T6972] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 170.617199][ T6972] [ 170.625092][ T3100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:36 executing program 0: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) fcntl$setsig(r0, 0xa, 0x13) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff4d, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) 16:39:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x64}}, {@sysvgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@resgid}, {@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x12, 0x4c4, &(0x7f00000035c0)="$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") (async) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x0, 0x5}, {0xf, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) creat(&(0x7f0000000080)='./file1\x00', 0x0) 16:39:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)=ANY=[@ANYBLOB="f9"], 0x1, 0x5e3, &(0x7f0000000600)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='ro\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r0}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x40, 0x86000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) [ 170.667205][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:36 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0xfffffffffffffdd0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x218, 0x218, 0xd0, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0x0, 0x0, 0xff], 'xfrm0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x2b, 0xac, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xffff00, 0xffffffff], 'team_slave_1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x88, 0x4, 0x4, 0x23}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0xfffeffff, 0x20], 0x1, 0x4, 0x2}}, @common=@hbh={{0x48}, {0xbfc5, 0x6, 0x1, [0x1, 0x2c88, 0x8, 0x6, 0xfff, 0xff7a, 0x40, 0x1ff, 0x8, 0x400, 0x9, 0x200, 0x8, 0xfffa, 0x0, 0xffff], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffff00], 'syz_tun\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x4, 0x10}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x6, 0x1], 0xe6, 0x10, 0x2, [@empty, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, @private1], 0x9}}, @common=@dst={{0x48}, {0x4ba47ef2, 0x5, 0x0, [0x3, 0x7f, 0x401, 0x20, 0xfa, 0x4, 0x2, 0x2, 0xa03, 0x0, 0x7ff, 0x6, 0x0, 0xff, 0xf066, 0x3f], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_getaddr={0x6c, 0x16, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1f, 0x10, 0x0, r12}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80000001}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xc000, 0x81}}, @IFA_FLAGS={0x8, 0x8, 0x213}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0x9}, {0xe, 0xc}, {0x7, 0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x32}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r7], 0x208e24b) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x20, 0x2, 0x25, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_key={0x5, 0x8, 0xc8, 0x0, "73988c17502e7c0eaa3f81f5b5c1215cd61b7d97f07630b6e0"}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_sec_ctx={0x1d, 0x18, 0xae, 0x3, 0xdc, "3ce95690e52644edd1b2676b2a4ea21437624f601a6f942122bbf985d58756ea89d8d598d0ea70d9e9faade3892d1127ccff39e4d22244ba120603e28c924083cede47c19659adaf821808894ca58912cc78018da8812b8b464ee5ab85d7a6c01cd4f6b50aad50c2d939fd85775a408cb4ecf9efe540369d04d547cc45bfb11b34e2b824e7423742840202a3bcbcb6be0053c3f45e7a9719778ec3d37080d787eb3170582718a21d2c918680802edefc5015de692ce8f87a7f696ee4e942d5e4e603040a78b881c81599cd4a8a4b44d0b6cac9c66ffd5296260152da"}]}, 0x128}}, 0x0) sendfile(r0, r1, 0x0, 0x8050) [ 170.733429][ T6992] loop2: detected capacity change from 0 to 2048 [ 170.734340][ T7000] loop5: detected capacity change from 0 to 1024 [ 170.763225][ T7000] ext4: Unknown parameter 'ů' [ 170.778382][ T7001] loop3: detected capacity change from 0 to 512 [ 170.792461][ T7001] EXT4-fs: Ignoring removed orlov option [ 170.808976][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.821654][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.822517][ T7001] EXT4-fs (loop3): 1 orphan inode deleted [ 170.831422][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.836730][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.862326][ T7010] FAULT_INJECTION: forcing a failure. [ 170.862326][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 170.873080][ T7001] ext4 filesystem being mounted at /root/syzkaller-testdir2940862597/syzkaller.2wtT6m/165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.875030][ T7010] CPU: 1 PID: 7010 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 170.900168][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 170.910296][ T7010] Call Trace: [ 170.913594][ T7010] [ 170.914754][ T7001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.916708][ T7010] dump_stack_lvl+0xda/0x130 [ 170.930292][ T7010] dump_stack+0x15/0x20 [ 170.934556][ T7010] should_fail_ex+0x21f/0x230 [ 170.939363][ T7010] __should_failslab+0x92/0xa0 [ 170.944155][ T7010] should_failslab+0x9/0x20 [ 170.948798][ T7010] slab_pre_alloc_hook+0x38/0x180 [ 170.953935][ T7010] kmem_cache_alloc+0x52/0x220 [ 170.958828][ T7010] ? __blockdev_direct_IO+0x138/0x1f80 [ 170.964323][ T7010] __blockdev_direct_IO+0x138/0x1f80 [ 170.969705][ T7010] ? fat_block_truncate_page+0x40/0x40 [ 170.975294][ T7010] ? filemap_get_folios_tag+0x1fd/0x230 [ 170.980911][ T7010] fat_direct_IO+0x110/0x1d0 [ 170.984293][ T6992] syz-executor.2: attempt to access beyond end of device [ 170.984293][ T6992] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 170.985565][ T7010] generic_file_read_iter+0x236/0x340 [ 171.005003][ T7010] copy_splice_read+0x26b/0x4b0 [ 171.009894][ T7010] ? splice_folio_into_pipe+0x290/0x290 [ 171.015528][ T7010] splice_direct_to_actor+0x2aa/0x690 [ 171.020923][ T7010] ? direct_file_splice_eof+0x70/0x70 [ 171.026315][ T7010] ? security_file_permission+0x5a/0x70 [ 171.031925][ T7010] do_splice_direct+0x10d/0x190 [ 171.036861][ T7010] ? do_splice_direct+0x190/0x190 [ 171.041956][ T7010] do_sendfile+0x3b6/0x9a0 [ 171.046384][ T7010] __x64_sys_sendfile64+0x110/0x150 [ 171.051599][ T7010] do_syscall_64+0x41/0xc0 [ 171.056054][ T7010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 171.062041][ T7010] RIP: 0033:0x7fa29008fb29 [ 171.066487][ T7010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 171.086535][ T7010] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 171.094966][ T7010] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 171.102945][ T7010] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 171.110926][ T7010] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 171.119011][ T7010] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 171.127093][ T7010] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 16:39:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 6) 16:39:36 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000080)="3cc664c5151ed0bc0b09b79c2c693f6837f60d87a54b9382845977b6423476a084eae15e4aa4c65d4785fccf94db43536d6b554fcb02e0325d77c3f5afb95dd5bd23746c88fa113d28b241b86246d27714308ce0c864302f755888c46e7397f2f338fe55467e27173d2f7a80627d5b4f5a27006566a2b3082e1457e8486bd289c484d9a90a735386a605800d8fc9f7") setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r5 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)=ANY=[@ANYBLOB="f9"], 0x1, 0x5e3, &(0x7f0000000600)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='ro\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='ro\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r0}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x40, 0x86000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) [ 171.135094][ T7010] 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:36 executing program 3: mkdir(&(0x7f00000006c0)='./file0\x00', 0x1f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f0000000440)=@sg0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='udf\x00', 0x2851020, &(0x7f00000018c0)='cgroup2\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001900), &(0x7f0000001a00)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001ac0)="3f25ae001974609c60c5656145c4d74938df80b4c7614cff4b0055", 0x1b}, {&(0x7f0000001e80)="e2be4a41a5557af1609848472ad9b5971af87e1a87e5cd5cfa69f187d472ee1f1f4e2848e2c87afe0a19bf1f34a7c1e26c5554adf9387bf18125104538918f6edcc0a67bcd221de1f8cce5950981e4646eaae0c209947b2d", 0x58}, {&(0x7f0000001f40)="260da8983003718729fdb0e1a0a0f51200a1db8e0df0eb8fd30545a54e5e3793421e47091ab3df7b69dd86e2b9d72b8248518160431ff36e5a1660e4d5a38db011452f03eccb0400ee73fe2f18c2a96387bc3f06ca9c8e8a64652366b49720b5c6400c36365f0c5d5172e6c53994649139770ee35b61b72613f231098cc50b5064ba8990bf173780d3784d6580f87b44e5281e0840bf07", 0x97}, {&(0x7f0000002000)="48cf1633ba441208d7c6777a4a286fd4b6005e4315cf65d28216748c5389328ff91420a721c7e4e2897021dba23d84616d916e13c633666b2a6e6aeabade3aa393cec572fe35d43120925edb0b557d940452b7b6185d66ce6530961eb245723969299124f5335766d50380f37bd9d914f87a3d9da0adaf0ecae7b917016036f6d2944ff09debb84b29b552dc13195bf4688eb3c997e6e79f68ee382dc7ee34ac44a257ea6d31860fe73921a208a43c3eccb41b465030635070a4732eb583a89b8d7993671d29", 0xc6}, {&(0x7f0000002100)="36fb6b7573c96b171293a2279911f43412ba1e39f1e4b5688fd2da5319885046a16c1cd3c3e8a7bb5ead28c93fba73c9f4c9b1843e05b3fa2127e37965c065e448676e03082f4c1b3a0d38e29402e1f592efd64155de767c0e823eb816bed5e0aaf2a86904001af3e9f321490e02ba727a", 0x71}, {&(0x7f0000002180)="7257549823f9a811c67775325b7b852ae08c3abd072f61d3c39a3677e469a814ebd6325b659fb60219b37caabe125468f3eac8b45b892a6c3d5d301c6d1e78719561bee25575a78f278221fde90608404a42ff71", 0x54}, {&(0x7f0000002200)="b0bd1f5f0c0b22a831c112946f5910d8dadc1e792ed6cbf8d342bb56ca259b23cf033a08f44ba8cc83cbaed1baf9add8dd763d0be8a1a8e5b6df81597c2d1988791eca8d817e26e7fa48790f116571cb366ab758fd4ec59a9aa2ce6a982267fe5c9b6a0ab18ac0608b", 0x69}, {&(0x7f0000002280)="8b90013bd8db85ea77b5bfcdb272b104e313e3d1460021ff6cafe4f5f9676e52b3d0d22eeda8d40e182bf1fb3492c8c53bb6a3e7d0f18ecdb83b0caace7df732247faffe72adc88b4a", 0x49}, {&(0x7f0000001b00)="9f27eba4ba181c74edf7ef967e731b", 0xf}], 0x9, &(0x7f0000004400)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r1, r1, 0xffffffffffffffff, r5]}}], 0x48, 0x8004001}}], 0x1, 0x20008080) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1, &(0x7f0000000640)=""/65, 0x41}, 0x5}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/15, 0xf}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000001940)=""/123, 0x7b}], 0x4, &(0x7f00000007c0)=""/212, 0xd4}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/235, 0xeb}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000003400)=""/4086, 0xff6}, {&(0x7f0000001c80)=""/59, 0x3b}], 0x5}, 0x1000}], 0x4, 0x2102, &(0x7f0000001f00)={0x0, 0x989680}) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r8 = ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) sync() sync() 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:36 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000080)="3cc664c5151ed0bc0b09b79c2c693f6837f60d87a54b9382845977b6423476a084eae15e4aa4c65d4785fccf94db43536d6b554fcb02e0325d77c3f5afb95dd5bd23746c88fa113d28b241b86246d27714308ce0c864302f755888c46e7397f2f338fe55467e27173d2f7a80627d5b4f5a27006566a2b3082e1457e8486bd289c484d9a90a735386a605800d8fc9f7") (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r5 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r5, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) [ 171.233042][ T7017] loop5: detected capacity change from 0 to 1024 [ 171.248093][ T26] audit: type=1400 audit(1690648776.879:269): avc: denied { remount } for pid=7023 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 171.249351][ T7017] ext4: Unknown parameter 'ů' 16:39:36 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000080)="3cc664c5151ed0bc0b09b79c2c693f6837f60d87a54b9382845977b6423476a084eae15e4aa4c65d4785fccf94db43536d6b554fcb02e0325d77c3f5afb95dd5bd23746c88fa113d28b241b86246d27714308ce0c864302f755888c46e7397f2f338fe55467e27173d2f7a80627d5b4f5a27006566a2b3082e1457e8486bd289c484d9a90a735386a605800d8fc9f7") setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r5 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000080)="3cc664c5151ed0bc0b09b79c2c693f6837f60d87a54b9382845977b6423476a084eae15e4aa4c65d4785fccf94db43536d6b554fcb02e0325d77c3f5afb95dd5bd23746c88fa113d28b241b86246d27714308ce0c864302f755888c46e7397f2f338fe55467e27173d2f7a80627d5b4f5a27006566a2b3082e1457e8486bd289c484d9a90a735386a605800d8fc9f7") (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r5, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) [ 171.391177][ T26] audit: type=1400 audit(1690648777.019:270): avc: denied { read } for pid=7023 comm="syz-executor.3" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.415949][ T26] audit: type=1400 audit(1690648777.019:271): avc: denied { open } for pid=7023 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.441061][ T26] audit: type=1400 audit(1690648777.019:272): avc: denied { ioctl } for pid=7023 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 16:39:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)=ANY=[@ANYBLOB="f9"], 0x1, 0x5e3, &(0x7f0000000600)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='ro\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r0}) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x40, 0x86000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 16:39:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) [ 171.723550][ T7028] loop2: detected capacity change from 0 to 2048 [ 171.786356][ T7063] loop5: detected capacity change from 0 to 1024 [ 171.803262][ T7063] ext4: Unknown parameter 'ů' 16:39:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 7) 16:39:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:37 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0xfffffffffffffdd0) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x218, 0x218, 0xd0, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0x0, 0x0, 0xff], 'xfrm0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x2b, 0xac, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xffff00, 0xffffffff], 'team_slave_1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x88, 0x4, 0x4, 0x23}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0xfffeffff, 0x20], 0x1, 0x4, 0x2}}, @common=@hbh={{0x48}, {0xbfc5, 0x6, 0x1, [0x1, 0x2c88, 0x8, 0x6, 0xfff, 0xff7a, 0x40, 0x1ff, 0x8, 0x400, 0x9, 0x200, 0x8, 0xfffa, 0x0, 0xffff], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffff00], 'syz_tun\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x4, 0x10}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x6, 0x1], 0xe6, 0x10, 0x2, [@empty, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, @private1], 0x9}}, @common=@dst={{0x48}, {0x4ba47ef2, 0x5, 0x0, [0x3, 0x7f, 0x401, 0x20, 0xfa, 0x4, 0x2, 0x2, 0xa03, 0x0, 0x7ff, 0x6, 0x0, 0xff, 0xf066, 0x3f], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_getaddr={0x6c, 0x16, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1f, 0x10, 0x0, r12}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80000001}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xc000, 0x81}}, @IFA_FLAGS={0x8, 0x8, 0x213}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0x9}, {0xe, 0xc}, {0x7, 0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x32}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r7], 0x208e24b) (async) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x20, 0x2, 0x25, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_key={0x5, 0x8, 0xc8, 0x0, "73988c17502e7c0eaa3f81f5b5c1215cd61b7d97f07630b6e0"}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_sec_ctx={0x1d, 0x18, 0xae, 0x3, 0xdc, "3ce95690e52644edd1b2676b2a4ea21437624f601a6f942122bbf985d58756ea89d8d598d0ea70d9e9faade3892d1127ccff39e4d22244ba120603e28c924083cede47c19659adaf821808894ca58912cc78018da8812b8b464ee5ab85d7a6c01cd4f6b50aad50c2d939fd85775a408cb4ecf9efe540369d04d547cc45bfb11b34e2b824e7423742840202a3bcbcb6be0053c3f45e7a9719778ec3d37080d787eb3170582718a21d2c918680802edefc5015de692ce8f87a7f696ee4e942d5e4e603040a78b881c81599cd4a8a4b44d0b6cac9c66ffd5296260152da"}]}, 0x128}}, 0x0) (async) sendfile(r0, r1, 0x0, 0x8050) 16:39:37 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x7d57, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 171.906138][ T7028] syz-executor.2: attempt to access beyond end of device [ 171.906138][ T7028] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 172.017394][ T7079] loop2: detected capacity change from 0 to 2048 16:39:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="1f1800280012800a00010076786c616e00000018000280140010d13f578aa9911281f7d5cbcdf61d66db5bcb486d5556d84d44ddc90413fa53521d7fb07f651447bcad1bb6773a56db53f9a1ba0d46a3ffb00d80b884545f53d517d4e3f5f04aa8acf95b5cc1f1dc05a029af3e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffb1, 0x0) 16:39:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:37 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0xfffffffffffffdd0) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x538, 0xffffffff, 0x218, 0x218, 0xd0, 0xffffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xff000000, 0xff, 0xff], [0xff, 0x0, 0x0, 0xff], 'xfrm0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x2b, 0xac, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xffff00, 0xffffffff], 'team_slave_1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x88, 0x4, 0x4, 0x23}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0xfffeffff, 0x20], 0x1, 0x4, 0x2}}, @common=@hbh={{0x48}, {0xbfc5, 0x6, 0x1, [0x1, 0x2c88, 0x8, 0x6, 0xfff, 0xff7a, 0x40, 0x1ff, 0x8, 0x400, 0x9, 0x200, 0x8, 0xfffa, 0x0, 0xffff], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffff00], 'syz_tun\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x4, 0x10}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x6, 0x1], 0xe6, 0x10, 0x2, [@empty, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, @private1], 0x9}}, @common=@dst={{0x48}, {0x4ba47ef2, 0x5, 0x0, [0x3, 0x7f, 0x401, 0x20, 0xfa, 0x4, 0x2, 0x2, 0xa03, 0x0, 0x7ff, 0x6, 0x0, 0xff, 0xf066, 0x3f], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_getaddr={0x6c, 0x16, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x1f, 0x10, 0x0, r12}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80000001}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xc000, 0x81}}, @IFA_FLAGS={0x8, 0x8, 0x213}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x40800) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0x9}, {0xe, 0xc}, {0x7, 0xfff2}}, [@filter_kind_options=@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x32}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r7], 0x208e24b) (async) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x20, 0x2, 0x25, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_key={0x5, 0x8, 0xc8, 0x0, "73988c17502e7c0eaa3f81f5b5c1215cd61b7d97f07630b6e0"}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_sec_ctx={0x1d, 0x18, 0xae, 0x3, 0xdc, "3ce95690e52644edd1b2676b2a4ea21437624f601a6f942122bbf985d58756ea89d8d598d0ea70d9e9faade3892d1127ccff39e4d22244ba120603e28c924083cede47c19659adaf821808894ca58912cc78018da8812b8b464ee5ab85d7a6c01cd4f6b50aad50c2d939fd85775a408cb4ecf9efe540369d04d547cc45bfb11b34e2b824e7423742840202a3bcbcb6be0053c3f45e7a9719778ec3d37080d787eb3170582718a21d2c918680802edefc5015de692ce8f87a7f696ee4e942d5e4e603040a78b881c81599cd4a8a4b44d0b6cac9c66ffd5296260152da"}]}, 0x128}}, 0x0) (async) sendfile(r0, r1, 0x0, 0x8050) 16:39:37 executing program 3: mkdir(&(0x7f00000006c0)='./file0\x00', 0x1f) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mount(&(0x7f0000000440)=@sg0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='udf\x00', 0x2851020, &(0x7f00000018c0)='cgroup2\x00') (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001900), &(0x7f0000001a00)=0xc) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = getpid() (rerun: 64) sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001ac0)="3f25ae001974609c60c5656145c4d74938df80b4c7614cff4b0055", 0x1b}, {&(0x7f0000001e80)="e2be4a41a5557af1609848472ad9b5971af87e1a87e5cd5cfa69f187d472ee1f1f4e2848e2c87afe0a19bf1f34a7c1e26c5554adf9387bf18125104538918f6edcc0a67bcd221de1f8cce5950981e4646eaae0c209947b2d", 0x58}, {&(0x7f0000001f40)="260da8983003718729fdb0e1a0a0f51200a1db8e0df0eb8fd30545a54e5e3793421e47091ab3df7b69dd86e2b9d72b8248518160431ff36e5a1660e4d5a38db011452f03eccb0400ee73fe2f18c2a96387bc3f06ca9c8e8a64652366b49720b5c6400c36365f0c5d5172e6c53994649139770ee35b61b72613f231098cc50b5064ba8990bf173780d3784d6580f87b44e5281e0840bf07", 0x97}, {&(0x7f0000002000)="48cf1633ba441208d7c6777a4a286fd4b6005e4315cf65d28216748c5389328ff91420a721c7e4e2897021dba23d84616d916e13c633666b2a6e6aeabade3aa393cec572fe35d43120925edb0b557d940452b7b6185d66ce6530961eb245723969299124f5335766d50380f37bd9d914f87a3d9da0adaf0ecae7b917016036f6d2944ff09debb84b29b552dc13195bf4688eb3c997e6e79f68ee382dc7ee34ac44a257ea6d31860fe73921a208a43c3eccb41b465030635070a4732eb583a89b8d7993671d29", 0xc6}, {&(0x7f0000002100)="36fb6b7573c96b171293a2279911f43412ba1e39f1e4b5688fd2da5319885046a16c1cd3c3e8a7bb5ead28c93fba73c9f4c9b1843e05b3fa2127e37965c065e448676e03082f4c1b3a0d38e29402e1f592efd64155de767c0e823eb816bed5e0aaf2a86904001af3e9f321490e02ba727a", 0x71}, {&(0x7f0000002180)="7257549823f9a811c67775325b7b852ae08c3abd072f61d3c39a3677e469a814ebd6325b659fb60219b37caabe125468f3eac8b45b892a6c3d5d301c6d1e78719561bee25575a78f278221fde90608404a42ff71", 0x54}, {&(0x7f0000002200)="b0bd1f5f0c0b22a831c112946f5910d8dadc1e792ed6cbf8d342bb56ca259b23cf033a08f44ba8cc83cbaed1baf9add8dd763d0be8a1a8e5b6df81597c2d1988791eca8d817e26e7fa48790f116571cb366ab758fd4ec59a9aa2ce6a982267fe5c9b6a0ab18ac0608b", 0x69}, {&(0x7f0000002280)="8b90013bd8db85ea77b5bfcdb272b104e313e3d1460021ff6cafe4f5f9676e52b3d0d22eeda8d40e182bf1fb3492c8c53bb6a3e7d0f18ecdb83b0caace7df732247faffe72adc88b4a", 0x49}, {&(0x7f0000001b00)="9f27eba4ba181c74edf7ef967e731b", 0xf}], 0x9, &(0x7f0000004400)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r1, r1, 0xffffffffffffffff, r5]}}], 0x48, 0x8004001}}], 0x1, 0x20008080) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1, &(0x7f0000000640)=""/65, 0x41}, 0x5}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/15, 0xf}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000001940)=""/123, 0x7b}], 0x4, &(0x7f00000007c0)=""/212, 0xd4}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/235, 0xeb}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000003400)=""/4086, 0xff6}, {&(0x7f0000001c80)=""/59, 0x3b}], 0x5}, 0x1000}], 0x4, 0x2102, &(0x7f0000001f00)={0x0, 0x989680}) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r8 = ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) (async) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) sync() (async) sync() 16:39:37 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x7d57, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:37 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x7d57, 0x4) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3}, 0x10) (async) r3 = socket$tipc(0x1e, 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:37 executing program 0: mkdir(&(0x7f00000006c0)='./file0\x00', 0x1f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f0000000440)=@sg0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='udf\x00', 0x2851020, &(0x7f00000018c0)='cgroup2\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001900), &(0x7f0000001a00)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001ac0)="3f25ae001974609c60c5656145c4d74938df80b4c7614cff4b0055", 0x1b}, {&(0x7f0000001e80)="e2be4a41a5557af1609848472ad9b5971af87e1a87e5cd5cfa69f187d472ee1f1f4e2848e2c87afe0a19bf1f34a7c1e26c5554adf9387bf18125104538918f6edcc0a67bcd221de1f8cce5950981e4646eaae0c209947b2d", 0x58}, {&(0x7f0000001f40)="260da8983003718729fdb0e1a0a0f51200a1db8e0df0eb8fd30545a54e5e3793421e47091ab3df7b69dd86e2b9d72b8248518160431ff36e5a1660e4d5a38db011452f03eccb0400ee73fe2f18c2a96387bc3f06ca9c8e8a64652366b49720b5c6400c36365f0c5d5172e6c53994649139770ee35b61b72613f231098cc50b5064ba8990bf173780d3784d6580f87b44e5281e0840bf07", 0x97}, {&(0x7f0000002000)="48cf1633ba441208d7c6777a4a286fd4b6005e4315cf65d28216748c5389328ff91420a721c7e4e2897021dba23d84616d916e13c633666b2a6e6aeabade3aa393cec572fe35d43120925edb0b557d940452b7b6185d66ce6530961eb245723969299124f5335766d50380f37bd9d914f87a3d9da0adaf0ecae7b917016036f6d2944ff09debb84b29b552dc13195bf4688eb3c997e6e79f68ee382dc7ee34ac44a257ea6d31860fe73921a208a43c3eccb41b465030635070a4732eb583a89b8d7993671d29", 0xc6}, {&(0x7f0000002100)="36fb6b7573c96b171293a2279911f43412ba1e39f1e4b5688fd2da5319885046a16c1cd3c3e8a7bb5ead28c93fba73c9f4c9b1843e05b3fa2127e37965c065e448676e03082f4c1b3a0d38e29402e1f592efd64155de767c0e823eb816bed5e0aaf2a86904001af3e9f321490e02ba727a", 0x71}, {&(0x7f0000002180)="7257549823f9a811c67775325b7b852ae08c3abd072f61d3c39a3677e469a814ebd6325b659fb60219b37caabe125468f3eac8b45b892a6c3d5d301c6d1e78719561bee25575a78f278221fde90608404a42ff71", 0x54}, {&(0x7f0000002200)="b0bd1f5f0c0b22a831c112946f5910d8dadc1e792ed6cbf8d342bb56ca259b23cf033a08f44ba8cc83cbaed1baf9add8dd763d0be8a1a8e5b6df81597c2d1988791eca8d817e26e7fa48790f116571cb366ab758fd4ec59a9aa2ce6a982267fe5c9b6a0ab18ac0608b", 0x69}, {&(0x7f0000002280)="8b90013bd8db85ea77b5bfcdb272b104e313e3d1460021ff6cafe4f5f9676e52b3d0d22eeda8d40e182bf1fb3492c8c53bb6a3e7d0f18ecdb83b0caace7df732247faffe72adc88b4a", 0x49}, {&(0x7f0000001b00)="9f27eba4ba181c74edf7ef967e731b", 0xf}], 0x9, &(0x7f0000004400)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r1, r1, 0xffffffffffffffff, r5]}}], 0x48, 0x8004001}}], 0x1, 0x20008080) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1, &(0x7f0000000640)=""/65, 0x41}, 0x5}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/15, 0xf}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000001940)=""/123, 0x7b}], 0x4, &(0x7f00000007c0)=""/212, 0xd4}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/235, 0xeb}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000003400)=""/4086, 0xff6}, {&(0x7f0000001c80)=""/59, 0x3b}], 0x5}, 0x1000}], 0x4, 0x2102, &(0x7f0000001f00)={0x0, 0x989680}) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r8 = ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) sync() sync() [ 172.227744][ T7079] syz-executor.2: attempt to access beyond end of device [ 172.227744][ T7079] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 8) 16:39:37 executing program 3: mkdir(&(0x7f00000006c0)='./file0\x00', 0x1f) (async) mkdir(&(0x7f00000006c0)='./file0\x00', 0x1f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(&(0x7f0000000440)=@sg0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='udf\x00', 0x2851020, &(0x7f00000018c0)='cgroup2\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001900), &(0x7f0000001a00)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001ac0)="3f25ae001974609c60c5656145c4d74938df80b4c7614cff4b0055", 0x1b}, {&(0x7f0000001e80)="e2be4a41a5557af1609848472ad9b5971af87e1a87e5cd5cfa69f187d472ee1f1f4e2848e2c87afe0a19bf1f34a7c1e26c5554adf9387bf18125104538918f6edcc0a67bcd221de1f8cce5950981e4646eaae0c209947b2d", 0x58}, {&(0x7f0000001f40)="260da8983003718729fdb0e1a0a0f51200a1db8e0df0eb8fd30545a54e5e3793421e47091ab3df7b69dd86e2b9d72b8248518160431ff36e5a1660e4d5a38db011452f03eccb0400ee73fe2f18c2a96387bc3f06ca9c8e8a64652366b49720b5c6400c36365f0c5d5172e6c53994649139770ee35b61b72613f231098cc50b5064ba8990bf173780d3784d6580f87b44e5281e0840bf07", 0x97}, {&(0x7f0000002000)="48cf1633ba441208d7c6777a4a286fd4b6005e4315cf65d28216748c5389328ff91420a721c7e4e2897021dba23d84616d916e13c633666b2a6e6aeabade3aa393cec572fe35d43120925edb0b557d940452b7b6185d66ce6530961eb245723969299124f5335766d50380f37bd9d914f87a3d9da0adaf0ecae7b917016036f6d2944ff09debb84b29b552dc13195bf4688eb3c997e6e79f68ee382dc7ee34ac44a257ea6d31860fe73921a208a43c3eccb41b465030635070a4732eb583a89b8d7993671d29", 0xc6}, {&(0x7f0000002100)="36fb6b7573c96b171293a2279911f43412ba1e39f1e4b5688fd2da5319885046a16c1cd3c3e8a7bb5ead28c93fba73c9f4c9b1843e05b3fa2127e37965c065e448676e03082f4c1b3a0d38e29402e1f592efd64155de767c0e823eb816bed5e0aaf2a86904001af3e9f321490e02ba727a", 0x71}, {&(0x7f0000002180)="7257549823f9a811c67775325b7b852ae08c3abd072f61d3c39a3677e469a814ebd6325b659fb60219b37caabe125468f3eac8b45b892a6c3d5d301c6d1e78719561bee25575a78f278221fde90608404a42ff71", 0x54}, {&(0x7f0000002200)="b0bd1f5f0c0b22a831c112946f5910d8dadc1e792ed6cbf8d342bb56ca259b23cf033a08f44ba8cc83cbaed1baf9add8dd763d0be8a1a8e5b6df81597c2d1988791eca8d817e26e7fa48790f116571cb366ab758fd4ec59a9aa2ce6a982267fe5c9b6a0ab18ac0608b", 0x69}, {&(0x7f0000002280)="8b90013bd8db85ea77b5bfcdb272b104e313e3d1460021ff6cafe4f5f9676e52b3d0d22eeda8d40e182bf1fb3492c8c53bb6a3e7d0f18ecdb83b0caace7df732247faffe72adc88b4a", 0x49}, {&(0x7f0000001b00)="9f27eba4ba181c74edf7ef967e731b", 0xf}], 0x9, &(0x7f0000004400)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r1, r1, 0xffffffffffffffff, r5]}}], 0x48, 0x8004001}}], 0x1, 0x20008080) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace(0x10, r6) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1, &(0x7f0000000640)=""/65, 0x41}, 0x5}, {{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/15, 0xf}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000001940)=""/123, 0x7b}], 0x4, &(0x7f00000007c0)=""/212, 0xd4}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/235, 0xeb}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000003400)=""/4086, 0xff6}, {&(0x7f0000001c80)=""/59, 0x3b}], 0x5}, 0x1000}], 0x4, 0x2102, &(0x7f0000001f00)={0x0, 0x989680}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r8 = ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) (async) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) r9 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) sync() (async) sync() sync() 16:39:37 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000240)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="174d846a0a32a368a6e8ad1bff97a10331673cf7392e7dd1f08f204c43beacdbde5c5be2655083c104a073e2afc74782fd3731cc87c77f5d9699dffbdff9942b428ad14d4d71a16f3c981a5562b27cad98fb6d31c3778c23c9f722826a0bebcf117b923ad3b6d7994a2b4f9721b435614aad8c719675fb4d5b06ac6341c56ba614f3a05649f1548bcd2bf9634456dec9a533382ea4e68cd633", 0x99}], 0x1}, 0x8000) r7 = socket$tipc(0x1e, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, {0x5}}}}]}, 0x78}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x100000, 0x1}, 0xfffffffffffffed1) bind$tipc(r7, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r8, &(0x7f00000008c0)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="e582a1b48d0ea3c7403ae9bebd673d56cbf78aa8a4fb2b4e209d0ab3ca6c5bf3f40c869d9a14de86b675ecbc56de6021ec1dab9d2a8b87c0acdfde72aa4d32ff52097482720a4defdd6a4d34d28893cfedf37857e48bfb41b0a5407613fd16225f987f2bba4401c40042cdb540be1e88a9f5275a", 0x74}, {&(0x7f0000000600)="3500ba84e18b620da13b1541bde94cbe1353120c7cc73c6e7a43f38cd3bfef01ebfdfd105bc2301dd2479d2e293e0e152b2c42daa16cbba52241654aec51954b0d8fa2b4d4893aac3e538358927d8bc2b6f2252d12ea4226e1984fe3891fad543e7e7ef57881a2a767dba067b90a4078caa9b6af7b072c3de5465504a50b7b6192a2703a2eca396205a065e8e6d94a124eee6fa38d0696807d8552a0db5f08ad67afa29e85d6fe04195b07c5730b1a6c1fe05843bf5281d9b11ab4e474b7cb74a6af65ed325026ccbec9afcea637879afbdaf65f2b0053cfcac1d0eb85f5364d2d8ad5ce9c", 0xe5}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000500)="2c38b1e8b05298b77ece5a3ecbf760d60387015ac2346e3dab8d22f26796c138aa64e262be53ed7382bcaafef25abee384968b4f5be4a469d6b9cd29aa8f", 0x3e}, {&(0x7f0000000800)="196a695f4152e3a4c98ad7631254a71ec33da4675ddd89647ed00417c8f223aa8d516eeb7b664994fb7c4b0739ed1d5107f86ef6dbf6dd529727780d57e80fd56f9b136b2c07cbee01a6293de1488d5226aae447061f1813c0b1b67185b393fecf414bd8c9689b5268ce78b6030acab144846c9ef994a816a6bba179c6dc3990297e6b7b51258dd3befc833a336152296a304835815e6b8c03f4a9", 0x9b}], 0x6, &(0x7f0000002800)="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", 0x1000, 0x8010}, 0x10) sendmsg$tipc(r7, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000017c0)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040090}, 0x10040000) 16:39:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 172.684843][ T7124] loop2: detected capacity change from 0 to 2048 [ 172.790071][ T7125] FAULT_INJECTION: forcing a failure. [ 172.790071][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 172.802875][ T7125] CPU: 0 PID: 7125 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 172.813266][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 172.823349][ T7125] Call Trace: [ 172.826639][ T7125] [ 172.829579][ T7125] dump_stack_lvl+0xda/0x130 [ 172.834248][ T7125] dump_stack+0x15/0x20 [ 172.838468][ T7125] should_fail_ex+0x21f/0x230 [ 172.843279][ T7125] ? iter_file_splice_write+0xeb/0x7e0 [ 172.848865][ T7125] __should_failslab+0x92/0xa0 [ 172.853763][ T7125] should_failslab+0x9/0x20 [ 172.858356][ T7125] slab_pre_alloc_hook+0x38/0x180 [ 172.863434][ T7125] ? iter_file_splice_write+0xeb/0x7e0 [ 172.868959][ T7125] ? iter_file_splice_write+0xeb/0x7e0 [ 172.874548][ T7125] __kmem_cache_alloc_node+0x48/0x1d0 [ 172.880036][ T7125] ? splice_from_pipe+0xe0/0xe0 [ 172.884936][ T7125] ? iter_file_splice_write+0xeb/0x7e0 [ 172.890450][ T7125] __kmalloc+0x95/0x1a0 [ 172.894711][ T7125] iter_file_splice_write+0xeb/0x7e0 [ 172.900038][ T7125] ? copy_splice_read+0x47e/0x4b0 [ 172.905101][ T7125] ? copy_splice_read+0x47e/0x4b0 [ 172.910169][ T7125] ? splice_from_pipe+0xe0/0xe0 [ 172.915207][ T7125] direct_splice_actor+0x8a/0xb0 [ 172.920286][ T7125] splice_direct_to_actor+0x31d/0x690 [ 172.925760][ T7125] ? direct_file_splice_eof+0x70/0x70 [ 172.931219][ T7125] ? security_file_permission+0x5a/0x70 [ 172.936815][ T7125] do_splice_direct+0x10d/0x190 [ 172.941726][ T7125] ? do_splice_direct+0x190/0x190 [ 172.946848][ T7125] do_sendfile+0x3b6/0x9a0 [ 172.951350][ T7125] __x64_sys_sendfile64+0x110/0x150 [ 172.956587][ T7125] do_syscall_64+0x41/0xc0 [ 172.961034][ T7125] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 172.967027][ T7125] RIP: 0033:0x7fa29008fb29 [ 172.971469][ T7125] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:39:38 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="1f1800280012800a00010076786c616e00000018000280140010d13f578aa9911281f7d5cbcdf61d66db5bcb486d5556d84d44ddc90413fa53521d7fb07f651447bcad1bb6773a56db53f9a1ba0d46a3ffb00d80b884545f53d517d4e3f5f04aa8acf95b5cc1f1dc05a029af3e"], 0x3}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffb1, 0x0) 16:39:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:38 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x1}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000240)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="174d846a0a32a368a6e8ad1bff97a10331673cf7392e7dd1f08f204c43beacdbde5c5be2655083c104a073e2afc74782fd3731cc87c77f5d9699dffbdff9942b428ad14d4d71a16f3c981a5562b27cad98fb6d31c3778c23c9f722826a0bebcf117b923ad3b6d7994a2b4f9721b435614aad8c719675fb4d5b06ac6341c56ba614f3a05649f1548bcd2bf9634456dec9a533382ea4e68cd633", 0x99}], 0x1}, 0x8000) (async) r7 = socket$tipc(0x1e, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, {0x5}}}}]}, 0x78}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x100000, 0x1}, 0xfffffffffffffed1) (async) bind$tipc(r7, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r8, &(0x7f00000008c0)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="e582a1b48d0ea3c7403ae9bebd673d56cbf78aa8a4fb2b4e209d0ab3ca6c5bf3f40c869d9a14de86b675ecbc56de6021ec1dab9d2a8b87c0acdfde72aa4d32ff52097482720a4defdd6a4d34d28893cfedf37857e48bfb41b0a5407613fd16225f987f2bba4401c40042cdb540be1e88a9f5275a", 0x74}, {&(0x7f0000000600)="3500ba84e18b620da13b1541bde94cbe1353120c7cc73c6e7a43f38cd3bfef01ebfdfd105bc2301dd2479d2e293e0e152b2c42daa16cbba52241654aec51954b0d8fa2b4d4893aac3e538358927d8bc2b6f2252d12ea4226e1984fe3891fad543e7e7ef57881a2a767dba067b90a4078caa9b6af7b072c3de5465504a50b7b6192a2703a2eca396205a065e8e6d94a124eee6fa38d0696807d8552a0db5f08ad67afa29e85d6fe04195b07c5730b1a6c1fe05843bf5281d9b11ab4e474b7cb74a6af65ed325026ccbec9afcea637879afbdaf65f2b0053cfcac1d0eb85f5364d2d8ad5ce9c", 0xe5}, {&(0x7f0000000700)="f6699b93656ee566105097bd297c8a48bf5757d584f31f297841d1e23e7fd4f3541296ebfa1a4300be549ee8d4ec8a3aa6b9889aacc71cef26b93cbf287c5ede72acab30830cee6cd2db8d1e5c9e80dcf8b1a4f9108e8e91d630cdb5bd513402281f789717741815a8a32882afb383cfd780de54a6dfee2d31f28a3f82749dbfd37993bd144c9739780876a178e38c8d76785633a18cc0171214d406469dbb629f30f3e2763b8076aeeda81c9d708fa4081994063f2fcb9f9e1c196806d25d744a22b88acf7f4694849a6095bfd93b306373821b6bf01928f1e6a9d89f443e6f2d76bdf2c8f441765877b2b477d2e49997785c05e8b8379cbcaef89d31c5", 0xfe}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000500)="2c38b1e8b05298b77ece5a3ecbf760d60387015ac2346e3dab8d22f26796c138aa64e262be53ed7382bcaafef25abee384968b4f5be4a469d6b9cd29aa8f", 0x3e}, {&(0x7f0000000800)="196a695f4152e3a4c98ad7631254a71ec33da4675ddd89647ed00417c8f223aa8d516eeb7b664994fb7c4b0739ed1d5107f86ef6dbf6dd529727780d57e80fd56f9b136b2c07cbee01a6293de1488d5226aae447061f1813c0b1b67185b393fecf414bd8c9689b5268ce78b6030acab144846c9ef994a816a6bba179c6dc3990297e6b7b51258dd3befc833a336152296a304835815e6b8c03f4a9", 0x9b}], 0x6, &(0x7f0000002800)="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", 0x1000, 0x8010}, 0x10) (async) sendmsg$tipc(r7, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000017c0)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040090}, 0x10040000) 16:39:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="c7ff9c0921d24a2aec184831540d90f6005841d46e2458e06db724b290d2a7783e2d21917f13e3164da5dbe6c6e1fc96d9ad5d", 0x33, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3fee533abfac32a121d47235f60550c6ffa7a79f68ed80a0c4612ca43c566b156237b1a2383b221d2af4fec7f6bb2277456e2709ac96eb69add998269b8c4d57efc31bf3ef984e16d599") [ 172.991193][ T7125] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.999703][ T7125] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 173.007800][ T7125] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 173.010415][ T7124] syz-executor.2: attempt to access beyond end of device [ 173.010415][ T7124] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 173.015783][ T7125] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 173.015802][ T7125] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 173.015817][ T7125] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 173.015838][ T7125] 16:39:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 9) 16:39:38 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x1}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000240)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)="174d846a0a32a368a6e8ad1bff97a10331673cf7392e7dd1f08f204c43beacdbde5c5be2655083c104a073e2afc74782fd3731cc87c77f5d9699dffbdff9942b428ad14d4d71a16f3c981a5562b27cad98fb6d31c3778c23c9f722826a0bebcf117b923ad3b6d7994a2b4f9721b435614aad8c719675fb4d5b06ac6341c56ba614f3a05649f1548bcd2bf9634456dec9a533382ea4e68cd633", 0x99}], 0x1}, 0x8000) (async) r7 = socket$tipc(0x1e, 0x1, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, {0x5}}}}]}, 0x78}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x100000, 0x1}, 0xfffffffffffffed1) (async) bind$tipc(r7, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r8, &(0x7f00000008c0)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="e582a1b48d0ea3c7403ae9bebd673d56cbf78aa8a4fb2b4e209d0ab3ca6c5bf3f40c869d9a14de86b675ecbc56de6021ec1dab9d2a8b87c0acdfde72aa4d32ff52097482720a4defdd6a4d34d28893cfedf37857e48bfb41b0a5407613fd16225f987f2bba4401c40042cdb540be1e88a9f5275a", 0x74}, {&(0x7f0000000600)="3500ba84e18b620da13b1541bde94cbe1353120c7cc73c6e7a43f38cd3bfef01ebfdfd105bc2301dd2479d2e293e0e152b2c42daa16cbba52241654aec51954b0d8fa2b4d4893aac3e538358927d8bc2b6f2252d12ea4226e1984fe3891fad543e7e7ef57881a2a767dba067b90a4078caa9b6af7b072c3de5465504a50b7b6192a2703a2eca396205a065e8e6d94a124eee6fa38d0696807d8552a0db5f08ad67afa29e85d6fe04195b07c5730b1a6c1fe05843bf5281d9b11ab4e474b7cb74a6af65ed325026ccbec9afcea637879afbdaf65f2b0053cfcac1d0eb85f5364d2d8ad5ce9c", 0xe5}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000500)="2c38b1e8b05298b77ece5a3ecbf760d60387015ac2346e3dab8d22f26796c138aa64e262be53ed7382bcaafef25abee384968b4f5be4a469d6b9cd29aa8f", 0x3e}, {&(0x7f0000000800)="196a695f4152e3a4c98ad7631254a71ec33da4675ddd89647ed00417c8f223aa8d516eeb7b664994fb7c4b0739ed1d5107f86ef6dbf6dd529727780d57e80fd56f9b136b2c07cbee01a6293de1488d5226aae447061f1813c0b1b67185b393fecf414bd8c9689b5268ce78b6030acab144846c9ef994a816a6bba179c6dc3990297e6b7b51258dd3befc833a336152296a304835815e6b8c03f4a9", 0x9b}], 0x6, &(0x7f0000002800)="1781d41f7d32c0156526624f5731891bc9e7053bf6d3e9ba1e7470dad6317b15bbae3a84ac9772ca0bc8434907f208d87fdd9b2d856388eab56d459493b9afda6bfaec122a586428e0a28b2fba2b4bde279cbb929f8e3699580cd8818409ccd41dfe57bff4f651b5cf54a7bc62b000322b25402ca1a8bb4811412e99a735c492e9d6a7b3aebc23d4a763474e1b34c763282b2927e052770c3bfc0ec6a1caa6c17257cbcd01ea35ed2691b0f731bed13e99dfad4dbd7765b2ded99a17c4b85a3a5f3fac96465be097a84d124b38fedf9b5a5c2960ad46cb601a9904d69cc36a8ab941b391afc87af859cf535624030c64ee172f482199d37f19ba3a357619a6f43472efd7a493e28c452903ae66d1e337654ec2fda5cb936a558aafe1620231435d5c9bf56ec89c8cdfa25b0951e9881d1c59ef4678bbdfebfa520826b647f1b413b01c94ce2b77561e4b4449b3e570c8252c91e78aaf00c75147c0b47a56d7063a639a7a7dd941eb4ae934c43a0127730f098cc641630f87eaeb982218ccef2d6add0ef17f3a6039176c80f990070bc81aeb306ae71cface61c955afe4dd6d71c70b8de77bcec5f9c9e5fb002160ad2a57fea626b2a6530ba6f4bb5a8719a26d5704480d8f0f5a097c68b1fe2a196078fe9de413f323e44415795229132a218928abca15db1490605c96e50b108ae1bb91b2afaa6ca5a6cd90814760ad0d13e1d38a2b9a742965c281bfe47717bea7f81bdf5636ddc3abf64cf6df75341a64e206a6999bc70e66e5d2230365e46dcde288e2c83aee0370b2339b44d5d02e2318479bc56a989d48b3aaf6d5425a18991b1f44f851152d96035913f44cc1f116874afa4c0f1a4bc565eeb49617e60471a0ee409f914d66935f60bbc40bf6b617e3224a8d395db32e1b502d35a01421a46e0a050a9355072415a75d0013b33fe176c206fd5ac24b45db71edf910db30bb940e829e2d75b1671d06a167800aed34ca28aebd9a1c035b22604eb11d0a874ccd939831e9b54b586c4baa025833eeac4a4ea65092d017f78ca85dc76d5eda8e4ab552d3ab685221cb5d6a5d86d5b64b54135c80b194a293cc5f4078791e7f4cadc180d8e811dadc449c1bd7a92f71f90638c7769d91bd5b54435e41187413b5bf3e300647e1936f807ed7fa9f284ef787233c74780269fcc98186f169d8dc92112f76e4e7046c1d626de42c4c5c010cce8d0f1b9de5f8badb2c5dc25b1da4287bd50df8f2daadb51bef9d95f81a1748cffd8a350e59e9f27301bbc416f57ed3333c119005f43d9f286d5854ebe706d6b81f279ad8becc5d4260eba6b4f9230807a354ee880ac313972232a17366b236f5f7a9fd1b06b69cb2073b66a181326144d4b575fffe2c8a450ef870c9eaf9b4b7aaa18ab02315856fd9cba492603eb7c6357f1137afcae65955fd0cac4acb4c555642394e7a2e4ceab1586b7ee783e1a252b9833257e8ae3ac11a9b0092c0eca3b1098d67f76ce358ac4e1901c290eaf7a41cda6ac0760271cd95885542959dde6b0946e25b72f3cb1763e20a2909098939d3e6e11ea8378c4ac9e69f77ecbe659b5b1059106a2e9e22525b440a03f927ade446f86191ee06d20bd3f67581862e226ea9c0004193883ef2027966e7f9d0b1c6c42411ca9b250e4690954418961bcf027c28a33df04a1f439bae048021f5fc1878b00655cfb756553767a50faa5301ef6309d3cf28014bb94a8778d8522435973a4a819916fc6dcc465c579815838e61eed3b22c47db72449985eb8f68bfbcb534dfb7482b2cccd9de57d241b47acd33d9d483f5a558464f0de7dc065f5bd8f470ae00e24c538c19d8756c1c4d09510f54a035b30b0e887238a587df8e7f3ce3f343b250d92e03aea64df06fda399ef4afaa81b803aace9503e62fd1df52303eb5ae357d3d503575eab8c1745d1de6ba847b83b17596cdc342051ec3997fe673432233ecaecbbaf9fb8bb5030a32ef2482d8b6bce53265142347092b40c55f29b58b536fc2116039922bc85d6e1c0c253ec78e0e931dac00af6971d729c691b3e98094c0a05e2e4b8ff7af104faf0417b55da8c031fc1518b0540ccd8b7f60fae13db789ea189ee0b2649ec0a84faf6ba59434740d17b832e33bda2bcc52941f67e3105255b533c630808cc14787e6578df2ac158b8c17738ed87ada4857cebcbbe397968cc88ae7c3749a13fb5704d51076659c94538ef2ba5aa8cd6021bfc60e53ccc0f91a07f93c229f3b963921c694175937bfb3faa741078ba7350fb8af2b5e75681159a7db414eb27c273695698d30dc8268efa9a1f4d13ba217b0d669ecdb6431eb36b068c3d5c60a674b8873da3b8f16455a19d4fabd1ca0fbae4ec98e424eb82db2c8ee6966dda70aabcfa50c11fd463bda754244bc34d2e6a8f0f3065c70c59adee6929f26552f3cc421a20cf9eac35fc2b08a8f9afba938fc944a1016ee97c70407e80e26d692fcaeed09bae27f4a12290ba05a184c98905a15738fb65ecf9a1b5e48c7285371469b5410470a20019d74f8ce753401aeb7439f5e0794487bcce1e14edb33e7252d4a4731c58eb3bf97d881d46f3b4dec3830ee3e2091107b990220d44f12f2be51ef83ad9ac180149b6c5ea07e27b107fa53ee55a64c5f84638c8cd8ff1348402103439284af541bc057a8b5c31e5411d7ff2a05188d1228d5f408811760ed89ac68bf2b09228e703f74a9e90e4bb4558aa32e7cb78c8b69454809c021eb2cf6d99aa2fd7410fb5162fc47cbd59938bdf93aea8553428e3a97704f60fb053192efcd62746e8a0ee55c68a22998bdeaefaf223865c43fe6988e19bbab16459e05db27211623c6d3d4ca2d182b30185216585cd8a3940d52415b72639dcb2275bbb59d80543a1ec4f1ed461c0db238ff7c38d84e3e91dccbc05fccc088c52544505dbb5b55bcb0547978e2f992a2e70173a48e44286f7c189ed836b833380dfcf53ce79c93d254061d935234040f2a3ebf10e60eeb91ab14d5c9ce338e200ae9f88fe1aa7c485261ea107a001bb17aee9197efbffe761b45e1e34a3f6c295d315069dcd53b7b7e2aa77c63e7c3dbbf2e4eab6b2fce7fd6e3888a466de50bad864a8eab6ac39310c44b1c3ff04bc7ac926206924ace5ce9790caa0ad7891a87165ff38fa478b530c4f72a4011433137a84842c6364f50d2bbfa1c0dd065ff5ec8513a389612a054562bf3a8edb66932e599b42af1af59717f0186921b82920dbf5cc22701e5b591548d1bd1b5a75a00f55c63a59086b0abe45fd0d3d9bb3408683c41597a5b387ca02a830f564f22c0cf7d4df1066c6cab481c7d7fcb07b9787afe229298fe0beec62ac8e3d7134b85a68c4f515a2c4a3124a039f19afb2c629b845a65f756f6b1acb14ac29da8c221b8a03c2e40b11090ce2ecbf2c9db4f989f1bdbdf21858d29dbddb9651faea777496a80571af6cc8cfac4a99d3736d6ce7d803d2f19ca8fffeb7ff4e9e6eb0dbdb5819d7d01100ff39427d8a918ef5e0fecb4664924ce7eb004396453bf9aa86f98ee5f1e94bd05c75899eb32c229a41fc055b102f24071df42fa6ec5f6deb0b3b453f469b44d9f2cbd9c74fd680ea19629bf33572765c054c3e1fdce5ef01bcacbb897adac552744ccebfe6a31b0ad8b93e429c519fe10bf9040c872fd71791ff7175e79bf3f9a1e152f433eba6d95c0c6aba56e0829333f7f124996abfb1f0b8fd25afa362c0c5d2f229c2c81a236c1405b2ad0a6954a0f2211e655ff4d342bdfd45da9a48832c1720b7d0a4a62ce0772165c9884fc62650a4611c5856bc3500c44aa20089001a5c8b313729858bca46c86511cebed4bd3a98d16dda14761148d8e664b1aaa75a3d5b54d277707f6f6b6446247f9496371dda5a1d8c4c96a4da184a425489be9c391e884a4bfe9f7dabf01ca3559103b306fd4fdd3f69ee8d36d6cc0e1d071175467cd41dbab028c37fe42ff5f2c485d6378dadc64482fbb34f930517e26844e39616eecd55879773229be473c256285eb3bf72c10ae63e856d4d5ab601469d1ccb9ad4e98d8fcd04270324ff58c6093f04a08d731f523a07a5a7bd5961e619bb24106a564183e09df6752fa5cdfebbe60ea4bf451d3dba32b1ea300ba5656402f6ef3e5bf1134559d67202dd704dc04d3ecf51ad45a6d239e85bf086205f0a8aa8187c6dccc3ee43d4f2ed7421f137fc8d09197ea85e4dd6230bcd8ac48351e6f73e27fb1d9cda9fd99e8f35da1105c21551f77ebd03a29af96f373a2f90ada319fa9986ab4136209687c63c5aad6c4c5a14b4da452676041444059e52b269c36f518713509cc6c6553ab9bd9ab5f7103d35bb628c7b9bf42b89cc0006f3c3bf28b5083f454a73fa7e95f79764ca4345373c6c2ab7001e8102088dddcf92b2ade85262aef395283a9ab85d89da1864914c72773447789b08496659c04422c8c518dbf063f3f97baca3a8ed2fdfcdeb65f943ed504553408d598ff00a7b2072f8b4ce8b626028167361048691ab96716d16f3665e3318a534db4c69aec179efb1a022f34d441ef2eea492a2e108c382f28bdcb1d72d8ec497410aa290d6f2b70afeb6cbd198dbca61dbe5b8c7e42934441815a377ffe0ef989d1f69198e6d4d1ce2cd229c24d9e429bc5f28bf79f5b70e478b06e1dd677646f4e139d6b56ac7b8d78b5bde6fc0f0bcdc7965d45d376f946c30bf6137c6ae1faf3b9f6b684200346b821822e30bdaf75861be4ba49d2ad18982d2848bebef4e02c8d84c2113568c63bf86a829468dba712eabe36ec355c99b283f9208d2125f1156b66a80fb9dab0e108021f4604c0aec795c4c84ca090042c69234f6ffaccb3fa8c0cf8814a1817ce80142e7dcc663294e03b260937f36a8279f9648aead73b0cbba87e838a34cf7fbecf3ddf01cdc37f04bc264daa8f4622d9602af8e26a88651ec14c7228ea712f622f36b0e2ccb1c70a0609f82d8c5bfadfbe91f431e7c4c1be15e3d582c2b334671a48b354ab61a9ffce9674eba8bec446a68430713dc85bce5590e74706f16c3e8d3b5bbbb4b49d2555bc7fd6744c1e109f43cbda723c8a9f42a67af2e66d2843bcd0e026687be3e71798c6e0425866300c5369596d4668fabdddc424044dc23098dc5c21c85d5d8f532f98d6fb0912889cbde9f5aa1fe76cd0e95d896b51b224b803edfa87799cb145120880bcae0b9831c9d80546794a8795330587931b55b05e78f7afa2b5127402589cb69e8bdd902b842f65dd87bb71bc345134167991ac6832b70d9482c0e4594a04cc9efbf6f20247c78f8663291b09ff53d9fc1d052919a0c1b3aca417381cbd2b28887eb00566856ab8b764b0c7b2b81028b9d944b005c1125c67f80c2bd8ce4beb5432ea9a4a4bd307a1602843ece5357005aaedf81be8735e5c86f289dee2c81770c3bc89b16528a530c45ec732c4e8ef855fb8dc292dff71f83097161d8439bf3468c860c2bbded9af3971747ffd6d98af6e2b90f25af2abf53239f3f15c3935087cfd304d6e54c1901671fafba9db146474becf6e99ccf5c271b644b1a36056d02f5ca838346ecef47b339367ca330bc774d08ec66187877bcd942e41df06b29f2b487df81c36ec90ce429736148e057dd9834712c0ed0a0cef7279a7a96aaecdc9fc8bcdf554ddfea9ee278d6803df7d8003f911494b873d4df8ede455a0e3de29862978899b8d66a73123309d08433f56fec433e352d1eb4b44ebedbbf003923b533d158facea9774b3b5a95c587fbad3f0bad8294da1ca2165e46a39", 0x1000, 0x8010}, 0x10) sendmsg$tipc(r7, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000017c0)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040090}, 0x10040000) 16:39:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:38 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_clone(0x40000000, &(0x7f0000000000)="c7ff9c0921d24a2aec184831540d90f6005841d46e2458e06db724b290d2a7783e2d21917f13e3164da5dbe6c6e1fc96d9ad5d", 0x33, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3fee533abfac32a121d47235f60550c6ffa7a79f68ed80a0c4612ca43c566b156237b1a2383b221d2af4fec7f6bb2277456e2709ac96eb69add998269b8c4d57efc31bf3ef984e16d599") socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) syz_clone(0x40000000, &(0x7f0000000000)="c7ff9c0921d24a2aec184831540d90f6005841d46e2458e06db724b290d2a7783e2d21917f13e3164da5dbe6c6e1fc96d9ad5d", 0x33, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3fee533abfac32a121d47235f60550c6ffa7a79f68ed80a0c4612ca43c566b156237b1a2383b221d2af4fec7f6bb2277456e2709ac96eb69add998269b8c4d57efc31bf3ef984e16d599") (async) 16:39:38 executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300"], 0x448}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3ce0ff00", @ANYRES16=r5, @ANYBLOB="100028bd7000fcdbdf250e00000005003700000000000500330000"], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x4014) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa6a5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) [ 173.209822][ T7150] loop2: detected capacity change from 0 to 2048 [ 173.314396][ T7163] FAULT_INJECTION: forcing a failure. [ 173.314396][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 173.327202][ T7163] CPU: 0 PID: 7163 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 173.337569][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 173.347769][ T7163] Call Trace: [ 173.351252][ T7163] [ 173.354216][ T7163] dump_stack_lvl+0xda/0x130 [ 173.358966][ T7163] dump_stack+0x15/0x20 [ 173.363164][ T7163] should_fail_ex+0x21f/0x230 [ 173.367886][ T7163] ? iter_file_splice_write+0xeb/0x7e0 [ 173.373398][ T7163] __should_failslab+0x92/0xa0 [ 173.378301][ T7163] should_failslab+0x9/0x20 [ 173.382931][ T7163] slab_pre_alloc_hook+0x38/0x180 [ 173.388064][ T7163] ? iter_file_splice_write+0xeb/0x7e0 [ 173.393576][ T7163] ? iter_file_splice_write+0xeb/0x7e0 [ 173.399204][ T7163] __kmem_cache_alloc_node+0x48/0x1d0 [ 173.404644][ T7163] ? splice_from_pipe+0xe0/0xe0 [ 173.409673][ T7163] ? iter_file_splice_write+0xeb/0x7e0 [ 173.415283][ T7163] __kmalloc+0x95/0x1a0 [ 173.419525][ T7163] iter_file_splice_write+0xeb/0x7e0 [ 173.424872][ T7163] ? __slab_free+0x5f/0x260 [ 173.429411][ T7163] ? copy_splice_read+0x47e/0x4b0 [ 173.434518][ T7163] ? splice_from_pipe+0xe0/0xe0 [ 173.439426][ T7163] direct_splice_actor+0x8a/0xb0 [ 173.444491][ T7163] splice_direct_to_actor+0x31d/0x690 [ 173.449982][ T7163] ? direct_file_splice_eof+0x70/0x70 [ 173.455414][ T7163] ? security_file_permission+0x5a/0x70 [ 173.461092][ T7163] do_splice_direct+0x10d/0x190 [ 173.461743][ T7150] syz-executor.2: attempt to access beyond end of device [ 173.461743][ T7150] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 173.466006][ T7163] ? do_splice_direct+0x190/0x190 [ 173.466095][ T7163] do_sendfile+0x3b6/0x9a0 [ 173.466124][ T7163] __x64_sys_sendfile64+0x110/0x150 [ 173.494766][ T7163] do_syscall_64+0x41/0xc0 [ 173.499246][ T7163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 173.505682][ T7163] RIP: 0033:0x7fa29008fb29 [ 173.510121][ T7163] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 173.529843][ T7163] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 173.538279][ T7163] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 173.546293][ T7163] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 173.554365][ T7163] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 173.562347][ T7163] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000001 [ 173.570387][ T7163] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 173.578370][ T7163] 16:39:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) close(r2) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="1f1800280012800a00010076786c616e00000018000280140010d13f578aa9911281f7d5cbcdf61d66db5bcb486d5556d84d44ddc90413fa53521d7fb07f651447bcad1bb6773a56db53f9a1ba0d46a3ffb00d80b884545f53d517d4e3f5f04aa8acf95b5cc1f1dc05a029af3e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffb1, 0x0) 16:39:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:39 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:39 executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300"], 0x448}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3ce0ff00", @ANYRES16=r5, @ANYBLOB="100028bd7000fcdbdf250e00000005003700000000000500330000"], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x4014) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa6a5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 16:39:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 10) 16:39:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:39 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x1, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 173.937763][ T7175] loop2: detected capacity change from 0 to 2048 16:39:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) getdents64(r2, &(0x7f0000000080), 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:39 executing program 1: socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$tipc(0x1e, 0x1, 0x0) (async) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) getdents64(r2, &(0x7f0000000080), 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x1, 0x0) (async) r4 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 174.251770][ T7175] syz-executor.2: attempt to access beyond end of device [ 174.251770][ T7175] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) syz_clone(0x40000000, &(0x7f0000000000)="c7ff9c0921d24a2aec184831540d90f6005841d46e2458e06db724b290d2a7783e2d21917f13e3164da5dbe6c6e1fc96d9ad5d", 0x33, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3fee533abfac32a121d47235f60550c6ffa7a79f68ed80a0c4612ca43c566b156237b1a2383b221d2af4fec7f6bb2277456e2709ac96eb69add998269b8c4d57efc31bf3ef984e16d599") 16:39:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) getdents64(r2, &(0x7f0000000080), 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) (async) getdents64(r2, &(0x7f0000000080), 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r4, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 16:39:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 11) 16:39:40 executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c043300"], 0x448}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3ce0ff00", @ANYRES16=r5, @ANYBLOB="100028bd7000fcdbdf250e00000005003700000000000500330000"], 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x4014) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa6a5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa6a5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 16:39:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 16:39:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 174.745099][ T7206] __nla_validate_parse: 23 callbacks suppressed [ 174.745117][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.781278][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 16:39:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 174.823154][ T7217] loop2: detected capacity change from 0 to 2048 [ 174.837116][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f726f636b2c6d61703d61636f726e2c626c6f636b3d30783030303030303030303030303038303000646d6f64653d3078666666666666666666666666666666662c757466382c6e6f726f636b2c7362736563746f723d3078303030303030303030303030303030352c6d6f64650107000030303030303030d8c95d35021177c32c646566636f6e746578743d737fd334ccb01d1b797374656d6d61636b6673666c6f6f723d2c00fe2b8a7df99e326ee4f83ff70c7e65e60ffb2bdb95efab46a708d98ab9d03a04ba141eb6"], 0x5, 0x95c, &(0x7f0000001340)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0xff, 0x40}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xfffffffffffffdb9, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 16:39:40 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:40 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x24040081) 16:39:40 executing program 0: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8804}, 0x4008010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000540)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@grpquota}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0xc202}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000001b00)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) link(&(0x7f0000000000)='./file3\x00', &(0x7f00000003c0)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 174.991786][ T7249] loop3: detected capacity change from 0 to 1764 [ 175.003222][ T7253] loop0: detected capacity change from 0 to 512 [ 175.024888][ T7253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.038964][ T26] audit: type=1400 audit(1690648780.669:273): avc: denied { mount } for pid=7247 comm="syz-executor.3" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 175.061943][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.071711][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.082178][ T7253] EXT4-fs (loop0): 1 orphan inode deleted [ 175.087977][ T7253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.101500][ T7253] ext4 filesystem being mounted at /root/syzkaller-testdir553862963/syzkaller.ryAJaz/173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.103533][ T7217] syz-executor.2: attempt to access beyond end of device [ 175.103533][ T7217] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 12) 16:39:40 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:40 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x24040081) 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:40 executing program 0: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8804}, 0x4008010) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000540)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@grpquota}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0xc202}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000001b00)="$eJzs3d9rW9cdAPDvvbay/HBmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzHWQp/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrtLElWKHyL5gfz5wfM+5V9L3e2x0dc+9x7oB7FunIuJqRAxExLmIGM7Wp1m51mxstB/36OHd6WZJotG48VkSSbau81pJtjzSfkocjIi/XYv4Z/LDuLW19YWpSqW8krVL9cXlUm1t/fz84tRcea68NDExfmny8uTFybG+9HMkIq786aP//+e1P19567e337/5ydl/NdMayrY/2Y9+ane90PpddAxGxMpOBMvBQLYs5JwHAADb0zzG/0lE/Kp1/D8cA62jUwAAAGAvafxhKL5OIhoAAADAnpW25sAmaTGbCzAUaVostufw/iwOp5Vqrf6b2erq0kx7ruxIFNLZ+Up5LJsrPBKFpNkez+bYdtoXNrUnIuJYRPxv+FCrXZyuVmbyPvkBAAAA+8SRTeP/L4fb438AAABgjxnJOwEAAABgxxn/AwAAwN5n/A8AAAB72l+uX2+WRuf+1zO31lYXqrfOz5RrC8XF1enidHVluThXrc61vrNvcavXq1Sry7+LpdU7pXq5Vi/V1tZvLlZXl+o355+6BTYAAACwi4798v57SURs/P5QqzQdyDspYFckz/PgD3cuD2D3DeSdAJCbwbwTAHJTyDsBIHdbnQfoOXnn7f7nAgAA7IzRn/e+/u/cAOxtad4JAAC7zvV/2L8KZgDCvvfjLba/+PX/RuO5EgIAAPpuqFWStJhdCxyKNC0WI462bgtQSGbnK+WxbHzw7nDhR832eOuZyfP97zAAAAAAAAAAAAAAAAAAAAAAAAAA7GONRhINAAAAYE+LSD9OWt/mHzE6fGZo8/mBA8lXw61lRNx+5cZLd6bq9ZXx5vrPH6+vv5ytv5DHGQwAAABgs844vTOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB+evTw7nSn7GbcT/8YESPd4g/GwdbyYBQi4vAXSQw+8bwkIgb6EH/jXkQc7xY/aaYVI1kW3eIfyjF+GhFH+hAf9rP7zf3P1W7vvzROtZbd33+DWXlRvfd/6eP930CP/c/RbcY48eCNUs/49yJODHbf/3TiJz3in95m/H/8fX2917bGqxGjXT9/kqdileqLy6Xa2vr5+cWpufJceWliYvzS5OXJi5Njpdn5Sjn72TXGf3/x5rfP6v/hHvFHtuj/mW32/5sHdx7+tF0tdIt/9nT3z9/jPeKn2Wffr7N6c/top77Rrj/p5OvvnHxW/2d69H+rv//Zbfb/3F///cE2HwoA7ILa2vrCVKVSXlFRUVF5XMl7zwQAAPTb9wf9eWcCAAAAAAAAAAAAAAAAAAAA+9dufJ3Y5pgb+XQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCZvgsAAP//96DU7Q==") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) link(&(0x7f0000000000)='./file3\x00', &(0x7f00000003c0)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 16:39:40 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f726f636b2c6d61703d61636f726e2c626c6f636b3d30783030303030303030303030303038303000646d6f64653d3078666666666666666666666666666666662c757466382c6e6f726f636b2c7362736563746f723d3078303030303030303030303030303030352c6d6f64650107000030303030303030d8c95d35021177c32c646566636f6e746578743d737fd334ccb01d1b797374656d6d61636b6673666c6f6f723d2c00fe2b8a7df99e326ee4f83ff70c7e65e60ffb2bdb95efab46a708d98ab9d03a04ba141eb6"], 0x5, 0x95c, &(0x7f0000001340)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r0) (async) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0xff, 0x40}) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0xff, 0x40}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xfffffffffffffdb9, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) [ 175.129228][ T26] audit: type=1400 audit(1690648780.759:274): avc: denied { read } for pid=7251 comm="syz-executor.0" path="/root/syzkaller-testdir553862963/syzkaller.ryAJaz/173/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.131701][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 16:39:40 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:40 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x24040081) 16:39:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 175.172211][ T26] audit: type=1400 audit(1690648780.799:275): avc: denied { link } for pid=7251 comm="syz-executor.0" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 175.195219][ T3089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.202726][ T26] audit: type=1400 audit(1690648780.819:276): avc: denied { unmount } for pid=3100 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 16:39:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:40 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x8, 0x7ffffffc, 0x4}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x1}, 0xffffffffffffff0f) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 175.303963][ T7281] loop0: detected capacity change from 0 to 512 [ 175.306688][ T7271] loop2: detected capacity change from 0 to 2048 [ 175.331256][ T7278] loop3: detected capacity change from 0 to 1764 [ 175.353926][ T7281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.364811][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.379307][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.390677][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.402439][ T7281] EXT4-fs (loop0): 1 orphan inode deleted [ 175.408282][ T7281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.426719][ T7281] ext4 filesystem being mounted at /root/syzkaller-testdir553862963/syzkaller.ryAJaz/174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.460722][ T3089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 16:39:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 13) 16:39:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x8, 0x7ffffffc, 0x4}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x1}, 0xffffffffffffff0f) (async) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:41 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f726f636b2c6d61703d61636f726e2c626c6f636b3d30783030303030303030303030303038303000646d6f64653d3078666666666666666666666666666666662c757466382c6e6f726f636b2c7362736563746f723d3078303030303030303030303030303030352c6d6f64650107000030303030303030d8c95d35021177c32c646566636f6e746578743d737fd334ccb01d1b797374656d6d61636b6673666c6f6f723d2c00fe2b8a7df99e326ee4f83ff70c7e65e60ffb2bdb95efab46a708d98ab9d03a04ba141eb6"], 0x5, 0x95c, &(0x7f0000001340)="$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") (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0xff, 0x40}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xfffffffffffffdb9, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 16:39:41 executing program 0: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8804}, 0x4008010) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000540)={[{@errors_remount}, {@sysvgroups}, {@dioread_lock}, {@grpquota}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0xc202}}, {@usrquota}]}, 0x12, 0x4b4, &(0x7f0000001b00)="$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") (async) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async) link(&(0x7f0000000000)='./file3\x00', &(0x7f00000003c0)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x8, 0x7ffffffc, 0x4}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x1}, 0xffffffffffffff0f) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x4f4, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0x10}, {0x10035, 0xf}, {0x4, 0xc}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x1f, 0x9}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xc0, 0x14}}, @TCA_RATE={0x6, 0x5, {0x81, 0x20}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0xe3e, 0x9a1e, 0x1, 0x80}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x9}, 0x40, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x7, 0x4, 0x1000, 0x6, 0xfffffd3a, 0x3, 0x7, 0x3, 0xffff, 0x7, 0x4, 0x40000000, 0x200, 0x6, 0x0, 0x2, 0x5, 0xffff, 0x1, 0x9, 0x8, 0x4, 0x1, 0x6, 0x5, 0x0, 0xae43, 0x1b0e, 0x3, 0x2, 0x6, 0x0, 0x18dc4b0, 0x10001, 0x6, 0x40, 0xffffffff, 0x7f, 0x1f, 0x1, 0x80, 0x3ff, 0x100, 0x9, 0x400, 0x6, 0x3, 0x5, 0x7fffffff, 0x7, 0xffff8001, 0x80000001, 0x0, 0x67d, 0x40f, 0xfff, 0x0, 0xffffffff, 0x4, 0x7fff, 0x400, 0x5, 0x7fffffff, 0x1, 0x6, 0x0, 0xffff, 0xff, 0x9, 0x3, 0x8, 0x6, 0x1fe9, 0x1, 0x0, 0x8, 0x6, 0x0, 0xffffff6e, 0x9, 0x10001, 0x1, 0x20, 0x20, 0xbc8, 0x84ee, 0x0, 0x2, 0x6, 0x2, 0x7fffffff, 0x9, 0x5, 0xff, 0x3, 0xa2d, 0x8001, 0x1, 0xd3, 0x20, 0x401, 0x8, 0x6, 0x1, 0x3ff, 0x1, 0xc9e, 0x1, 0x7, 0x2, 0x0, 0x38, 0x10000, 0x1, 0x1, 0x7f, 0x0, 0x6791, 0x1000, 0x4, 0x9, 0x1, 0x7, 0x1ff, 0x2, 0x0, 0x8000, 0x3f, 0x6, 0x4, 0x1645, 0x5, 0x5, 0x6, 0x32f9, 0x6, 0x5, 0x6, 0x5, 0x2aa6a62e, 0xfffffc01, 0x0, 0xfffffffb, 0x4, 0x20, 0x548f, 0x0, 0x6, 0x1f, 0x5, 0x6, 0x1, 0x4, 0xffff, 0xa2, 0x80000000, 0x372000e1, 0x7f, 0x7, 0x3f, 0x3, 0x15d, 0x7, 0x8000, 0xffffffff, 0x3db1, 0x2, 0x8, 0x8, 0x2, 0x7, 0x8, 0xfffffffe, 0x4a1, 0x249f, 0x10000, 0x0, 0xffff, 0x3, 0x3452, 0x6, 0x3, 0x8, 0x8001, 0x1000, 0x1, 0x6, 0x200, 0x3f, 0x3, 0x2, 0x2, 0x3, 0x8, 0x20, 0x3f, 0x4, 0x0, 0x3, 0xc9, 0x5, 0x0, 0x3f, 0x400, 0x81, 0xffffffff, 0x10001, 0x82, 0x3, 0x1, 0x8000, 0x3, 0x16, 0xfffffffb, 0x0, 0x401, 0x2, 0xa56, 0x10001, 0x8, 0x3, 0xfc, 0x0, 0x6, 0x1, 0x1ff, 0x5fc, 0x9, 0x4, 0x5, 0x6, 0x1, 0x2, 0x4, 0x101, 0xebe0, 0xb73, 0x3f, 0x6ec, 0x1, 0x8, 0x8, 0x3, 0xcc8000, 0xfffffff9, 0xb937, 0x5, 0x6, 0x0, 0x7, 0x35a9, 0x3, 0x2, 0xfffffffc]}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x2, 0xfff7, 0x80, 0x6, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x5, 0x6, 0x1, 0x1, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x0, 0xfffd, 0x8628, 0x18b7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x3, 0x1, 0x4, 0x9, 0x76b7, 0xdcf, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6e, 0x8, 0x6, 0x3f, 0x7fffffff, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0x2, 0x0, 0x7f, 0x5}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000307036014b0bb4003b0500000000000000000000000300000000000600000b00010073696d706c6500000c000280060002003a000000040006000c00070077caa0d9883ca3a176bdcff0c2a7"], 0x50}}, 0x0) [ 175.510507][ T7271] syz-executor.2: attempt to access beyond end of device [ 175.510507][ T7271] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 175.549941][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 16:39:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) fcntl$setpipe(r1, 0x407, 0x9) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008841}, 0x0) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) [ 175.621144][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28720 sclass=netlink_route_socket pid=7321 comm=syz-executor.0 [ 175.639772][ T7319] loop2: detected capacity change from 0 to 2048 16:39:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 14) 16:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 16:39:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x4f4, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0x10}, {0x10035, 0xf}, {0x4, 0xc}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x1f, 0x9}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xc0, 0x14}}, @TCA_RATE={0x6, 0x5, {0x81, 0x20}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0xe3e, 0x9a1e, 0x1, 0x80}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x9}, 0x40, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x7, 0x4, 0x1000, 0x6, 0xfffffd3a, 0x3, 0x7, 0x3, 0xffff, 0x7, 0x4, 0x40000000, 0x200, 0x6, 0x0, 0x2, 0x5, 0xffff, 0x1, 0x9, 0x8, 0x4, 0x1, 0x6, 0x5, 0x0, 0xae43, 0x1b0e, 0x3, 0x2, 0x6, 0x0, 0x18dc4b0, 0x10001, 0x6, 0x40, 0xffffffff, 0x7f, 0x1f, 0x1, 0x80, 0x3ff, 0x100, 0x9, 0x400, 0x6, 0x3, 0x5, 0x7fffffff, 0x7, 0xffff8001, 0x80000001, 0x0, 0x67d, 0x40f, 0xfff, 0x0, 0xffffffff, 0x4, 0x7fff, 0x400, 0x5, 0x7fffffff, 0x1, 0x6, 0x0, 0xffff, 0xff, 0x9, 0x3, 0x8, 0x6, 0x1fe9, 0x1, 0x0, 0x8, 0x6, 0x0, 0xffffff6e, 0x9, 0x10001, 0x1, 0x20, 0x20, 0xbc8, 0x84ee, 0x0, 0x2, 0x6, 0x2, 0x7fffffff, 0x9, 0x5, 0xff, 0x3, 0xa2d, 0x8001, 0x1, 0xd3, 0x20, 0x401, 0x8, 0x6, 0x1, 0x3ff, 0x1, 0xc9e, 0x1, 0x7, 0x2, 0x0, 0x38, 0x10000, 0x1, 0x1, 0x7f, 0x0, 0x6791, 0x1000, 0x4, 0x9, 0x1, 0x7, 0x1ff, 0x2, 0x0, 0x8000, 0x3f, 0x6, 0x4, 0x1645, 0x5, 0x5, 0x6, 0x32f9, 0x6, 0x5, 0x6, 0x5, 0x2aa6a62e, 0xfffffc01, 0x0, 0xfffffffb, 0x4, 0x20, 0x548f, 0x0, 0x6, 0x1f, 0x5, 0x6, 0x1, 0x4, 0xffff, 0xa2, 0x80000000, 0x372000e1, 0x7f, 0x7, 0x3f, 0x3, 0x15d, 0x7, 0x8000, 0xffffffff, 0x3db1, 0x2, 0x8, 0x8, 0x2, 0x7, 0x8, 0xfffffffe, 0x4a1, 0x249f, 0x10000, 0x0, 0xffff, 0x3, 0x3452, 0x6, 0x3, 0x8, 0x8001, 0x1000, 0x1, 0x6, 0x200, 0x3f, 0x3, 0x2, 0x2, 0x3, 0x8, 0x20, 0x3f, 0x4, 0x0, 0x3, 0xc9, 0x5, 0x0, 0x3f, 0x400, 0x81, 0xffffffff, 0x10001, 0x82, 0x3, 0x1, 0x8000, 0x3, 0x16, 0xfffffffb, 0x0, 0x401, 0x2, 0xa56, 0x10001, 0x8, 0x3, 0xfc, 0x0, 0x6, 0x1, 0x1ff, 0x5fc, 0x9, 0x4, 0x5, 0x6, 0x1, 0x2, 0x4, 0x101, 0xebe0, 0xb73, 0x3f, 0x6ec, 0x1, 0x8, 0x8, 0x3, 0xcc8000, 0xfffffff9, 0xb937, 0x5, 0x6, 0x0, 0x7, 0x35a9, 0x3, 0x2, 0xfffffffc]}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x2, 0xfff7, 0x80, 0x6, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x5, 0x6, 0x1, 0x1, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x0, 0xfffd, 0x8628, 0x18b7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x3, 0x1, 0x4, 0x9, 0x76b7, 0xdcf, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6e, 0x8, 0x6, 0x3f, 0x7fffffff, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0x2, 0x0, 0x7f, 0x5}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000307036014b0bb4003b0500000000000000000000000300000000000600000b00010073696d706c6500000c000280060002003a000000040006000c00070077caa0d9883ca3a176bdcff0c2a7"], 0x50}}, 0x0) 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) fcntl$setpipe(r1, 0x407, 0x9) (async) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008841}, 0x0) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18040000390000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765bc6501bba5eb43b934c771c3834ffe57c4d3ef1228a2dd086b84735fa62caf56d7151670572cf9aedef201244835b27e7bcb9cd1c240449ffbe7060fbd0ad8efe79da11ebd5f839f0fab737fc8aac68c9b"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="7800000024ef6e862d20c1fdf9f86051535f1800", @ANYRES32=r5, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c00020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000c9be000000000000fdffffff00"/96], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x9bc2, 0x200000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x6611, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x6611, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r10, 0x6611, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @exit]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x5b, &(0x7f0000000680)=""/91, 0x40f00, 0x4, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000600)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x19f9b3a6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r8, r7, r9, r7, 0xffffffffffffffff, r10]}, 0x80) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @empty, @broadcast}, 0xc) ioctl$FS_IOC_FSGETXATTR(r11, 0x6611, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r12, 0x6611, 0x0) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x125d00, 0x0) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x82000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x8, &(0x7f0000000000)=@raw=[@generic={0x69, 0xf, 0x8, 0x22f, 0x8000}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x1, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xfd, 0x21, &(0x7f0000000100)=""/33, 0x40f00, 0x2, '\x00', r5, 0xe, r6, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x3, 0x1}, 0x10, 0x0, r7, 0x0, &(0x7f0000000440)=[r11, r12, r13, 0x1, r14, 0xffffffffffffffff]}, 0x80) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mem_connect\x00', r0}, 0x10) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'geneve0\x00', 0x116}) 16:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) fcntl$setpipe(r1, 0x407, 0x9) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008841}, 0x0) [ 175.826180][ T7319] syz-executor.2: attempt to access beyond end of device [ 175.826180][ T7319] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 175.862285][ T7336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28720 sclass=netlink_route_socket pid=7336 comm=syz-executor.0 16:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 16:39:41 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x4f4, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0x10}, {0x10035, 0xf}, {0x4, 0xc}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x1f, 0x9}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xc0, 0x14}}, @TCA_RATE={0x6, 0x5, {0x81, 0x20}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0xe3e, 0x9a1e, 0x1, 0x80}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x9}, 0x40, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x7, 0x4, 0x1000, 0x6, 0xfffffd3a, 0x3, 0x7, 0x3, 0xffff, 0x7, 0x4, 0x40000000, 0x200, 0x6, 0x0, 0x2, 0x5, 0xffff, 0x1, 0x9, 0x8, 0x4, 0x1, 0x6, 0x5, 0x0, 0xae43, 0x1b0e, 0x3, 0x2, 0x6, 0x0, 0x18dc4b0, 0x10001, 0x6, 0x40, 0xffffffff, 0x7f, 0x1f, 0x1, 0x80, 0x3ff, 0x100, 0x9, 0x400, 0x6, 0x3, 0x5, 0x7fffffff, 0x7, 0xffff8001, 0x80000001, 0x0, 0x67d, 0x40f, 0xfff, 0x0, 0xffffffff, 0x4, 0x7fff, 0x400, 0x5, 0x7fffffff, 0x1, 0x6, 0x0, 0xffff, 0xff, 0x9, 0x3, 0x8, 0x6, 0x1fe9, 0x1, 0x0, 0x8, 0x6, 0x0, 0xffffff6e, 0x9, 0x10001, 0x1, 0x20, 0x20, 0xbc8, 0x84ee, 0x0, 0x2, 0x6, 0x2, 0x7fffffff, 0x9, 0x5, 0xff, 0x3, 0xa2d, 0x8001, 0x1, 0xd3, 0x20, 0x401, 0x8, 0x6, 0x1, 0x3ff, 0x1, 0xc9e, 0x1, 0x7, 0x2, 0x0, 0x38, 0x10000, 0x1, 0x1, 0x7f, 0x0, 0x6791, 0x1000, 0x4, 0x9, 0x1, 0x7, 0x1ff, 0x2, 0x0, 0x8000, 0x3f, 0x6, 0x4, 0x1645, 0x5, 0x5, 0x6, 0x32f9, 0x6, 0x5, 0x6, 0x5, 0x2aa6a62e, 0xfffffc01, 0x0, 0xfffffffb, 0x4, 0x20, 0x548f, 0x0, 0x6, 0x1f, 0x5, 0x6, 0x1, 0x4, 0xffff, 0xa2, 0x80000000, 0x372000e1, 0x7f, 0x7, 0x3f, 0x3, 0x15d, 0x7, 0x8000, 0xffffffff, 0x3db1, 0x2, 0x8, 0x8, 0x2, 0x7, 0x8, 0xfffffffe, 0x4a1, 0x249f, 0x10000, 0x0, 0xffff, 0x3, 0x3452, 0x6, 0x3, 0x8, 0x8001, 0x1000, 0x1, 0x6, 0x200, 0x3f, 0x3, 0x2, 0x2, 0x3, 0x8, 0x20, 0x3f, 0x4, 0x0, 0x3, 0xc9, 0x5, 0x0, 0x3f, 0x400, 0x81, 0xffffffff, 0x10001, 0x82, 0x3, 0x1, 0x8000, 0x3, 0x16, 0xfffffffb, 0x0, 0x401, 0x2, 0xa56, 0x10001, 0x8, 0x3, 0xfc, 0x0, 0x6, 0x1, 0x1ff, 0x5fc, 0x9, 0x4, 0x5, 0x6, 0x1, 0x2, 0x4, 0x101, 0xebe0, 0xb73, 0x3f, 0x6ec, 0x1, 0x8, 0x8, 0x3, 0xcc8000, 0xfffffff9, 0xb937, 0x5, 0x6, 0x0, 0x7, 0x35a9, 0x3, 0x2, 0xfffffffc]}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x2, 0xfff7, 0x80, 0x6, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x5, 0x6, 0x1, 0x1, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x0, 0xfffd, 0x8628, 0x18b7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x3, 0x1, 0x4, 0x9, 0x76b7, 0xdcf, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6e, 0x8, 0x6, 0x3f, 0x7fffffff, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0x2, 0x0, 0x7f, 0x5}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@deltclass={0x4f4, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0x10}, {0x10035, 0xf}, {0x4, 0xc}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x1f, 0x9}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xc0, 0x14}}, @TCA_RATE={0x6, 0x5, {0x81, 0x20}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0xe3e, 0x9a1e, 0x1, 0x80}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x9}, 0x40, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x7, 0x4, 0x1000, 0x6, 0xfffffd3a, 0x3, 0x7, 0x3, 0xffff, 0x7, 0x4, 0x40000000, 0x200, 0x6, 0x0, 0x2, 0x5, 0xffff, 0x1, 0x9, 0x8, 0x4, 0x1, 0x6, 0x5, 0x0, 0xae43, 0x1b0e, 0x3, 0x2, 0x6, 0x0, 0x18dc4b0, 0x10001, 0x6, 0x40, 0xffffffff, 0x7f, 0x1f, 0x1, 0x80, 0x3ff, 0x100, 0x9, 0x400, 0x6, 0x3, 0x5, 0x7fffffff, 0x7, 0xffff8001, 0x80000001, 0x0, 0x67d, 0x40f, 0xfff, 0x0, 0xffffffff, 0x4, 0x7fff, 0x400, 0x5, 0x7fffffff, 0x1, 0x6, 0x0, 0xffff, 0xff, 0x9, 0x3, 0x8, 0x6, 0x1fe9, 0x1, 0x0, 0x8, 0x6, 0x0, 0xffffff6e, 0x9, 0x10001, 0x1, 0x20, 0x20, 0xbc8, 0x84ee, 0x0, 0x2, 0x6, 0x2, 0x7fffffff, 0x9, 0x5, 0xff, 0x3, 0xa2d, 0x8001, 0x1, 0xd3, 0x20, 0x401, 0x8, 0x6, 0x1, 0x3ff, 0x1, 0xc9e, 0x1, 0x7, 0x2, 0x0, 0x38, 0x10000, 0x1, 0x1, 0x7f, 0x0, 0x6791, 0x1000, 0x4, 0x9, 0x1, 0x7, 0x1ff, 0x2, 0x0, 0x8000, 0x3f, 0x6, 0x4, 0x1645, 0x5, 0x5, 0x6, 0x32f9, 0x6, 0x5, 0x6, 0x5, 0x2aa6a62e, 0xfffffc01, 0x0, 0xfffffffb, 0x4, 0x20, 0x548f, 0x0, 0x6, 0x1f, 0x5, 0x6, 0x1, 0x4, 0xffff, 0xa2, 0x80000000, 0x372000e1, 0x7f, 0x7, 0x3f, 0x3, 0x15d, 0x7, 0x8000, 0xffffffff, 0x3db1, 0x2, 0x8, 0x8, 0x2, 0x7, 0x8, 0xfffffffe, 0x4a1, 0x249f, 0x10000, 0x0, 0xffff, 0x3, 0x3452, 0x6, 0x3, 0x8, 0x8001, 0x1000, 0x1, 0x6, 0x200, 0x3f, 0x3, 0x2, 0x2, 0x3, 0x8, 0x20, 0x3f, 0x4, 0x0, 0x3, 0xc9, 0x5, 0x0, 0x3f, 0x400, 0x81, 0xffffffff, 0x10001, 0x82, 0x3, 0x1, 0x8000, 0x3, 0x16, 0xfffffffb, 0x0, 0x401, 0x2, 0xa56, 0x10001, 0x8, 0x3, 0xfc, 0x0, 0x6, 0x1, 0x1ff, 0x5fc, 0x9, 0x4, 0x5, 0x6, 0x1, 0x2, 0x4, 0x101, 0xebe0, 0xb73, 0x3f, 0x6ec, 0x1, 0x8, 0x8, 0x3, 0xcc8000, 0xfffffff9, 0xb937, 0x5, 0x6, 0x0, 0x7, 0x35a9, 0x3, 0x2, 0xfffffffc]}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x2, 0xfff7, 0x80, 0x6, 0x2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x5, 0x6, 0x1, 0x1, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0x0, 0xfffd, 0x8628, 0x18b7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x3, 0x1, 0x4, 0x9, 0x76b7, 0xdcf, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6e, 0x8, 0x6, 0x3f, 0x7fffffff, 0x80000000}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x2, 0x2, 0x0, 0x7f, 0x5}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000307036014b0bb4003b0500000000000000000000000300000000000600000b00010073696d706c6500000c000280060002003a000000040006000c00070077caa0d9883ca3a176bdcff0c2a7"], 0x50}}, 0x0) 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10, 0x0}, 0x1) sendmsg$tipc(r0, &(0x7f0000000b00)={&(0x7f0000000880)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="2441af4ce48980f7d96143dfc5ab7b1078f46f92d1a4ba3d51a883f82dae49b31be0799e0439de5e616055a750476f26c79317b7fe1543d4c1a304ede7f99d8d36b6cae976acf8dc740d0cc4f727a47a39800cfad77ca6c6563c97c35cef060d26dcff6ecc35b3759f0f1532c6460f751c644e84ab3ef3bc17314232ee887ffa36c94696a465f735ca54", 0x8a}, {&(0x7f0000000980)="00c8549a538330082a", 0x9}, {&(0x7f00000009c0)='K', 0x1}, {&(0x7f0000001800)="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", 0x1000}], 0x4, &(0x7f0000000a40)="fed2f11c1b678c110d675c62670486bb6fce12e2b399a07a6eb98155ec54b22efb0e458f4ac387079ce8c86bbb37b03392f7013f84a515cdb2db8a7f7f2a18cad5db08a1a5d6cc41e8ad24141d78b8db76f6924c12b8861186291f7148468fbcbf5c35a0c7aa3722bcc243d9bb46d7e4274194f348b47f8b018370fe0dc4d95cb72e97feb9d14a291adff310506ab628cd6e512c9ff48db523", 0x99, 0x4000001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @mcast2, 0x29a}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="bb197927601749f8e0f4e01fef03c870f4c70dcd87a59d273eda5bb90bf5384d7c71f5082263001dbf8ff8b5b538bcb894a8ef37d07da15fafec983fb2eb", 0x3e}, {&(0x7f00000000c0)="03337227a70e84d77a82f15f192c845881705c157a3d3f362d45c7e8fee4b4b4f539801bd03b122460d39d0ba0736ffcbf9b1a67c7f253", 0x37}], 0x2, &(0x7f0000000240)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xffff, 0x8000, 0x7fffffff, 0x6, 0x7, 0x5, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x60, 0x200c4}, {&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x3ff, @private1, 0x40}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d934f3ed038e603fcdc6ed5d37680a2e1c7af314fcac6b86c52a955e97b276051903346885c021b0f912c113f9c0fa4111d35c51ab07fd307a84f4ceb07fe168a1d208554706f7d4f20c5afa2ce242d78e87b8da2b07d7b32d0f05fd457bd118d38675968ad1fe383c8f4e485bfd96a0710710a317aee1c9c47eed1d165f3874a045e8ee28f7f89eb5bf35f4055b329a36bab0728a1a7acfdf230b3c61637e08dfff5a099c9eb50eb807884ea14f626f5451937dd07a0689cc89e5ce218f830f", 0xc0}, {&(0x7f00000003c0)="116e39d1a1d058b70f9fbdbcc5c734c358023e1d730d13e2468d268c7e9a2cfe2f8cd7c2bd9fb79d96a2b620b6951ee1b74953cf0b31e628afb194842ff964d3b818ab7094595cbd43184c64530ac3b1749f7fe8cd5ced1302518a0986739db56531ff7371997e872988fd34e0e14f67513d3e296e108c4d4bc73abf4884ea21391dd6668656831bed1109a67befc8472f976dcfddfa6657b3151eb967de8e12b0d7deda78765c4dc016bfa232301c7e558b6bf1ed3b04ff430f69ca1e460f2f4f7e7367ecbefccc69", 0xc9}, {&(0x7f00000004c0)="5ad8a163a77d20adadd67278ca9cf4930317d81a605f23592cbbe2d4434095d5a6afee8332831e901528e58be1cf11ac77ea9190c9aa1642ee88b13e9ac35a0f9fdfba7fed7142d6dc4244c7b4cf3ad8248cba8741225eb3b4a95e7dd3e70b2aa517ed7f5140c3", 0x67}], 0x3, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xc2f}}, @authinfo={0x18, 0x84, 0x6, {0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0xc8, 0x313, 0x200, 0x0, 0x7, 0x9, 0x4, 0x101}}], 0x80, 0x4004}, {&(0x7f00000005c0)=@in6={0xa, 0x4e23, 0x0, @local, 0xa35}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="e2b64bbdf8ad9da3e7c48f1c204cd6e2d1a30f5d43649fa20bbae4728dc4bb3564840416ac1beafffd17f80309aadbf1a260da567ba3e271b3cb7de97074092ce0f6aaad75f4a0b9316da5addecc228ad0b2466737d6873cc0e019be11aea92c25840d038156cca4762ee7de65b21e7ffa35a8788cdf076d75ce55f9fbcfafe4c8a8a7e56ae08c9c7838cc1001d50edf3d2d125c9d2e93d8b59bdf37661409a472f61beff6d2f2f0c5f6449020d8ca", 0xaf}, {&(0x7f00000006c0)="0f9910e61bf719b145ff75530cc62103da8e724267773fecdd591da533003dd8d71591ed45e7234dbe29d9891c817713d7199af35f8795af97d576d46a967fd7fda4f2eda634753ced080fdb6f8255c56fee96dcd4f25252f5a4e374d443615755ca", 0x62}], 0x2, &(0x7f0000000780)=ANY=[@ANYRES64=r7], 0x18, 0x8010}], 0x3, 0x80) [ 175.928679][ T7339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61220 sclass=netlink_route_socket pid=7339 comm=syz-executor.3 [ 175.948191][ T7346] loop2: detected capacity change from 0 to 2048 [ 175.969669][ T7354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28720 sclass=netlink_route_socket pid=7354 comm=syz-executor.0 [ 175.986943][ T26] audit: type=1400 audit(1690648781.619:277): avc: denied { read } for pid=7337 comm="syz-executor.3" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.028177][ T26] audit: type=1400 audit(1690648781.619:278): avc: denied { open } for pid=7337 comm="syz-executor.3" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 16:39:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 15) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16:39:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18040000390000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765bc6501bba5eb43b934c771c3834ffe57c4d3ef1228a2dd086b84735fa62caf56d7151670572cf9aedef201244835b27e7bcb9cd1c240449ffbe7060fbd0ad8efe79da11ebd5f839f0fab737fc8aac68c9b"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="7800000024ef6e862d20c1fdf9f86051535f1800", @ANYRES32=r5, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c00020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000c9be000000000000fdffffff00"/96], 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x9bc2, 0x200000) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x6611, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x6611, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r10, 0x6611, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @exit]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x5b, &(0x7f0000000680)=""/91, 0x40f00, 0x4, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000600)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x19f9b3a6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r8, r7, r9, r7, 0xffffffffffffffff, r10]}, 0x80) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @empty, @broadcast}, 0xc) ioctl$FS_IOC_FSGETXATTR(r11, 0x6611, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r12, 0x6611, 0x0) (async) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x125d00, 0x0) (async) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x82000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x8, &(0x7f0000000000)=@raw=[@generic={0x69, 0xf, 0x8, 0x22f, 0x8000}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x1, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xfd, 0x21, &(0x7f0000000100)=""/33, 0x40f00, 0x2, '\x00', r5, 0xe, r6, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x3, 0x1}, 0x10, 0x0, r7, 0x0, &(0x7f0000000440)=[r11, r12, r13, 0x1, r14, 0xffffffffffffffff]}, 0x80) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mem_connect\x00', r0}, 0x10) (async) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'geneve0\x00', 0x116}) 16:39:41 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000fc8914040027bd7000fbdbdf2508000100020000000842d3c5974aaa76"], 0x20}, 0x1, 0x0, 0x0, 0x4000100}, 0x20004080) 16:39:41 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10, 0x0}, 0x1) (async) sendmsg$tipc(r0, &(0x7f0000000b00)={&(0x7f0000000880)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="2441af4ce48980f7d96143dfc5ab7b1078f46f92d1a4ba3d51a883f82dae49b31be0799e0439de5e616055a750476f26c79317b7fe1543d4c1a304ede7f99d8d36b6cae976acf8dc740d0cc4f727a47a39800cfad77ca6c6563c97c35cef060d26dcff6ecc35b3759f0f1532c6460f751c644e84ab3ef3bc17314232ee887ffa36c94696a465f735ca54", 0x8a}, {&(0x7f0000000980)="00c8549a538330082a", 0x9}, {&(0x7f00000009c0)='K', 0x1}, {&(0x7f0000001800)="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", 0x1000}], 0x4, &(0x7f0000000a40)="fed2f11c1b678c110d675c62670486bb6fce12e2b399a07a6eb98155ec54b22efb0e458f4ac387079ce8c86bbb37b03392f7013f84a515cdb2db8a7f7f2a18cad5db08a1a5d6cc41e8ad24141d78b8db76f6924c12b8861186291f7148468fbcbf5c35a0c7aa3722bcc243d9bb46d7e4274194f348b47f8b018370fe0dc4d95cb72e97feb9d14a291adff310506ab628cd6e512c9ff48db523", 0x99, 0x4000001}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @mcast2, 0x29a}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="bb197927601749f8e0f4e01fef03c870f4c70dcd87a59d273eda5bb90bf5384d7c71f5082263001dbf8ff8b5b538bcb894a8ef37d07da15fafec983fb2eb", 0x3e}, {&(0x7f00000000c0)="03337227a70e84d77a82f15f192c845881705c157a3d3f362d45c7e8fee4b4b4f539801bd03b122460d39d0ba0736ffcbf9b1a67c7f253", 0x37}], 0x2, &(0x7f0000000240)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xffff, 0x8000, 0x7fffffff, 0x6, 0x7, 0x5, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x60, 0x200c4}, {&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x3ff, @private1, 0x40}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d934f3ed038e603fcdc6ed5d37680a2e1c7af314fcac6b86c52a955e97b276051903346885c021b0f912c113f9c0fa4111d35c51ab07fd307a84f4ceb07fe168a1d208554706f7d4f20c5afa2ce242d78e87b8da2b07d7b32d0f05fd457bd118d38675968ad1fe383c8f4e485bfd96a0710710a317aee1c9c47eed1d165f3874a045e8ee28f7f89eb5bf35f4055b329a36bab0728a1a7acfdf230b3c61637e08dfff5a099c9eb50eb807884ea14f626f5451937dd07a0689cc89e5ce218f830f", 0xc0}, {&(0x7f00000003c0)="116e39d1a1d058b70f9fbdbcc5c734c358023e1d730d13e2468d268c7e9a2cfe2f8cd7c2bd9fb79d96a2b620b6951ee1b74953cf0b31e628afb194842ff964d3b818ab7094595cbd43184c64530ac3b1749f7fe8cd5ced1302518a0986739db56531ff7371997e872988fd34e0e14f67513d3e296e108c4d4bc73abf4884ea21391dd6668656831bed1109a67befc8472f976dcfddfa6657b3151eb967de8e12b0d7deda78765c4dc016bfa232301c7e558b6bf1ed3b04ff430f69ca1e460f2f4f7e7367ecbefccc69", 0xc9}, {&(0x7f00000004c0)="5ad8a163a77d20adadd67278ca9cf4930317d81a605f23592cbbe2d4434095d5a6afee8332831e901528e58be1cf11ac77ea9190c9aa1642ee88b13e9ac35a0f9fdfba7fed7142d6dc4244c7b4cf3ad8248cba8741225eb3b4a95e7dd3e70b2aa517ed7f5140c3", 0x67}], 0x3, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xc2f}}, @authinfo={0x18, 0x84, 0x6, {0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0xc8, 0x313, 0x200, 0x0, 0x7, 0x9, 0x4, 0x101}}], 0x80, 0x4004}, {&(0x7f00000005c0)=@in6={0xa, 0x4e23, 0x0, @local, 0xa35}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="e2b64bbdf8ad9da3e7c48f1c204cd6e2d1a30f5d43649fa20bbae4728dc4bb3564840416ac1beafffd17f80309aadbf1a260da567ba3e271b3cb7de97074092ce0f6aaad75f4a0b9316da5addecc228ad0b2466737d6873cc0e019be11aea92c25840d038156cca4762ee7de65b21e7ffa35a8788cdf076d75ce55f9fbcfafe4c8a8a7e56ae08c9c7838cc1001d50edf3d2d125c9d2e93d8b59bdf37661409a472f61beff6d2f2f0c5f6449020d8ca", 0xaf}, {&(0x7f00000006c0)="0f9910e61bf719b145ff75530cc62103da8e724267773fecdd591da533003dd8d71591ed45e7234dbe29d9891c817713d7199af35f8795af97d576d46a967fd7fda4f2eda634753ced080fdb6f8255c56fee96dcd4f25252f5a4e374d443615755ca", 0x62}], 0x2, &(0x7f0000000780)=ANY=[@ANYRES64=r7], 0x18, 0x8010}], 0x3, 0x80) 16:39:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:41 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000fc8914040027bd7000fbdbdf2508000100020000000842d3c5974aaa76"], 0x20}, 0x1, 0x0, 0x0, 0x4000100}, 0x20004080) [ 176.174764][ T7346] syz-executor.2: attempt to access beyond end of device [ 176.174764][ T7346] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18040000390000000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765bc6501bba5eb43b934c771c3834ffe57c4d3ef1228a2dd086b84735fa62caf56d7151670572cf9aedef201244835b27e7bcb9cd1c240449ffbe7060fbd0ad8efe79da11ebd5f839f0fab737fc8aac68c9b"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="7800000024ef6e862d20c1fdf9f86051535f1800", @ANYRES32=r5, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c00020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000c9be000000000000fdffffff00"/96], 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000340), 0x9bc2, 0x200000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r8, 0x6611, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r9, 0x6611, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r10, 0x6611, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @exit]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x5b, &(0x7f0000000680)=""/91, 0x40f00, 0x4, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000600)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0xc, 0x19f9b3a6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r7, r8, r7, r9, r7, 0xffffffffffffffff, r10]}, 0x80) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @empty, @broadcast}, 0xc) (async) ioctl$FS_IOC_FSGETXATTR(r11, 0x6611, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r12, 0x6611, 0x0) (async) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x125d00, 0x0) (async) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x82000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x8, &(0x7f0000000000)=@raw=[@generic={0x69, 0xf, 0x8, 0x22f, 0x8000}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x1, 0x9, 0xffffffffffffffe0, 0xfffffffffffffffc}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xfd, 0x21, &(0x7f0000000100)=""/33, 0x40f00, 0x2, '\x00', r5, 0xe, r6, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x3, 0x1}, 0x10, 0x0, r7, 0x0, &(0x7f0000000440)=[r11, r12, r13, 0x1, r14, 0xffffffffffffffff]}, 0x80) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mem_connect\x00', r0}, 0x10) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'geneve0\x00', 0x116}) 16:39:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:41 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000fc8914040027bd7000fbdbdf2508000100020000000842d3c5974aaa76"], 0x20}, 0x1, 0x0, 0x0, 0x4000100}, 0x20004080) [ 176.275642][ T7385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61220 sclass=netlink_route_socket pid=7385 comm=syz-executor.3 [ 176.334141][ T7388] loop2: detected capacity change from 0 to 2048 [ 176.404145][ T7394] FAULT_INJECTION: forcing a failure. [ 176.404145][ T7394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.417744][ T7394] CPU: 0 PID: 7394 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 176.428103][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 176.438233][ T7394] Call Trace: [ 176.441551][ T7394] [ 176.444532][ T7394] dump_stack_lvl+0xda/0x130 [ 176.449183][ T7394] dump_stack+0x15/0x20 [ 176.453387][ T7394] should_fail_ex+0x21f/0x230 [ 176.458113][ T7394] __should_fail_alloc_page+0xfd/0x110 [ 176.463682][ T7394] __alloc_pages_bulk+0x106/0x6b0 [ 176.468751][ T7394] ? __kmalloc+0x95/0x1a0 [ 176.473188][ T7394] copy_splice_read+0xfa/0x4b0 [ 176.474919][ T7388] syz-executor.2: attempt to access beyond end of device [ 176.474919][ T7388] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 176.478019][ T7394] ? selinux_file_permission+0x225/0x350 [ 176.478057][ T7394] ? splice_folio_into_pipe+0x290/0x290 [ 176.503262][ T7394] splice_direct_to_actor+0x2aa/0x690 [ 176.508819][ T7394] ? direct_file_splice_eof+0x70/0x70 [ 176.514266][ T7394] do_splice_direct+0x10d/0x190 [ 176.519237][ T7394] ? do_splice_direct+0x190/0x190 [ 176.524433][ T7394] do_sendfile+0x3b6/0x9a0 [ 176.528985][ T7394] __x64_sys_sendfile64+0x110/0x150 [ 176.534282][ T7394] do_syscall_64+0x41/0xc0 [ 176.538743][ T7394] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 176.544752][ T7394] RIP: 0033:0x7fa29008fb29 [ 176.549190][ T7394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 176.569172][ T7394] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 176.577620][ T7394] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 176.585598][ T7394] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 176.593588][ T7394] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 16:39:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 16) 16:39:42 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10, 0x0}, 0x1) (async) sendmsg$tipc(r0, &(0x7f0000000b00)={&(0x7f0000000880)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="2441af4ce48980f7d96143dfc5ab7b1078f46f92d1a4ba3d51a883f82dae49b31be0799e0439de5e616055a750476f26c79317b7fe1543d4c1a304ede7f99d8d36b6cae976acf8dc740d0cc4f727a47a39800cfad77ca6c6563c97c35cef060d26dcff6ecc35b3759f0f1532c6460f751c644e84ab3ef3bc17314232ee887ffa36c94696a465f735ca54", 0x8a}, {&(0x7f0000000980)="00c8549a538330082a", 0x9}, {&(0x7f00000009c0)='K', 0x1}, {&(0x7f0000001800)="d49de15af360228a58e62f3196693461eeaa661085b564b22feeb4d510afef531937cbcf027a0611bcba37209b7a1fa3bfd90e0acea1ac1814478b61b61e0bc5bfeedaa3b88e68b9b2c0d38ba8e1d43c1e5602c62c54960942e51ffd50109c4688bece85c41bf6d6cba101a30f3e287c53acdfcd89e151589f6df2849e1d79434ab091bd94df6f8fe99cbe47fb84759b8e89a02ebfc2ea51cfb7c8cfd569828847f11d9bbc33d1e86cbaf0b38dc58fbd9a3f05c40c3d06a956c6b7ee23b639ea7c35a8fb904db1710664842b085a17bd91977e9906e36de39b8aac706ebff9fa6fedf5dffdf0ebfce30b04bded40216f1b9bdc98645c1e4c40442e9cdf5d2213001bb84a6c4573f5ff6f668ed916e3bab2e436f2410f583b3c9ee6a584a3305664c838d852ed2ca39f0c47d27a44b02c2cf04d5dbc48612a5e7ae410a9b7fb96b796f2a9fd2e2941c8ac1d023520b58a9dbd92cc905fc3def6a0c9e367176329028e4498a30146e95c378a03722553fd9ddd89754bcea6adc1e0ba2749cfb2c0b328bbb08288ff7b8ee34f99f2442816fa0cf3d0d8c057bcd8c9d0819a2b4b88780d3b5d30b82777f2ac3d58bb383bf599d4099beeab3ae2cdef7d58fa38752d3e2464467359228f294d9f1832027ce4658cae9c6b231f552b44b52daf0188c60744b35f13a4e7a7c2faeb0dc6160f416a96b588f6b4ef003fb8cca7c1da271a0ca8d192624dd2ca451cb93ba8a3544ab87a553957661df09bc5c5a2269d72d2c1bf0a12f2afdc8eefb13df5bab76a7666d9e59c27d6986b975b247814ac3238ac272616a353ecc7229444388f4bc1fb5f0b30462d2d36541736ad6886b37089277f18862db3e91cc526d15f4c9c7851d4699eca4d07b476d7100c9ab261796c3569ac8cef52e06267f80156a169737199c2328a522ea114c3194506b8fe0ae804d4b0ab5f417a097dac5578626e6769de7ad368b1c7c26a5d11aa8e69577fc4b4675aceb7e4820583ce928d9623b5c9d91df2ee28c5b2c1fd1cd23d35ab46c694f649427cdab308f2e98bb0b1249c174fa7737221fdf6b65e8bc9c177489f5633883272bbc79c5bba306b5a6d5197c15a116ddecf68f72990fc0adcf2e18dd1806076e58608d7235420f0cefd3d5a046a405911f55f9378199c22acb4b4b2d9635bb8e28c12d37b769b1812b8351c4dd388bf8b73c29f2c0b51312395b25ec21717569c8ba12336c37ec4877f6a6e226e5e72599686ef26baabcb56027df2dd1a0c41f0b77aaa53831fe287de628ea55d82c668d4517d3fdd4c08ab0d9c002a078c6b30b87b7069c0e01b7a266d88a7a597a1410b222071aa468fbc90c5986af72312766af8b01ea1e7141cb3bd551ca13edca59d5d9243e63ef6dc5c48e368f195ce7476284040a54cb5c5825ec140d387c72203d3968cd2c26a26dbfdac14248a04a32b4975e9629ce484fab23d382b3c23201ef6a96a4a38886693e37ed6e6be58e037f1f7207630153cde6ec6f25d2efde209a55d0367094da0cf860362481e9f6cb6dc06567205aae8c2c4f51d6f19e3ae967b1313334342daece04f28f6a41a21d9468ce448c58cd9c7eafd173d6c51ad03a891bffb8921ea24f23c2fe2797064097214ded8f7a1850e6cf358b6ffa969c650e541afa897f634119b3acc84996abcc0189fd3228498f6cf985f3638d2995eefd088a06d49a22e97f7b026be1dcff4f43ee5977ba6dc5809176cd395ee607e1e6e872ead82c77e2d2a8a864ecaccf87dc0f93ce7949745d0ba7c2b231f20a2173c035aea526dc38c46c615833326647ddd1438273bcd9443668b8ff8f2b66aedb3d2fb0c2a4ddc7976f29f860bdb04a1fb2d39dcc51e8949ac58f4d8ac81a5eab3f43d496d4be724355be9a77079bcbcae4fecf3baffc46c9d5309bc90c06aac9265e13bc62130611b28a5a28b9f7633d7ce439f9eb02c84a2a93a6383ea89d0701de152a17fbb55bb7d77b452d7b5dbcce5dfec581e287ff6a7703b8a65c49ceb2d7bfaa3563ac04657b36fe1367c9acb5cddc7ba502b505f6fc38b0f0d2d5bed24f004451a4a5591af778cd55d3a8125940664f4c80c9db9650e9817b455e31bf99163d2a9594be631791586a6da2872f2a61135612a0cd2880d4db79e1d75bc9e454593a23445fbc1089753d89c1380fde4766579db4c33ec5db6c53e4984ef875bc8e3cb932dae5daea16f5cae1b0c54b91029de0a319618307c2ba93996e5e26b2fb822676cb29eedc34d22a9e62a5841f20eefaaa96508e3b0c9744c53488012571996fc7181c1dd0e60bc09df96f501c6c0c0d46d994765c9c2aa95209d2106cc053193aa5b88689344bbdc81f1e64df78f80ed824819ab74965b7d13de34ef2d8c28a42be13fc50fa84042cbf35d3225e2661a2fdeb670971d78b18fadffa020a2a6317b795513deace854b94035e97dde0d04476cce1cc83ad806cc40201e274f19bb49cd9bdf7efd21276ac2f3f033e9e0154da39d30227f4cf6c06a219a3e076972c5479e0ca7b8735f351490c0cadd8971cda531fadb30b1c76c9b206a2d189310d2fc5aaa7b86b933886a860201a53cd4aa9981f39c01ed7b1da23b023cd7a70b35bc1c66fa482326fa9021ca00c7fef221e8ddc20de4f03ae6ea85429460d17cf06f7a8c17d62df2296780a74d25aeda63fc10bad0c4cbaabcb291022c139c3a4b6039cd70a4c74b904dd6fdcceb8e7a3f0250611414eaa58f762e2fbb4376a523dd31c01cee52172b63cb28a92c5095427eeafb56d012edd530d598f94612c736588358fc3694ac885ef19e3ed0ce2bd325b4b997c836b9c4d721888bfc9a63c0c5e4826ea0efb4d3b21f0d76457798b1f13dd769e4c1be12983ded948923a05ca4570c1258fbe7c11d47e9548f33b9d1340b291cb5e5ce4c5a049506e428de037d1dbecf396b33ed01a1855ff62531ca370af3c22fdc9d4f81fce9d4abff88badb13977942dc16ed0f494c379d01b4ddbdca6a1d996599e398d6665da3fc44ede3f17416e58003bbe3cefba70d3b1db0ddcc3151561fb2e1b0c3498b18b8db88c1aab2292d73e6b6116ca12b0a1eced06390b5f91ade5e3073b906b6ee52fa2cdef013ae37bed0d0e7b7213eabed200a2bc1e18a903aa560ab7523423f29c116035cf95b13d9f283ca319b59b91b80617dbd4d1ba6cbb44aaa64bda36f6379865b8d47fd52a4b8aaab2519170cea1dabda705918ca1d039307a14c999feaa379f0b74c7faa268cb16fca63cffaa4527f1215ef2a8b0a8b94c0bd678bfbc0ae322748e9d605099f0e8243827413e9704bd199e6f8a73f37730e1fc8d578b16efe651789f1e356465f42722fd2b4c14c2c580c3516c6389c800faa8854a110c7fc7bca722291f89bad7458a144e714c9e91eddcca5c8aded9edc4efb143b1d0e1a0a8847b80b8aa81d68b3c5eec8ed62750ab447b416a99189f114a879d216538bedca8bfd1d40d8ef513db9cdb4e074e30aa0fdf79e72a4ba552a4c810f27dd9084b7d8b8b882640de052c248f0198cbe27bd2dbe26bd96a415cc5daff6f366e09b4a2ef2e2f25c0121a730a832eaa37cd6bca25ce7f7342fd8dbe05c8eb10dfbdd9a8d476be248665e304a79ea342c2164ec0d1d9297fcbd8608c3aae1c2daaa026b1225be3793e9855efb385a2693d3e6e0dfb10cbece76300acf7e0f76aa3530540887e85c13e9931b960e4c1062603b3d806eb2a268de9d3007b8f6551df183641e8e12adfabac8f8fe17885ae1fc07a5e627075f45f5b2095e856cc5174707dcac0511fb9aee4061adf2396ce84625fe4a7794a8d92919528770ed50a83e88a12e8a902c96a1d33e4c467b87f4115657e82463b62470c5b89b5dc9f8ce57d57eb6e278a12d888950d259bd2dd7bb5db6092ed86b6414d12adedb00cca14d68dae75a320d73a810b7f868cdc4c4ca70504348d04122cfba275d1ffb2d17816cea6ada1ab8c81be6f9198c4aafbb39bcbe251d821142f4db817289a3ac4b307d5e4820f7841bc6ee22617dc5622458685086b9f172813d4e42026b9bd3adef612ede3156c568799c4a22db692c2284a5896dd2a4ebef1b8be0b535f9ef8a531788bd2a953f53d8a900ff025d48d43007728eaa999d42ba773084fad8368d0844f07bec31a66ec739347e716edc11e9e0eed55445486fa80e093625a3a86a4d5dafef2ecddb071b9c48253c31397c004bbeb8f5c32dada54b5b93ed56428370dbc879791dff6398c867fc827193e1ed35a1247e90654009d684640d77cc48e243a56e14b88088ccc89618a6c86341ab02b08efd03c39665bdb930cb7f2150b194fc4e6089a830740d74f511006f10212169e2094cbf731d46337b29b3283f40f19576dda0e61e23479dc963a3306a73eeaa1c6fde8d2931934cd158712c42bfa2964369ab4d73a2e57feb34553e5084ab038ac5298af441547ca7b18c7727ff1f32d1d8b5ed514d4bd55a9f6a2611ef4024a54fc291fcdae06dabe1c437f3d79b19984ce12c86c7197268de216c0a74e924a288abff1d9fd209b38de81811413ee975bdb0593202c4a41883360608a68bdd1da2d036baa44ca3011b924f2b00646a4ccaa3bde7769e4a731b48373f8a15c2ef80d962f516a226ec684889dae9c9e1a735792a54806b83769e7a5f126de18e1c02bc91aaa11f500705f770a1c94d313a1e2a9a6469a409ffac527332a6087c20b217ad19f62ca8d1bf09cec7e5a0d84c5aaa7948fc6e188c39568be39cf7fac34e4805fbf04d2579ca2f447dd34dd5054e7c52363ae88bb59e1d35f6b310e6df13aacd1d2eca439ee6616dc0bc6e16dea57ef1a6db3a6e09f16048b0e4bd445054e9f7e12dcfbe5ffd4bb5578f4d89459cd4dd57ebfc42ea7143e98f5b2822d289bf636ad40a1cde04b2ce5b6ca3c756f94d1378b9eaf4e41db90b9db7cbabbc1aa89f74bee379da1173c05a1f2e4808b2e1240e63a54ba55e64677f3273f214e667e5785ea722444b52d640847b91ae202748292e4a20985b445973bbd79e36ed7ee8d36289a2a91a46e5ad6f1cd0bde9dec4ad46ea448c393f7470ec880527fd4cd840b0c437f655efd5e30e6f81f63db17a46e15d292a4352ebbbfc87c456dcbfeb831e81d32604059f6d2641650f7ccfd0d2c38765cc412d70f08083dbd3091113b7f3f3195634c06de68aaf5f4768bcda422ba3bf559e56728ee226501f2a65f10fec0eb597bc19a089a1793421f13b081a29cb9921022db628463a69f8242afe0eeb38cd9b5b9d86a932f26b8b7dd733065053f6503343025207702e8d7f834254cd3691a67194e10abcea9d837107faedc0933d19443884af9a44d398cb43defeefd0502d6a96573f1b4b0b3ff612eead91d1100165b85c4a29a81e19592045e8fc37fead8174569bb1a54d5ce746b1eb9807a226df204e8b384d39728d209868f9e9eb5f1f886a74d557d5cfcabb334fdefa38533f8d2e60f9d05e02d0a0a790e808499172cd2dd585de2ffad007146cefa2f872a163170c4eb45e68cb0e7972f1138e6ac3b2cf3a3eb2befafea4767c5cfcf3c5a9a7f314ee07cf125e16d5d06ed4757e5f6d1d582eba73abcaa4aeed7d059befee48fc3c809c3d836af736f8674e44635047ab89761c3fb775766038f777ed6cb8919339ba19d27f364bf561d093f2ddb2a003bfc11d4ed40b70291d8f3c3f8206b944c5c8003af16c69e927bc7ef23a65fa8f13fc238a6f6ca89bcafb32bbc1705326b3673e1d95fe597dc2b8adaf14b43413c9eef1fe", 0x1000}], 0x4, &(0x7f0000000a40)="fed2f11c1b678c110d675c62670486bb6fce12e2b399a07a6eb98155ec54b22efb0e458f4ac387079ce8c86bbb37b03392f7013f84a515cdb2db8a7f7f2a18cad5db08a1a5d6cc41e8ad24141d78b8db76f6924c12b8861186291f7148468fbcbf5c35a0c7aa3722bcc243d9bb46d7e4274194f348b47f8b018370fe0dc4d95cb72e97feb9d14a291adff310506ab628cd6e512c9ff48db523", 0x99, 0x4000001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @mcast2, 0x29a}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="bb197927601749f8e0f4e01fef03c870f4c70dcd87a59d273eda5bb90bf5384d7c71f5082263001dbf8ff8b5b538bcb894a8ef37d07da15fafec983fb2eb", 0x3e}, {&(0x7f00000000c0)="03337227a70e84d77a82f15f192c845881705c157a3d3f362d45c7e8fee4b4b4f539801bd03b122460d39d0ba0736ffcbf9b1a67c7f253", 0x37}], 0x2, &(0x7f0000000240)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xffff, 0x8000, 0x7fffffff, 0x6, 0x7, 0x5, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x60, 0x200c4}, {&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x3ff, @private1, 0x40}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d934f3ed038e603fcdc6ed5d37680a2e1c7af314fcac6b86c52a955e97b276051903346885c021b0f912c113f9c0fa4111d35c51ab07fd307a84f4ceb07fe168a1d208554706f7d4f20c5afa2ce242d78e87b8da2b07d7b32d0f05fd457bd118d38675968ad1fe383c8f4e485bfd96a0710710a317aee1c9c47eed1d165f3874a045e8ee28f7f89eb5bf35f4055b329a36bab0728a1a7acfdf230b3c61637e08dfff5a099c9eb50eb807884ea14f626f5451937dd07a0689cc89e5ce218f830f", 0xc0}, {&(0x7f00000003c0)="116e39d1a1d058b70f9fbdbcc5c734c358023e1d730d13e2468d268c7e9a2cfe2f8cd7c2bd9fb79d96a2b620b6951ee1b74953cf0b31e628afb194842ff964d3b818ab7094595cbd43184c64530ac3b1749f7fe8cd5ced1302518a0986739db56531ff7371997e872988fd34e0e14f67513d3e296e108c4d4bc73abf4884ea21391dd6668656831bed1109a67befc8472f976dcfddfa6657b3151eb967de8e12b0d7deda78765c4dc016bfa232301c7e558b6bf1ed3b04ff430f69ca1e460f2f4f7e7367ecbefccc69", 0xc9}, {&(0x7f00000004c0)="5ad8a163a77d20adadd67278ca9cf4930317d81a605f23592cbbe2d4434095d5a6afee8332831e901528e58be1cf11ac77ea9190c9aa1642ee88b13e9ac35a0f9fdfba7fed7142d6dc4244c7b4cf3ad8248cba8741225eb3b4a95e7dd3e70b2aa517ed7f5140c3", 0x67}], 0x3, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xc2f}}, @authinfo={0x18, 0x84, 0x6, {0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0xc8, 0x313, 0x200, 0x0, 0x7, 0x9, 0x4, 0x101}}], 0x80, 0x4004}, {&(0x7f00000005c0)=@in6={0xa, 0x4e23, 0x0, @local, 0xa35}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000600)="e2b64bbdf8ad9da3e7c48f1c204cd6e2d1a30f5d43649fa20bbae4728dc4bb3564840416ac1beafffd17f80309aadbf1a260da567ba3e271b3cb7de97074092ce0f6aaad75f4a0b9316da5addecc228ad0b2466737d6873cc0e019be11aea92c25840d038156cca4762ee7de65b21e7ffa35a8788cdf076d75ce55f9fbcfafe4c8a8a7e56ae08c9c7838cc1001d50edf3d2d125c9d2e93d8b59bdf37661409a472f61beff6d2f2f0c5f6449020d8ca", 0xaf}, {&(0x7f00000006c0)="0f9910e61bf719b145ff75530cc62103da8e724267773fecdd591da533003dd8d71591ed45e7234dbe29d9891c817713d7199af35f8795af97d576d46a967fd7fda4f2eda634753ced080fdb6f8255c56fee96dcd4f25252f5a4e374d443615755ca", 0x62}], 0x2, &(0x7f0000000780)=ANY=[@ANYRES64=r7], 0x18, 0x8010}], 0x3, 0x80) 16:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16:39:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 1) 16:39:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3a) 16:39:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) dup3(r1, r2, 0x80000) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffccd) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4000001) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r3, @ANYBLOB="45070200000000001c0012800b000100627269646765"], 0x3c}}, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000107000002000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000050011000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) [ 176.601699][ T7394] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000002 [ 176.609766][ T7394] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 176.617752][ T7394] 16:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 176.646844][ T7403] FAULT_INJECTION: forcing a failure. [ 176.646844][ T7403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.660175][ T7403] CPU: 0 PID: 7403 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 176.670555][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 176.681254][ T7403] Call Trace: [ 176.684563][ T7403] [ 176.687629][ T7403] dump_stack_lvl+0xda/0x130 [ 176.692574][ T7403] dump_stack+0x15/0x20 16:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) [ 176.696899][ T7403] should_fail_ex+0x21f/0x230 [ 176.701715][ T7403] should_fail+0xb/0x10 [ 176.705911][ T7403] should_fail_usercopy+0x1a/0x20 [ 176.714328][ T7403] _copy_from_user+0x1e/0xd0 [ 176.719006][ T7403] copy_msghdr_from_user+0x54/0x2a0 [ 176.724269][ T7403] __sys_sendmsg+0x17d/0x270 [ 176.728996][ T7403] __x64_sys_sendmsg+0x46/0x50 [ 176.734080][ T7403] do_syscall_64+0x41/0xc0 [ 176.738621][ T7403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 176.744869][ T7403] RIP: 0033:0x7f9dc49e7b29 [ 176.749298][ T7403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 176.769008][ T7403] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.777690][ T7403] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 176.785667][ T7403] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 176.793824][ T7403] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 176.801868][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.809942][ T7403] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 176.818119][ T7403] [ 176.824816][ T26] audit: type=1400 audit(1690648782.319:279): avc: denied { setopt } for pid=7400 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 16:39:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 2) 16:39:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) [ 176.844944][ T26] audit: type=1400 audit(1690648782.349:280): avc: denied { accept } for pid=7401 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 176.897880][ T7421] FAULT_INJECTION: forcing a failure. [ 176.897880][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 176.910646][ T7421] CPU: 1 PID: 7421 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 176.921231][ T7418] loop2: detected capacity change from 0 to 2048 [ 176.921445][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 176.937748][ T26] audit: type=1400 audit(1690648782.499:281): avc: denied { unlink } for pid=2750 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.937970][ T7421] Call Trace: [ 176.963792][ T7421] [ 176.966767][ T7421] dump_stack_lvl+0xda/0x130 [ 176.971397][ T7421] dump_stack+0x15/0x20 [ 176.975614][ T7421] should_fail_ex+0x21f/0x230 [ 176.980301][ T7421] __should_failslab+0x92/0xa0 [ 176.985267][ T7421] should_failslab+0x9/0x20 [ 176.989828][ T7421] slab_pre_alloc_hook+0x38/0x180 [ 176.994888][ T7421] kmem_cache_alloc_node+0x54/0x240 [ 177.000179][ T7421] ? __alloc_skb+0x109/0x2e0 [ 177.004865][ T7421] __alloc_skb+0x109/0x2e0 [ 177.009301][ T7421] netlink_sendmsg+0x483/0x770 [ 177.014097][ T7421] ? netlink_getsockopt+0x3e0/0x3e0 [ 177.019347][ T7421] ____sys_sendmsg+0x37c/0x4d0 [ 177.024201][ T7421] __sys_sendmsg+0x1e9/0x270 [ 177.028938][ T7421] __x64_sys_sendmsg+0x46/0x50 [ 177.033723][ T7421] do_syscall_64+0x41/0xc0 [ 177.038161][ T7421] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 177.044175][ T7421] RIP: 0033:0x7f9dc49e7b29 [ 177.048688][ T7421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.068350][ T7421] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.076857][ T7421] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 177.084837][ T7421] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 177.092821][ T7421] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 177.100812][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.108907][ T7421] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 177.117192][ T7421] [ 177.197178][ T7424] FAULT_INJECTION: forcing a failure. [ 177.197178][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 177.209979][ T7424] CPU: 0 PID: 7424 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 177.220358][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 177.230444][ T7424] Call Trace: [ 177.233738][ T7424] [ 177.236694][ T7424] dump_stack_lvl+0xda/0x130 [ 177.241327][ T7424] dump_stack+0x15/0x20 [ 177.245667][ T7424] should_fail_ex+0x21f/0x230 [ 177.250534][ T7424] __should_failslab+0x92/0xa0 [ 177.255600][ T7424] should_failslab+0x9/0x20 [ 177.260242][ T7424] slab_pre_alloc_hook+0x38/0x180 [ 177.265309][ T7424] kmem_cache_alloc+0x52/0x220 [ 177.270165][ T7424] ? __blockdev_direct_IO+0x138/0x1f80 [ 177.275679][ T7424] __blockdev_direct_IO+0x138/0x1f80 [ 177.280180][ T7418] syz-executor.2: attempt to access beyond end of device [ 177.280180][ T7418] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 177.281012][ T7424] ? fat_block_truncate_page+0x40/0x40 [ 177.300648][ T7424] ? filemap_get_folios_tag+0x1fd/0x230 [ 177.306510][ T7424] fat_direct_IO+0x110/0x1d0 [ 177.311181][ T7424] generic_file_read_iter+0x236/0x340 [ 177.316830][ T7424] copy_splice_read+0x26b/0x4b0 [ 177.321841][ T7424] ? splice_folio_into_pipe+0x290/0x290 [ 177.327493][ T7424] splice_direct_to_actor+0x2aa/0x690 [ 177.332910][ T7424] ? direct_file_splice_eof+0x70/0x70 [ 177.338312][ T7424] do_splice_direct+0x10d/0x190 [ 177.343298][ T7424] ? do_splice_direct+0x190/0x190 [ 177.348354][ T7424] do_sendfile+0x3b6/0x9a0 [ 177.352876][ T7424] __x64_sys_sendfile64+0x110/0x150 [ 177.358155][ T7424] do_syscall_64+0x41/0xc0 [ 177.362593][ T7424] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 177.368713][ T7424] RIP: 0033:0x7fa29008fb29 [ 177.373160][ T7424] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:39:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 17) 16:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 16:39:43 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10, 0x0}, 0x48081) 16:39:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 3) 16:39:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) dup3(r1, r2, 0x80000) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffccd) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4000001) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r3, @ANYBLOB="45070200000000001c0012800b000100627269646765"], 0x3c}}, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000107000002000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000050011000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) (async) dup3(r1, r2, 0x80000) (async) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffccd) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4000001) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r3, @ANYBLOB="45070200000000001c0012800b000100627269646765"], 0x3c}}, 0x0) (async) gettid() (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000107000002000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000050011000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) (async) 16:39:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3a) [ 177.392914][ T7424] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.401715][ T7424] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 177.409823][ T7424] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 177.417903][ T7424] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 177.425989][ T7424] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000002 [ 177.434456][ T7424] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 177.442537][ T7424] 16:39:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 4) 16:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:43 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10, 0x0}, 0x48081) [ 177.514313][ T7439] FAULT_INJECTION: forcing a failure. [ 177.514313][ T7439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.527556][ T7439] CPU: 1 PID: 7439 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 177.537967][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 177.548162][ T7439] Call Trace: [ 177.551504][ T7439] [ 177.554449][ T7439] dump_stack_lvl+0xda/0x130 [ 177.557180][ T7444] loop2: detected capacity change from 0 to 2048 [ 177.559061][ T7439] dump_stack+0x15/0x20 [ 177.569739][ T7439] should_fail_ex+0x21f/0x230 [ 177.574449][ T7439] should_fail+0xb/0x10 [ 177.578754][ T7439] should_fail_usercopy+0x1a/0x20 [ 177.583949][ T7439] _copy_from_iter+0xd8/0xa40 [ 177.588702][ T7439] ? kmalloc_reserve+0xfb/0x190 [ 177.593674][ T7439] ? __build_skb_around+0x196/0x1f0 [ 177.598912][ T7439] ? __virt_addr_valid+0x16a/0x1b0 [ 177.604072][ T7439] ? __check_object_size+0x363/0x520 [ 177.609680][ T7439] netlink_sendmsg+0x53c/0x770 [ 177.614589][ T7439] ? netlink_getsockopt+0x3e0/0x3e0 [ 177.619837][ T7439] ____sys_sendmsg+0x37c/0x4d0 [ 177.624627][ T7439] __sys_sendmsg+0x1e9/0x270 [ 177.629297][ T7439] __x64_sys_sendmsg+0x46/0x50 [ 177.634100][ T7439] do_syscall_64+0x41/0xc0 [ 177.638601][ T7439] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 177.644609][ T7439] RIP: 0033:0x7f9dc49e7b29 [ 177.649051][ T7439] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.668799][ T7439] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.677400][ T7439] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 177.685478][ T7439] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 177.693459][ T7439] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 177.701469][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 16:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 5) 16:39:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x800) (async) dup3(r1, r2, 0x80000) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffccd) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4000001) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r3, @ANYBLOB="45070200000000001c0012800b000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) gettid() (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000107000002000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000050011000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0) [ 177.709498][ T7439] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 177.717570][ T7439] [ 177.791358][ T7460] FAULT_INJECTION: forcing a failure. [ 177.791358][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 177.804358][ T7460] CPU: 0 PID: 7460 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 177.814731][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 177.824856][ T7460] Call Trace: [ 177.828187][ T7460] [ 177.831210][ T7460] dump_stack_lvl+0xda/0x130 [ 177.835849][ T7460] dump_stack+0x15/0x20 [ 177.840124][ T7460] should_fail_ex+0x21f/0x230 [ 177.844824][ T7460] __should_failslab+0x92/0xa0 [ 177.849627][ T7460] should_failslab+0x9/0x20 [ 177.854251][ T7460] slab_pre_alloc_hook+0x38/0x180 [ 177.859312][ T7460] kmem_cache_alloc+0x52/0x220 [ 177.864119][ T7460] ? skb_clone+0x154/0x1e0 [ 177.868712][ T7460] skb_clone+0x154/0x1e0 [ 177.873349][ T7460] __netlink_deliver_tap+0x2c0/0x4c0 [ 177.878882][ T7460] netlink_unicast+0x615/0x640 [ 177.883785][ T7460] netlink_sendmsg+0x665/0x770 [ 177.888730][ T7460] ? netlink_getsockopt+0x3e0/0x3e0 [ 177.894119][ T7460] ____sys_sendmsg+0x37c/0x4d0 [ 177.899098][ T7460] __sys_sendmsg+0x1e9/0x270 [ 177.903796][ T7460] __x64_sys_sendmsg+0x46/0x50 [ 177.906137][ T7444] syz-executor.2: attempt to access beyond end of device [ 177.906137][ T7444] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 177.908595][ T7460] do_syscall_64+0x41/0xc0 [ 177.927211][ T7460] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 177.933250][ T7460] RIP: 0033:0x7f9dc49e7b29 16:39:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 18) 16:39:43 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10, 0x0}, 0x48081) 16:39:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020400000000000000020000000000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000250000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020400000000000000020000000000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000250000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 177.937862][ T7460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.957682][ T7460] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.966131][ T7460] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 177.974144][ T7460] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 177.982143][ T7460] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 177.990150][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.998407][ T7460] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 178.006483][ T7460] 16:39:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3a) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x1, 0x4) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000000)={@val, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x3a) (async) 16:39:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020400000000000000020000000000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000250000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:39:43 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x2}, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$tipc(r8, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 6) 16:39:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:43 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x122, 0x122, 0xc, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @datasec={0x8, 0xa, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x5}, {0x5, 0x0, 0x7c4}, {0x4, 0x20, 0xffffffff}, {0x2, 0xe44b, 0x81}, {0x4, 0x9, 0x40}, {0x4, 0x4}, {0x2, 0xffffa3d0, 0x3}, {0x3, 0x7, 0x5}, {0x3, 0x20d8, 0x3ff}, {0x4, 0x2000000, 0x9}], "98c6"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x100}}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @struct={0x3, 0x7, 0x0, 0x4, 0x1, 0x5, [{0x6, 0x5, 0x8001}, {0xe, 0x4, 0x9}, {0x8, 0x3, 0x3}, {0x10, 0x1, 0x3}, {0xf}, {0x6, 0x3, 0x80000000}, {0xf, 0x0, 0x101}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x61, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000300)=""/25, 0x148, 0x19}, 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0xa, [@const={0x2, 0x0, 0x0, 0xa, 0x4}, @restrict={0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x4}]}, @datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x1}, {0x2, 0x6, 0x6}, {0x4, 0x6984, 0x10001}, {0x3, 0x6, 0x8000}, {0x5, 0x4, 0x1}], "d1ad"}, @var={0xf, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0xe09ec2f7b9c94af4, 0x2e, 0x4f, 0x30, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f0000000480)=""/70, 0xb6, 0x46, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4540, &(0x7f0000000080)={[{@errors_remount}, {@noquota}, {@dioread_lock}, {@grpquota}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x20}}, {@usrquota}]}, 0x12, 0x4bf, &(0x7f0000000540)="$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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) [ 178.066448][ T7472] loop2: detected capacity change from 0 to 2048 [ 178.083108][ T7479] FAULT_INJECTION: forcing a failure. [ 178.083108][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 178.095777][ T7479] CPU: 0 PID: 7479 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 178.106307][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 178.109969][ T7484] loop3: detected capacity change from 0 to 512 [ 178.116509][ T7479] Call Trace: [ 178.116519][ T7479] [ 178.116527][ T7479] dump_stack_lvl+0xda/0x130 [ 178.133987][ T7479] dump_stack+0x15/0x20 [ 178.138171][ T7479] should_fail_ex+0x21f/0x230 [ 178.142865][ T7479] __should_failslab+0x92/0xa0 [ 178.147660][ T7479] should_failslab+0x9/0x20 [ 178.152235][ T7479] slab_pre_alloc_hook+0x38/0x180 [ 178.157539][ T7479] kmem_cache_alloc+0x52/0x220 [ 178.162340][ T7479] ? skb_clone+0x154/0x1e0 [ 178.167066][ T7479] ? xas_load+0x37c/0x390 [ 178.171586][ T7479] skb_clone+0x154/0x1e0 [ 178.175854][ T7479] dev_queue_xmit_nit+0x141/0x5e0 [ 178.180924][ T7479] dev_hard_start_xmit+0xcf/0x3f0 [ 178.186000][ T7479] ? validate_xmit_skb+0x655/0x950 [ 178.191221][ T7479] __dev_queue_xmit+0xefb/0x1d10 [ 178.196265][ T7479] __netlink_deliver_tap+0x3a1/0x4c0 [ 178.201645][ T7479] netlink_unicast+0x615/0x640 [ 178.206469][ T7479] netlink_sendmsg+0x665/0x770 [ 178.211347][ T7479] ? netlink_getsockopt+0x3e0/0x3e0 [ 178.216651][ T7479] ____sys_sendmsg+0x37c/0x4d0 [ 178.221509][ T7479] __sys_sendmsg+0x1e9/0x270 [ 178.226367][ T7479] __x64_sys_sendmsg+0x46/0x50 [ 178.231208][ T7479] do_syscall_64+0x41/0xc0 [ 178.235744][ T7479] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 178.241819][ T7479] RIP: 0033:0x7f9dc49e7b29 [ 178.246251][ T7479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 178.266203][ T7479] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.274726][ T7479] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 178.282722][ T7479] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 178.290832][ T7479] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 178.298918][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.307073][ T7479] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 16:39:43 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x2}, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x10) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bind$tipc(r8, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x1}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x1}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 178.315248][ T7479] [ 178.324241][ T7484] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.389552][ T7484] EXT4-fs (loop3): 1 orphan inode deleted [ 178.395382][ T7484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.412147][ T7484] ext4 filesystem being mounted at /root/syzkaller-testdir2940862597/syzkaller.2wtT6m/185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.432480][ T26] audit: type=1400 audit(1690648784.059:282): avc: denied { write } for pid=7483 comm="syz-executor.3" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 178.457442][ T3100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 16:39:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 19) 16:39:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:44 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x2}, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x10) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) bind$tipc(r8, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x1}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100627269646765841cb4874852759dc334685b0abdbb9b7b0fce5198756b45790bb4c03d6c9b93610c6ad6d5a7bccf329bdb7230ce99fc55783fb8682c3d60b5cf11010ad8a0a3bf76f322e67d4c0a4f9f681acd4b8dd9d4e9490d331a9cc27bcfe340f21c4a59d49e9ab684521fa82d04bb44b19d37832f02b8a428c930ad166b572fb5b10d10a17e88623126a8af9a0194ca91a52c881299cd5dbccaad284ff13d37447df76211c71d090c96a4447575906216f798236abf1492eda8083220aec65ba59dbf70635f896da30a70580e01ae41c9467f2ea3e7f721095e"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c000200ad2be672be0139cd0d8c00000200"/96], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r7, @ANYBLOB="0001000001006d6163766c616e0020000232cb9cba7c00000800010010000000080003000300000008000500000000000000", @ANYRESOCT=r6, @ANYBLOB], 0x58}}, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="d40000002800000628bd7000fedbdf251b8913d54bdd26a981c300000000d6b6201f2ec40e0b54e6cd3c521da0335d88bb6dae4af0d2abc7bcc06e0be881ec8971de15e8c2eed0", @ANYRES16=r8, @ANYBLOB="0d00030002000f000300000008000100716671004c000200080001000500000008000200ffffff7f080002007f0000000800010005000000080002000800000008000200010000800800020000000000080001000600000008000100000000000600050008ce000008000100647272000c0002000800010060ae00000d00010066715f636f64656c000000000b0001006d717072696f000006000500f7080000060005000507000006000500010700000b0001006d756c7469710000"], 0xd4}, 0x1, 0x0, 0x0, 0x8030}, 0x880) 16:39:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 7) 16:39:44 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x122, 0x122, 0xc, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @datasec={0x8, 0xa, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x5}, {0x5, 0x0, 0x7c4}, {0x4, 0x20, 0xffffffff}, {0x2, 0xe44b, 0x81}, {0x4, 0x9, 0x40}, {0x4, 0x4}, {0x2, 0xffffa3d0, 0x3}, {0x3, 0x7, 0x5}, {0x3, 0x20d8, 0x3ff}, {0x4, 0x2000000, 0x9}], "98c6"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x100}}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @struct={0x3, 0x7, 0x0, 0x4, 0x1, 0x5, [{0x6, 0x5, 0x8001}, {0xe, 0x4, 0x9}, {0x8, 0x3, 0x3}, {0x10, 0x1, 0x3}, {0xf}, {0x6, 0x3, 0x80000000}, {0xf, 0x0, 0x101}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x61, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000300)=""/25, 0x148, 0x19}, 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfd) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0xa, [@const={0x2, 0x0, 0x0, 0xa, 0x4}, @restrict={0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x4}]}, @datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x1}, {0x2, 0x6, 0x6}, {0x4, 0x6984, 0x10001}, {0x3, 0x6, 0x8000}, {0x5, 0x4, 0x1}], "d1ad"}, @var={0xf, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0xe09ec2f7b9c94af4, 0x2e, 0x4f, 0x30, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f0000000480)=""/70, 0xb6, 0x46, 0x1}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4540, &(0x7f0000000080)={[{@errors_remount}, {@noquota}, {@dioread_lock}, {@grpquota}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x20}}, {@usrquota}]}, 0x12, 0x4bf, &(0x7f0000000540)="$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") (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 16:39:44 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x122, 0x122, 0xc, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @datasec={0x8, 0xa, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x5}, {0x5, 0x0, 0x7c4}, {0x4, 0x20, 0xffffffff}, {0x2, 0xe44b, 0x81}, {0x4, 0x9, 0x40}, {0x4, 0x4}, {0x2, 0xffffa3d0, 0x3}, {0x3, 0x7, 0x5}, {0x3, 0x20d8, 0x3ff}, {0x4, 0x2000000, 0x9}], "98c6"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x100}}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @struct={0x3, 0x7, 0x0, 0x4, 0x1, 0x5, [{0x6, 0x5, 0x8001}, {0xe, 0x4, 0x9}, {0x8, 0x3, 0x3}, {0x10, 0x1, 0x3}, {0xf}, {0x6, 0x3, 0x80000000}, {0xf, 0x0, 0x101}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x61, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000300)=""/25, 0x148, 0x19}, 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfd) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0xa, [@const={0x2, 0x0, 0x0, 0xa, 0x4}, @restrict={0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x4}]}, @datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x1}, {0x2, 0x6, 0x6}, {0x4, 0x6984, 0x10001}, {0x3, 0x6, 0x8000}, {0x5, 0x4, 0x1}], "d1ad"}, @var={0xf, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0xe09ec2f7b9c94af4, 0x2e, 0x4f, 0x30, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f0000000480)=""/70, 0xb6, 0x46, 0x1}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4540, &(0x7f0000000080)={[{@errors_remount}, {@noquota}, {@dioread_lock}, {@grpquota}, {@noauto_da_alloc}, {@jqfmt_vfsv1}, {@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x20}}, {@usrquota}]}, 0x12, 0x4bf, &(0x7f0000000540)="$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") (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) [ 178.550883][ T7472] syz-executor.2: attempt to access beyond end of device [ 178.550883][ T7472] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 178.589283][ T7510] FAULT_INJECTION: forcing a failure. 16:39:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001940)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x38}, 0x1c, 0x0}, 0x0) 16:39:44 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 178.589283][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 178.601978][ T7510] CPU: 0 PID: 7510 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 178.612486][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 178.622581][ T7510] Call Trace: [ 178.625916][ T7510] [ 178.628916][ T7510] dump_stack_lvl+0xda/0x130 [ 178.633678][ T7510] dump_stack+0x15/0x20 [ 178.637963][ T7510] should_fail_ex+0x21f/0x230 [ 178.642774][ T7510] ? nfnetlink_rcv+0x8a2/0x13b0 16:39:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000001940)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x38}, 0x1c, 0x0}, 0x0) [ 178.647657][ T7510] __should_failslab+0x92/0xa0 [ 178.652553][ T7510] should_failslab+0x9/0x20 [ 178.657206][ T7510] slab_pre_alloc_hook+0x38/0x180 [ 178.662338][ T7510] ? nfnetlink_rcv+0x8a2/0x13b0 [ 178.667238][ T7510] __kmem_cache_alloc_node+0x48/0x1d0 [ 178.672675][ T7510] ? nfnetlink_rcv+0x8a2/0x13b0 [ 178.677637][ T7510] kmalloc_trace+0x2a/0xa0 [ 178.682123][ T7510] nfnetlink_rcv+0x8a2/0x13b0 [ 178.686927][ T7510] ? consume_skb+0x57/0x180 [ 178.691479][ T7510] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 178.696798][ T7510] ? ref_tracker_free+0x3a1/0x400 [ 178.701978][ T7510] ? __dev_queue_xmit+0xabb/0x1d10 [ 178.707164][ T7510] netlink_unicast+0x56f/0x640 [ 178.712014][ T7510] netlink_sendmsg+0x665/0x770 [ 178.716827][ T7510] ? netlink_getsockopt+0x3e0/0x3e0 [ 178.722043][ T7510] ____sys_sendmsg+0x37c/0x4d0 [ 178.726933][ T7510] __sys_sendmsg+0x1e9/0x270 [ 178.731628][ T7510] __x64_sys_sendmsg+0x46/0x50 [ 178.736457][ T7510] do_syscall_64+0x41/0xc0 [ 178.741099][ T7510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 178.747040][ T7510] RIP: 0033:0x7f9dc49e7b29 [ 178.751500][ T7510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 178.771236][ T7510] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.779662][ T7510] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 178.787646][ T7510] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 16:39:44 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) 16:39:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 8) [ 178.796405][ T7510] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 178.804878][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.812952][ T7510] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 178.820981][ T7510] [ 178.895096][ T7547] FAULT_INJECTION: forcing a failure. [ 178.895096][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 178.899301][ T7535] loop2: detected capacity change from 0 to 2048 [ 178.907860][ T7547] CPU: 1 PID: 7547 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 178.924547][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 178.934636][ T7547] Call Trace: [ 178.937927][ T7547] [ 178.940872][ T7547] dump_stack_lvl+0xda/0x130 [ 178.945489][ T7547] dump_stack+0x15/0x20 [ 178.949676][ T7547] should_fail_ex+0x21f/0x230 [ 178.954369][ T7547] ? nfnetlink_rcv+0x8a2/0x13b0 [ 178.959257][ T7547] __should_failslab+0x92/0xa0 [ 178.964166][ T7547] should_failslab+0x9/0x20 [ 178.968739][ T7547] slab_pre_alloc_hook+0x38/0x180 [ 178.973789][ T7547] ? nfnetlink_rcv+0x8a2/0x13b0 [ 178.978763][ T7547] __kmem_cache_alloc_node+0x48/0x1d0 [ 178.984755][ T7547] ? nfnetlink_rcv+0x8a2/0x13b0 [ 178.989664][ T7547] kmalloc_trace+0x2a/0xa0 [ 178.994251][ T7547] nfnetlink_rcv+0x8a2/0x13b0 [ 178.998961][ T7547] netlink_unicast+0x56f/0x640 [ 179.003808][ T7547] netlink_sendmsg+0x665/0x770 [ 179.008589][ T7547] ? netlink_getsockopt+0x3e0/0x3e0 [ 179.013980][ T7547] ____sys_sendmsg+0x37c/0x4d0 [ 179.018773][ T7547] __sys_sendmsg+0x1e9/0x270 [ 179.023563][ T7547] __x64_sys_sendmsg+0x46/0x50 [ 179.028390][ T7547] do_syscall_64+0x41/0xc0 [ 179.032894][ T7547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 179.038822][ T7547] RIP: 0033:0x7f9dc49e7b29 [ 179.043772][ T7547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 179.063421][ T7547] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.071866][ T7547] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 179.079856][ T7547] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 179.087837][ T7547] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 179.095875][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.103939][ T7547] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 179.112105][ T7547] [ 179.186968][ T7548] FAULT_INJECTION: forcing a failure. [ 179.186968][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 179.199704][ T7548] CPU: 0 PID: 7548 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 179.210060][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 179.220279][ T7548] Call Trace: [ 179.223581][ T7548] [ 179.226529][ T7548] dump_stack_lvl+0xda/0x130 [ 179.231233][ T7548] dump_stack+0x15/0x20 [ 179.235756][ T7548] should_fail_ex+0x21f/0x230 [ 179.240707][ T7548] ? iter_file_splice_write+0xeb/0x7e0 [ 179.246271][ T7548] __should_failslab+0x92/0xa0 [ 179.250436][ T7535] syz-executor.2: attempt to access beyond end of device [ 179.250436][ T7535] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 179.251154][ T7548] should_failslab+0x9/0x20 [ 179.269812][ T7548] slab_pre_alloc_hook+0x38/0x180 [ 179.274863][ T7548] ? iter_file_splice_write+0xeb/0x7e0 [ 179.280481][ T7548] ? iter_file_splice_write+0xeb/0x7e0 [ 179.285967][ T7548] __kmem_cache_alloc_node+0x48/0x1d0 [ 179.291546][ T7548] ? splice_from_pipe+0xe0/0xe0 [ 179.296439][ T7548] ? iter_file_splice_write+0xeb/0x7e0 [ 179.302029][ T7548] __kmalloc+0x95/0x1a0 [ 179.306272][ T7548] iter_file_splice_write+0xeb/0x7e0 [ 179.311674][ T7548] ? copy_splice_read+0x47e/0x4b0 [ 179.316867][ T7548] ? copy_splice_read+0x47e/0x4b0 [ 179.322059][ T7548] ? splice_from_pipe+0xe0/0xe0 [ 179.326969][ T7548] direct_splice_actor+0x8a/0xb0 [ 179.332049][ T7548] splice_direct_to_actor+0x31d/0x690 [ 179.337538][ T7548] ? direct_file_splice_eof+0x70/0x70 [ 179.342941][ T7548] do_splice_direct+0x10d/0x190 [ 179.347893][ T7548] ? do_splice_direct+0x190/0x190 [ 179.353016][ T7548] do_sendfile+0x3b6/0x9a0 [ 179.357582][ T7548] __x64_sys_sendfile64+0x110/0x150 [ 179.362814][ T7548] do_syscall_64+0x41/0xc0 [ 179.367265][ T7548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 179.373242][ T7548] RIP: 0033:0x7fa29008fb29 [ 179.377715][ T7548] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 179.397930][ T7548] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 179.406552][ T7548] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 179.414595][ T7548] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 179.422740][ T7548] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 16:39:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) sendmsg$inet6(r0, &(0x7f0000001940)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x38}, 0x1c, 0x0}, 0x0) (rerun: 32) 16:39:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 20) 16:39:45 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) 16:39:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100627269646765841cb4874852759dc334685b0abdbb9b7b0fce5198756b45790bb4c03d6c9b93610c6ad6d5a7bccf329bdb7230ce99fc55783fb8682c3d60b5cf11010ad8a0a3bf76f322e67d4c0a4f9f681acd4b8dd9d4e9490d331a9cc27bcfe340f21c4a59d49e9ab684521fa82d04bb44b19d37832f02b8a428c930ad166b572fb5b10d10a17e88623126a8af9a0194ca91a52c881299cd5dbccaad284ff13d37447df76211c71d090c96a4447575906216f798236abf1492eda8083220aec65ba59dbf70635f896da30a70580e01ae41c9467f2ea3e7f721095e"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c000200ad2be672be0139cd0d8c00000200"/96], 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c000200ad2be672be0139cd0d8c00000200"/96], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r7, @ANYBLOB="0001000001006d6163766c616e0020000232cb9cba7c00000800010010000000080003000300000008000500000000000000", @ANYRESOCT=r6, @ANYBLOB], 0x58}}, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="d40000002800000628bd7000fedbdf251b8913d54bdd26a981c300000000d6b6201f2ec40e0b54e6cd3c521da0335d88bb6dae4af0d2abc7bcc06e0be881ec8971de15e8c2eed0", @ANYRES16=r8, @ANYBLOB="0d00030002000f000300000008000100716671004c000200080001000500000008000200ffffff7f080002007f0000000800010005000000080002000800000008000200010000800800020000000000080001000600000008000100000000000600050008ce000008000100647272000c0002000800010060ae00000d00010066715f636f64656c000000000b0001006d717072696f000006000500f7080000060005000507000006000500010700000b0001006d756c7469710000"], 0xd4}, 0x1, 0x0, 0x0, 0x8030}, 0x880) 16:39:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 9) [ 179.430793][ T7548] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000002 [ 179.438774][ T7548] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 179.446858][ T7548] [ 179.476417][ T7555] FAULT_INJECTION: forcing a failure. [ 179.476417][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 179.489284][ T7555] CPU: 1 PID: 7555 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 179.500035][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 179.510125][ T7555] Call Trace: [ 179.513522][ T7555] [ 179.516476][ T7555] dump_stack_lvl+0xda/0x130 [ 179.521162][ T7555] dump_stack+0x15/0x20 [ 179.525539][ T7555] should_fail_ex+0x21f/0x230 [ 179.530339][ T7555] __should_failslab+0x92/0xa0 16:39:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100627269646765841cb4874852759dc334685b0abdbb9b7b0fce5198756b45790bb4c03d6c9b93610c6ad6d5a7bccf329bdb7230ce99fc55783fb8682c3d60b5cf11010ad8a0a3bf76f322e67d4c0a4f9f681acd4b8dd9d4e9490d331a9cc27bcfe340f21c4a59d49e9ab684521fa82d04bb44b19d37832f02b8a428c930ad166b572fb5b10d10a17e88623126a8af9a0194ca91a52c881299cd5dbccaad284ff13d37447df76211c71d090c96a4447575906216f798236abf1492eda8083220aec65ba59dbf70635f896da30a70580e01ae41c9467f2ea3e7f721095e"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r7, @ANYBLOB="0000e0ffffffffff0000000008000100736671004c000200ad2be672be0139cd0d8c00000200"/96], 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r7, @ANYBLOB="0001000001006d6163766c616e0020000232cb9cba7c00000800010010000000080003000300000008000500000000000000", @ANYRESOCT=r6, @ANYBLOB], 0x58}}, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="d40000002800000628bd7000fedbdf251b8913d54bdd26a981c300000000d6b6201f2ec40e0b54e6cd3c521da0335d88bb6dae4af0d2abc7bcc06e0be881ec8971de15e8c2eed0", @ANYRES16=r8, @ANYBLOB="0d00030002000f000300000008000100716671004c000200080001000500000008000200ffffff7f080002007f0000000800010005000000080002000800000008000200010000800800020000000000080001000600000008000100000000000600050008ce000008000100647272000c0002000800010060ae00000d00010066715f636f64656c000000000b0001006d717072696f000006000500f7080000060005000507000006000500010700000b0001006d756c7469710000"], 0xd4}, 0x1, 0x0, 0x0, 0x8030}, 0x880) 16:39:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x64, 0x4e3, &(0x7f0000000540)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @loopback, 0x8}, 0xfffffffffffffff1, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000290000003700000089000000000000000003000000000000"], 0x20}, 0x810) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000140), 0x4) [ 179.535210][ T7555] should_failslab+0x9/0x20 [ 179.539857][ T7555] slab_pre_alloc_hook+0x38/0x180 [ 179.545039][ T7555] kmem_cache_alloc_node+0x54/0x240 [ 179.550331][ T7555] ? __alloc_skb+0x109/0x2e0 [ 179.554992][ T7555] __alloc_skb+0x109/0x2e0 [ 179.559550][ T7555] netlink_ack+0x23b/0x940 [ 179.564057][ T7555] nfnetlink_rcv+0x1241/0x13b0 [ 179.568958][ T7555] netlink_unicast+0x56f/0x640 [ 179.569036][ T7576] loop0: detected capacity change from 0 to 512 [ 179.573830][ T7555] netlink_sendmsg+0x665/0x770 [ 179.584898][ T7555] ? netlink_getsockopt+0x3e0/0x3e0 [ 179.590148][ T7555] ____sys_sendmsg+0x37c/0x4d0 [ 179.594985][ T7555] __sys_sendmsg+0x1e9/0x270 [ 179.599614][ T7555] __x64_sys_sendmsg+0x46/0x50 [ 179.604444][ T7555] do_syscall_64+0x41/0xc0 [ 179.608897][ T7555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 179.614869][ T7555] RIP: 0033:0x7f9dc49e7b29 [ 179.619300][ T7555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 179.639009][ T7555] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.647429][ T7555] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 179.655511][ T7555] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 179.663584][ T7555] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 179.671613][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.679591][ T7555] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 16:39:45 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getnetconf={0x3c, 0x52, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff0000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x78a}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x37}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000400)={0x0, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 16:39:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 10) [ 179.687631][ T7555] [ 179.701438][ T7576] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities 16:39:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 11) [ 179.759873][ T3475] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.765909][ T7586] __nla_validate_parse: 25 callbacks suppressed [ 179.765927][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.810056][ T7585] loop2: detected capacity change from 0 to 2048 [ 179.811854][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.816599][ T7588] FAULT_INJECTION: forcing a failure. [ 179.816599][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 179.838560][ T7588] CPU: 1 PID: 7588 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 179.848984][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 179.859144][ T7588] Call Trace: [ 179.862516][ T7588] [ 179.865451][ T7588] dump_stack_lvl+0xda/0x130 [ 179.870063][ T7588] dump_stack+0x15/0x20 [ 179.874423][ T7588] should_fail_ex+0x21f/0x230 [ 179.879266][ T7588] __should_failslab+0x92/0xa0 [ 179.884049][ T7588] should_failslab+0x9/0x20 [ 179.888569][ T7588] slab_pre_alloc_hook+0x38/0x180 [ 179.893687][ T7588] kmem_cache_alloc+0x52/0x220 [ 179.900502][ T7588] ? skb_clone+0x154/0x1e0 [ 179.904945][ T7588] skb_clone+0x154/0x1e0 [ 179.909212][ T7588] __netlink_deliver_tap+0x2c0/0x4c0 [ 179.914592][ T7588] netlink_sendskb+0x116/0x140 [ 179.919438][ T7588] netlink_unicast+0x28e/0x640 [ 179.924364][ T7588] netlink_ack+0x8f3/0x940 [ 179.928870][ T7588] nfnetlink_rcv+0x1241/0x13b0 [ 179.933732][ T7588] netlink_unicast+0x56f/0x640 [ 179.938517][ T7588] netlink_sendmsg+0x665/0x770 [ 179.943440][ T7588] ? netlink_getsockopt+0x3e0/0x3e0 [ 179.948774][ T7588] ____sys_sendmsg+0x37c/0x4d0 [ 179.953689][ T7588] __sys_sendmsg+0x1e9/0x270 [ 179.958388][ T7588] __x64_sys_sendmsg+0x46/0x50 [ 179.963292][ T7588] do_syscall_64+0x41/0xc0 [ 179.967723][ T7588] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 179.973662][ T7588] RIP: 0033:0x7f9dc49e7b29 [ 179.978141][ T7588] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 179.997887][ T7588] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.006346][ T7588] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 180.014332][ T7588] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 180.022399][ T7588] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 180.030553][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.043840][ T7588] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 180.052102][ T7588] 16:39:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 21) 16:39:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:45 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getnetconf={0x3c, 0x52, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff0000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x78a}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x37}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000400)={0x0, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getnetconf={0x3c, 0x52, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff0000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x78a}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x37}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000400)={0x0, 0x7}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) 16:39:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 12) 16:39:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x64, 0x4e3, &(0x7f0000000540)="$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") (async, rerun: 64) r0 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @loopback, 0x8}, 0xfffffffffffffff1, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000290000003700000089000000000000000003000000000000"], 0x20}, 0x810) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000140), 0x4) [ 180.192475][ T7585] syz-executor.2: attempt to access beyond end of device [ 180.192475][ T7585] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 180.222497][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.232001][ T7598] FAULT_INJECTION: forcing a failure. [ 180.232001][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 180.242608][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.244811][ T7598] CPU: 0 PID: 7598 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 180.264494][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 180.274588][ T7598] Call Trace: [ 180.277886][ T7598] [ 180.280835][ T7598] dump_stack_lvl+0xda/0x130 [ 180.285480][ T7598] dump_stack+0x15/0x20 [ 180.289674][ T7598] should_fail_ex+0x21f/0x230 [ 180.294470][ T7598] __should_failslab+0x92/0xa0 [ 180.299127][ T7608] loop0: detected capacity change from 0 to 512 [ 180.299259][ T7598] should_failslab+0x9/0x20 [ 180.310035][ T7598] slab_pre_alloc_hook+0x38/0x180 [ 180.315152][ T7598] kmem_cache_alloc_node+0x54/0x240 [ 180.320453][ T7598] ? __alloc_skb+0x109/0x2e0 [ 180.325070][ T7598] __alloc_skb+0x109/0x2e0 [ 180.329554][ T7598] netlink_ack+0x23b/0x940 [ 180.334039][ T7598] nfnetlink_rcv+0x1241/0x13b0 [ 180.338894][ T7598] netlink_unicast+0x56f/0x640 [ 180.343687][ T7598] netlink_sendmsg+0x665/0x770 [ 180.348602][ T7598] ? netlink_getsockopt+0x3e0/0x3e0 [ 180.353862][ T7598] ____sys_sendmsg+0x37c/0x4d0 [ 180.358650][ T7598] __sys_sendmsg+0x1e9/0x270 [ 180.363331][ T7598] __x64_sys_sendmsg+0x46/0x50 [ 180.368117][ T7598] do_syscall_64+0x41/0xc0 [ 180.372552][ T7598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 180.378506][ T7598] RIP: 0033:0x7f9dc49e7b29 [ 180.382928][ T7598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 180.402576][ T7598] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.411055][ T7598] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 [ 180.419174][ T7598] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 180.427170][ T7598] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 180.435276][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 16:39:45 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) 16:39:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x64, 0x4e3, &(0x7f0000000540)="$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") (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x2, @loopback, 0x8}, 0xfffffffffffffff1, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000290000003700000089000000000000000003000000000000"], 0x20}, 0x810) (async) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000140), 0x4) 16:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getnetconf={0x3c, 0x52, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff0000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x78a}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x37}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000400)={0x0, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 16:39:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 13) 16:39:46 executing program 0: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f0000001300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000001c80)="69f7755cff64fff186", 0x9}]) [ 180.443433][ T7598] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 180.451432][ T7598] [ 180.469116][ T7608] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 180.544371][ T7633] loop2: detected capacity change from 0 to 2048 [ 180.548284][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.577434][ T3475] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.583478][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.614542][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 180.614559][ T26] audit: type=1400 audit(1690648786.239:284): avc: denied { read } for pid=7637 comm="syz-executor.0" path="socket:[31730]" dev="sockfs" ino=31730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 16:39:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 22) 16:39:46 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000003c0)) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x10) 16:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 14) 16:39:46 executing program 3: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "dd23162b20605899"}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="afaa5ef1b4b7", @empty, @void, {@llc={0x4, {@snap={0x0, 0xaa, 'u', "ca4fce", 0x4305, "60ebf3451c6a6a4e30f67f3336d5d0b348bbe31b57c0ebb9ba724ec185920c365d75c4b1072af68c1f83d9fbd3ef0dbfcc832c5ac0ff61d764f72cb6dae4d82c7c7fb7cfcba33bbc50ce2b89b9905e9539604a30813d24b64de8651809a6e63988a706211bf0b3cc736212e98d3c426b"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x95, 0xfb0, 0x28c, 0xfe]}) 16:39:46 executing program 0: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) (async) io_setup(0x1, &(0x7f0000000000)=0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f0000001300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000001c80)="69f7755cff64fff186", 0x9}]) 16:39:46 executing program 3: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "dd23162b20605899"}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="afaa5ef1b4b7", @empty, @void, {@llc={0x4, {@snap={0x0, 0xaa, 'u', "ca4fce", 0x4305, "60ebf3451c6a6a4e30f67f3336d5d0b348bbe31b57c0ebb9ba724ec185920c365d75c4b1072af68c1f83d9fbd3ef0dbfcc832c5ac0ff61d764f72cb6dae4d82c7c7fb7cfcba33bbc50ce2b89b9905e9539604a30813d24b64de8651809a6e63988a706211bf0b3cc736212e98d3c426b"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x95, 0xfb0, 0x28c, 0xfe]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "dd23162b20605899"}}}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="afaa5ef1b4b7", @empty, @void, {@llc={0x4, {@snap={0x0, 0xaa, 'u', "ca4fce", 0x4305, "60ebf3451c6a6a4e30f67f3336d5d0b348bbe31b57c0ebb9ba724ec185920c365d75c4b1072af68c1f83d9fbd3ef0dbfcc832c5ac0ff61d764f72cb6dae4d82c7c7fb7cfcba33bbc50ce2b89b9905e9539604a30813d24b64de8651809a6e63988a706211bf0b3cc736212e98d3c426b"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x95, 0xfb0, 0x28c, 0xfe]}) (async) 16:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 180.740972][ T7633] syz-executor.2: attempt to access beyond end of device [ 180.740972][ T7633] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 180.772368][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:46 executing program 3: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "dd23162b20605899"}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="afaa5ef1b4b7", @empty, @void, {@llc={0x4, {@snap={0x0, 0xaa, 'u', "ca4fce", 0x4305, "60ebf3451c6a6a4e30f67f3336d5d0b348bbe31b57c0ebb9ba724ec185920c365d75c4b1072af68c1f83d9fbd3ef0dbfcc832c5ac0ff61d764f72cb6dae4d82c7c7fb7cfcba33bbc50ce2b89b9905e9539604a30813d24b64de8651809a6e63988a706211bf0b3cc736212e98d3c426b"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x95, 0xfb0, 0x28c, 0xfe]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "dd23162b20605899"}}}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r0, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@random="afaa5ef1b4b7", @empty, @void, {@llc={0x4, {@snap={0x0, 0xaa, 'u', "ca4fce", 0x4305, "60ebf3451c6a6a4e30f67f3336d5d0b348bbe31b57c0ebb9ba724ec185920c365d75c4b1072af68c1f83d9fbd3ef0dbfcc832c5ac0ff61d764f72cb6dae4d82c7c7fb7cfcba33bbc50ce2b89b9905e9539604a30813d24b64de8651809a6e63988a706211bf0b3cc736212e98d3c426b"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x95, 0xfb0, 0x28c, 0xfe]}) (async) [ 180.789170][ T7647] FAULT_INJECTION: forcing a failure. [ 180.789170][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 180.801963][ T7647] CPU: 1 PID: 7647 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 180.812411][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 180.822506][ T7647] Call Trace: [ 180.825816][ T7647] [ 180.828790][ T7647] dump_stack_lvl+0xda/0x130 [ 180.833466][ T7647] dump_stack+0x15/0x20 16:39:46 executing program 3: mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) acct(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') acct(&(0x7f0000000100)='./file0\x00') acct(0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() tkill(r0, 0x1000000000016) [ 180.837652][ T7647] should_fail_ex+0x21f/0x230 [ 180.842443][ T7647] __should_failslab+0x92/0xa0 [ 180.847293][ T7647] should_failslab+0x9/0x20 [ 180.851935][ T7647] slab_pre_alloc_hook+0x38/0x180 [ 180.857017][ T7647] kmem_cache_alloc+0x52/0x220 [ 180.858063][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.861803][ T7647] ? skb_clone+0x154/0x1e0 [ 180.875565][ T7647] skb_clone+0x154/0x1e0 [ 180.879910][ T7647] __netlink_deliver_tap+0x2c0/0x4c0 [ 180.885258][ T7647] netlink_sendskb+0x116/0x140 16:39:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) [ 180.890105][ T7647] netlink_unicast+0x28e/0x640 [ 180.894909][ T7647] netlink_ack+0x8f3/0x940 [ 180.899439][ T7647] nfnetlink_rcv+0x1241/0x13b0 [ 180.904385][ T7647] netlink_unicast+0x56f/0x640 [ 180.909204][ T7647] netlink_sendmsg+0x665/0x770 [ 180.914031][ T7647] ? netlink_getsockopt+0x3e0/0x3e0 [ 180.919329][ T7647] ____sys_sendmsg+0x37c/0x4d0 [ 180.924145][ T7647] __sys_sendmsg+0x1e9/0x270 [ 180.928939][ T7647] __x64_sys_sendmsg+0x46/0x50 [ 180.933721][ T7647] do_syscall_64+0x41/0xc0 [ 180.938172][ T7647] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 180.944214][ T7647] RIP: 0033:0x7f9dc49e7b29 [ 180.948728][ T7647] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 180.968406][ T7647] RSP: 002b:00007f9dc3d6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.976985][ T7647] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e7b29 16:39:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (fail_nth: 15) [ 180.985219][ T7647] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 180.993322][ T7647] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 181.001294][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.009291][ T7647] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 181.017475][ T7647] [ 181.041137][ T7674] FAULT_INJECTION: forcing a failure. [ 181.041137][ T7674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.054436][ T7674] CPU: 1 PID: 7674 Comm: syz-executor.4 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 181.064841][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 181.074919][ T7674] Call Trace: [ 181.078232][ T7674] [ 181.081188][ T7674] dump_stack_lvl+0xda/0x130 [ 181.085868][ T7674] dump_stack+0x15/0x20 [ 181.090128][ T7674] should_fail_ex+0x21f/0x230 [ 181.094949][ T7674] should_fail+0xb/0x10 [ 181.099434][ T7674] should_fail_usercopy+0x1a/0x20 [ 181.102976][ T7676] loop2: detected capacity change from 0 to 2048 [ 181.104531][ T7674] _copy_to_user+0x1e/0x90 [ 181.115548][ T7674] simple_read_from_buffer+0xa0/0x110 [ 181.121025][ T7674] proc_fail_nth_read+0xfc/0x140 [ 181.126054][ T7674] ? proc_fault_inject_write+0x210/0x210 [ 181.131825][ T7674] vfs_read+0x19f/0x5c0 [ 181.136131][ T7674] ? __fget_files+0x1c4/0x200 [ 181.140966][ T7674] ? mutex_lock+0xd/0x30 [ 181.145262][ T7674] ksys_read+0xeb/0x1a0 [ 181.149554][ T7674] __x64_sys_read+0x42/0x50 [ 181.154124][ T7674] do_syscall_64+0x41/0xc0 [ 181.158559][ T7674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 181.164474][ T7674] RIP: 0033:0x7f9dc49e67cc [ 181.168904][ T7674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 181.188531][ T7674] RSP: 002b:00007f9dc3d6a0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.197036][ T7674] RAX: ffffffffffffffda RBX: 00007f9dc4b06f80 RCX: 00007f9dc49e67cc [ 181.205107][ T7674] RDX: 000000000000000f RSI: 00007f9dc3d6a130 RDI: 0000000000000004 [ 181.213200][ T7674] RBP: 00007f9dc3d6a120 R08: 0000000000000000 R09: 0000000000000000 [ 181.221197][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.229200][ T7674] R13: 000000000000000b R14: 00007f9dc4b06f80 R15: 00007ffca0ab0fb8 [ 181.237209][ T7674] [ 181.252743][ T7667] Process accounting resumed [ 181.267532][ T7667] Process accounting resumed 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 16:39:47 executing program 0: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f0000001300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000001c80)="69f7755cff64fff186", 0x9}]) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000003c0)) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x10) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000003c0)) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x10) (async) 16:39:47 executing program 3: mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) acct(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') acct(&(0x7f0000000100)='./file0\x00') acct(0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() tkill(r0, 0x1000000000016) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) (async) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) (async) acct(&(0x7f00000000c0)='./file0\x00') (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) unlink(&(0x7f0000000140)='./file0\x00') (async) acct(&(0x7f0000000100)='./file0\x00') (async) acct(0x0) (async) creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) gettid() (async) tkill(r0, 0x1000000000016) (async) 16:39:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 23) [ 181.377751][ T7676] syz-executor.2: attempt to access beyond end of device [ 181.377751][ T7676] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 181.412211][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x4}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x8}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000003c0)) (async) r6 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x10) 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) [ 181.425806][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 16:39:47 executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) acct(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') acct(&(0x7f0000000100)='./file0\x00') acct(0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() tkill(r0, 0x1000000000016) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0xf}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 181.500003][ T7709] loop2: detected capacity change from 0 to 2048 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 16:39:47 executing program 3: mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) acct(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') acct(&(0x7f0000000100)='./file0\x00') (async) acct(&(0x7f0000000100)='./file0\x00') acct(0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() tkill(r0, 0x1000000000016) (async) tkill(r0, 0x1000000000016) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x10}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="350c256b8c5eade4090a6080ad07803f4290ee710bb059be4ecbd179744159ed1046ee2fdd5c117b52261eee5f7eb6695161841e285a9309492173d0a1824d9dbf1f90316e3fd96a8cfcc44b445a5bc5f8d87f7c47e88c8de46b300a92277278bfcd8d120de2b08df544688024a91c619595e65002261d421241cebc98b6e85b6c93be43fe70e18d7af104dc", 0x8c}], 0x1, &(0x7f0000000240)="19a30a65e1b7aa7a23454e37d6110eca261a17f78954c2a761aa0d78b8953720eee93d4f4e1eb4233d914fbde782fdf07a7e9271eca3aab55cadea1c57343f899ef6aae84064b6f3e78a073d1645d5f6f03e66d97a6f814e84df17e72d716fe29b1c4e9677e6a4aae3d1ab5cdb6c1f9e647d9db70ef20ca56607e8dc48c7e1624f701fd7a7495a2a1481af55680f2da1b7d613f4976f64f572f5b6cc8c8f9654759ff2ae2cb9fb020a4a49115a5a01274eeab5e0079373efffaa866ca73b28455136ee291d840d468378955596f1ebac6fc5ff2ef51f03d5d0aec8876470219e809a49cb97c94963a4c839de4791f4", 0xef}, 0x8000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000340), &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$eJzs1bFuUn8UB/ADBf70P3U2Dr/Exampbk5iDE0aSUw0DDpJUly4xgSWC4v4Bj6AD+bgQximbhhyocVqFCPl1vr5LBzu91z4HQ6BV7ffDE7fjl5/+vAxmq1KVFuxXz2rxEFUY2UaAMBNcjafx5d54RetG7QAAH+D3/j/BwBuiOcvXj551Om0n6XUjJhN827eLR6L/Pik0z5KC421u2Z53t07z++lQtTX83r8v8zvr/Jv7m/E3TtFvsgeP+1cyv+L0x3MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7LDlGoRkVJKBxdXZ3ne3Svyw7RyKS+q45NO+2jZsHjeOs9rcau201EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPzQaTwa9LOsPf1q826CnvGL/B1NEfI4dH6NZLz7SjZor72NL795abvJ67OJqi4dbep3G+poeRGxrFyUV07UrjYsoorL5F/K7orzfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFyj8WTQy7L+cFT2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA62I0ngx6WdYfXmFR9owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOb4GAAD//77OK28=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 24) [ 181.688964][ T7709] syz-executor.2: attempt to access beyond end of device [ 181.688964][ T7709] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 181.703352][ T7722] Process accounting resumed [ 181.717964][ T7729] Process accounting resumed 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 16:39:47 executing program 0: mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) acct(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') acct(&(0x7f0000000100)='./file0\x00') acct(0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = gettid() tkill(r0, 0x1000000000016) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x2c}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="350c256b8c5eade4090a6080ad07803f4290ee710bb059be4ecbd179744159ed1046ee2fdd5c117b52261eee5f7eb6695161841e285a9309492173d0a1824d9dbf1f90316e3fd96a8cfcc44b445a5bc5f8d87f7c47e88c8de46b300a92277278bfcd8d120de2b08df544688024a91c619595e65002261d421241cebc98b6e85b6c93be43fe70e18d7af104dc", 0x8c}], 0x1, &(0x7f0000000240)="19a30a65e1b7aa7a23454e37d6110eca261a17f78954c2a761aa0d78b8953720eee93d4f4e1eb4233d914fbde782fdf07a7e9271eca3aab55cadea1c57343f899ef6aae84064b6f3e78a073d1645d5f6f03e66d97a6f814e84df17e72d716fe29b1c4e9677e6a4aae3d1ab5cdb6c1f9e647d9db70ef20ca56607e8dc48c7e1624f701fd7a7495a2a1481af55680f2da1b7d613f4976f64f572f5b6cc8c8f9654759ff2ae2cb9fb020a4a49115a5a01274eeab5e0079373efffaa866ca73b28455136ee291d840d468378955596f1ebac6fc5ff2ef51f03d5d0aec8876470219e809a49cb97c94963a4c839de4791f4", 0xef}, 0x8000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000340), &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 181.732240][ T26] audit: type=1400 audit(1690648787.359:285): avc: denied { setattr } for pid=7734 comm="syz-executor.1" name="TIPC" dev="sockfs" ino=32886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x90}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="350c256b8c5eade4090a6080ad07803f4290ee710bb059be4ecbd179744159ed1046ee2fdd5c117b52261eee5f7eb6695161841e285a9309492173d0a1824d9dbf1f90316e3fd96a8cfcc44b445a5bc5f8d87f7c47e88c8de46b300a92277278bfcd8d120de2b08df544688024a91c619595e65002261d421241cebc98b6e85b6c93be43fe70e18d7af104dc", 0x8c}], 0x1, &(0x7f0000000240)="19a30a65e1b7aa7a23454e37d6110eca261a17f78954c2a761aa0d78b8953720eee93d4f4e1eb4233d914fbde782fdf07a7e9271eca3aab55cadea1c57343f899ef6aae84064b6f3e78a073d1645d5f6f03e66d97a6f814e84df17e72d716fe29b1c4e9677e6a4aae3d1ab5cdb6c1f9e647d9db70ef20ca56607e8dc48c7e1624f701fd7a7495a2a1481af55680f2da1b7d613f4976f64f572f5b6cc8c8f9654759ff2ae2cb9fb020a4a49115a5a01274eeab5e0079373efffaa866ca73b28455136ee291d840d468378955596f1ebac6fc5ff2ef51f03d5d0aec8876470219e809a49cb97c94963a4c839de4791f4", 0xef}, 0x8000) (async) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000340), &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 181.787564][ T7740] loop2: detected capacity change from 0 to 2048 16:39:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 25) 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0xa4}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10, 0x0}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 16:39:47 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000100)=""/164, 0x18) getdents(r1, &(0x7f00000011c0)=""/46, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) [ 181.961845][ T7746] Process accounting resumed [ 181.979095][ T7765] Process accounting resumed [ 181.990960][ T7740] syz-executor.2: attempt to access beyond end of device [ 181.990960][ T7740] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:47 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10, 0x0}, 0x0) (async) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000008640), 0x12580, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xaa}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 16:39:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x2}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:47 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r0) (async) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000100)=""/164, 0x18) getdents(r1, &(0x7f00000011c0)=""/46, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 16:39:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) [ 182.152492][ T7783] loop2: detected capacity change from 0 to 2048 [ 182.216164][ T7795] FAULT_INJECTION: forcing a failure. [ 182.216164][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 182.228894][ T7795] CPU: 1 PID: 7795 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 182.239286][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 182.249643][ T7795] Call Trace: [ 182.252947][ T7795] [ 182.255960][ T7795] dump_stack_lvl+0xda/0x130 [ 182.260587][ T7795] dump_stack+0x15/0x20 [ 182.264770][ T7795] should_fail_ex+0x21f/0x230 [ 182.269539][ T7795] __should_failslab+0x92/0xa0 [ 182.274341][ T7795] should_failslab+0x9/0x20 [ 182.275079][ T7783] syz-executor.2: attempt to access beyond end of device [ 182.275079][ T7783] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 182.278877][ T7795] slab_pre_alloc_hook+0x38/0x180 [ 182.299870][ T7795] kmem_cache_alloc+0x52/0x220 [ 182.304750][ T7795] ? __blockdev_direct_IO+0x138/0x1f80 [ 182.310294][ T7795] __blockdev_direct_IO+0x138/0x1f80 [ 182.315624][ T7795] ? fat_block_truncate_page+0x40/0x40 [ 182.321119][ T7795] ? filemap_get_folios_tag+0x1fd/0x230 [ 182.326706][ T7795] fat_direct_IO+0x110/0x1d0 [ 182.331363][ T7795] generic_file_read_iter+0x236/0x340 [ 182.336809][ T7795] copy_splice_read+0x26b/0x4b0 [ 182.341863][ T7795] ? splice_folio_into_pipe+0x290/0x290 [ 182.347506][ T7795] splice_direct_to_actor+0x2aa/0x690 [ 182.355008][ T7795] ? direct_file_splice_eof+0x70/0x70 [ 182.360444][ T7795] do_splice_direct+0x10d/0x190 [ 182.365402][ T7795] ? do_splice_direct+0x190/0x190 [ 182.370457][ T7795] do_sendfile+0x3b6/0x9a0 [ 182.374893][ T7795] __x64_sys_sendfile64+0x110/0x150 [ 182.380257][ T7795] do_syscall_64+0x41/0xc0 [ 182.384710][ T7795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 182.390778][ T7795] RIP: 0033:0x7fa29008fb29 [ 182.395199][ T7795] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:39:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 26) 16:39:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000008640), 0x12580, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xaa}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7f) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 16:39:48 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000100)=""/164, 0x18) (async) getdents(r1, &(0x7f00000011c0)=""/46, 0x2e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 16:39:48 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x1, 0x0) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x1}}, 0x10, 0x0}, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x7}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) [ 182.414901][ T7795] RSP: 002b:00007fa2870f10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 182.423364][ T7795] RAX: ffffffffffffffda RBX: 00007fa2901af050 RCX: 00007fa29008fb29 [ 182.431374][ T7795] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 182.439384][ T7795] RBP: 00007fa2870f1120 R08: 0000000000000000 R09: 0000000000000000 [ 182.447613][ T7795] R10: 00000000ffffff0c R11: 0000000000000246 R12: 0000000000000002 [ 182.455716][ T7795] R13: 000000000000006e R14: 00007fa2901af050 R15: 00007ffc88af08e8 [ 182.463793][ T7795] 16:39:48 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000080)="5a5da78464350218ab20571ed74a0ba837205be975c8bb8c346f9e4676f9e7fefbfe3452f16706569163a26d17207e5f6affb6f21d5ec75e5277a27a88cb681650e3f9425c16312d3c5e370adf4fdd51a1a2273dc8bd5d31e46eca2628a8459c89c3b6985dfdfb45d64e7fce8c01123eb6034ba13f77e3e30c69e60ba8e71577a747746fc26a1cd1d064e9d904f37074d9e5467ec83452ce8537c039be762d655f5d") setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:48 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xe7}, 0x16, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x2d2}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 16:39:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 16:39:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000008640), 0x12580, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xaa}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000008640), 0x12580, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xaa}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7f) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x6611, 0x0) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) (async) 16:39:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0xa}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 182.570987][ T7811] loop2: detected capacity change from 0 to 2048 16:39:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 27) 16:39:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x2}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000022c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}]}, &(0x7f0000002300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2}, 0x8) r3 = socket$inet(0x2, 0x6, 0x106d6454) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 16:39:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:48 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000080)="5a5da78464350218ab20571ed74a0ba837205be975c8bb8c346f9e4676f9e7fefbfe3452f16706569163a26d17207e5f6affb6f21d5ec75e5277a27a88cb681650e3f9425c16312d3c5e370adf4fdd51a1a2273dc8bd5d31e46eca2628a8459c89c3b6985dfdfb45d64e7fce8c01123eb6034ba13f77e3e30c69e60ba8e71577a747746fc26a1cd1d064e9d904f37074d9e5467ec83452ce8537c039be762d655f5d") setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 182.769516][ T7811] syz-executor.2: attempt to access beyond end of device [ 182.769516][ T7811] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x7}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 182.804652][ T26] audit: type=1400 audit(1690648788.429:286): avc: denied { getopt } for pid=7836 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.865804][ T26] audit: type=1400 audit(1690648788.429:287): avc: denied { connect } for pid=7836 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.885947][ T26] audit: type=1400 audit(1690648788.429:288): avc: denied { name_connect } for pid=7836 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 182.888740][ T7852] loop2: detected capacity change from 0 to 2048 [ 183.060512][ T7852] syz-executor.2: attempt to access beyond end of device [ 183.060512][ T7852] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xe7}, 0x16, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x2d2}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$tipc(0x1e, 0x2, 0x0) (async) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xe7}, 0x16, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) (async) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x2d2}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) (async) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) (async) 16:39:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x8}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:49 executing program 1: socket$tipc(0x1e, 0x1, 0x0) (async) r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) socket$tipc(0x1e, 0x1, 0x0) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89fd, &(0x7f0000000080)="5a5da78464350218ab20571ed74a0ba837205be975c8bb8c346f9e4676f9e7fefbfe3452f16706569163a26d17207e5f6affb6f21d5ec75e5277a27a88cb681650e3f9425c16312d3c5e370adf4fdd51a1a2273dc8bd5d31e46eca2628a8459c89c3b6985dfdfb45d64e7fce8c01123eb6034ba13f77e3e30c69e60ba8e71577a747746fc26a1cd1d064e9d904f37074d9e5467ec83452ce8537c039be762d655f5d") setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) (fail_nth: 28) 16:39:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0xc}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) [ 183.482001][ T7863] loop2: detected capacity change from 0 to 2048 [ 183.559848][ T7884] ================================================================== [ 183.568012][ T7884] BUG: KCSAN: data-race in __mpage_writepage / generic_file_direct_write [ 183.576562][ T7884] [ 183.578951][ T7884] write to 0xffff88810638ab58 of 8 bytes by task 7863 on cpu 1: [ 183.586634][ T7884] generic_file_direct_write+0x1a3/0x200 [ 183.592313][ T7884] __generic_file_write_iter+0xae/0x120 [ 183.598004][ T7884] generic_file_write_iter+0x7d/0x1c0 [ 183.603430][ T7884] do_iter_write+0x4b4/0x7b0 [ 183.608064][ T7884] vfs_iter_write+0x56/0x70 [ 183.612615][ T7884] iter_file_splice_write+0x462/0x7e0 [ 183.618050][ T7884] direct_splice_actor+0x8a/0xb0 [ 183.623053][ T7884] splice_direct_to_actor+0x31d/0x690 [ 183.628476][ T7884] do_splice_direct+0x10d/0x190 [ 183.633371][ T7884] do_sendfile+0x3b6/0x9a0 [ 183.637816][ T7884] __x64_sys_sendfile64+0x110/0x150 [ 183.643049][ T7884] do_syscall_64+0x41/0xc0 [ 183.647510][ T7884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 183.653519][ T7884] 16:39:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000022c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}]}, &(0x7f0000002300)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2}, 0x8) (async) r3 = socket$inet(0x2, 0x6, 0x106d6454) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 16:39:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x300}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:49 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8810}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 16:39:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xe7}, 0x16, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) (async) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x2d2}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) (async) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 183.655907][ T7884] read to 0xffff88810638ab58 of 8 bytes by task 7884 on cpu 0: [ 183.663117][ T7863] syz-executor.2: attempt to access beyond end of device [ 183.663117][ T7863] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 183.663475][ T7884] __mpage_writepage+0xc3/0xdb0 [ 183.682346][ T7884] write_cache_pages+0x39d/0x750 [ 183.687332][ T7884] mpage_writepages+0x72/0xe0 [ 183.692069][ T7884] fat_writepages+0x24/0x30 [ 183.696624][ T7884] do_writepages+0x1c5/0x340 [ 183.701341][ T7884] filemap_fdatawrite_wbc+0xdb/0xf0 [ 183.706736][ T7884] file_write_and_wait_range+0xfa/0x190 [ 183.712325][ T7884] __generic_file_fsync+0x4c/0x140 [ 183.717520][ T7884] fat_file_fsync+0x4c/0x100 [ 183.722169][ T7884] vfs_fsync_range+0x111/0x120 [ 183.727062][ T7884] generic_file_write_iter+0x191/0x1c0 [ 183.732555][ T7884] do_iter_write+0x4b4/0x7b0 [ 183.737167][ T7884] vfs_iter_write+0x56/0x70 [ 183.741693][ T7884] iter_file_splice_write+0x462/0x7e0 [ 183.747110][ T7884] direct_splice_actor+0x8a/0xb0 [ 183.752071][ T7884] splice_direct_to_actor+0x31d/0x690 [ 183.757482][ T7884] do_splice_direct+0x10d/0x190 [ 183.762381][ T7884] do_sendfile+0x3b6/0x9a0 [ 183.766826][ T7884] __x64_sys_sendfile64+0x110/0x150 [ 183.772035][ T7884] do_syscall_64+0x41/0xc0 [ 183.776468][ T7884] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 183.782386][ T7884] [ 183.784713][ T7884] value changed: 0x0000000000015200 -> 0x0000000000015400 [ 183.791822][ T7884] [ 183.794170][ T7884] Reported by Kernel Concurrency Sanitizer on: [ 183.800339][ T7884] CPU: 0 PID: 7884 Comm: syz-executor.2 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 16:39:49 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8810}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) socket$tipc(0x1e, 0x1, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) 16:39:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xe7}, 0x16, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x2d2}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 16:39:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 183.810789][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 183.820958][ T7884] ================================================================== 16:39:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0c) 16:39:49 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8810}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) [ 183.885628][ T7884] syz-executor.2 (7884) used greatest stack depth: 10216 bytes left [ 183.967129][ T7924] loop2: detected capacity change from 0 to 2048 [ 184.120638][ T7924] syz-executor.2: attempt to access beyond end of device [ 184.120638][ T7924] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000022c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}]}, &(0x7f0000002300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2}, 0x8) r3 = socket$inet(0x2, 0x6, 0x106d6454) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000022c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x7}]}, &(0x7f0000002300)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000180)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2}, 0x8) (async) socket$inet(0x2, 0x6, 0x106d6454) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) (async) 16:39:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:50 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="6ad32e1bb15f", 0x6}], 0x1, &(0x7f0000000240)="52dcffbafec117ce714e4ac4e2f67d98003961528ab8e8035052ce7943444f46576eb4cd5e11d2d1d71cf6e023ab4fe6d3d410f25e2449308b2e8662fff012e83c6ff3dc68bc351afb93048fb62d98f03c9d0a61ae178c97cf92dff808c94122a26caaefead3d3", 0x67, 0x4000800}, 0x20000010) 16:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 16:39:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0b) 16:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) [ 184.558214][ T7932] loop2: detected capacity change from 0 to 2048 16:39:50 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xe7}, 0x16, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x2d2}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 16:39:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x3}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:50 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 32) r1 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 32) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="6ad32e1bb15f", 0x6}], 0x1, &(0x7f0000000240)="52dcffbafec117ce714e4ac4e2f67d98003961528ab8e8035052ce7943444f46576eb4cd5e11d2d1d71cf6e023ab4fe6d3d410f25e2449308b2e8662fff012e83c6ff3dc68bc351afb93048fb62d98f03c9d0a61ae178c97cf92dff808c94122a26caaefead3d3", 0x67, 0x4000800}, 0x20000010) 16:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 16:39:50 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x12, r0, 0x80000000) 16:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 16:39:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x4}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:50 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x12, r0, 0x80000000) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x12, r0, 0x80000000) 16:39:50 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="6ad32e1bb15f", 0x6}], 0x1, &(0x7f0000000240)="52dcffbafec117ce714e4ac4e2f67d98003961528ab8e8035052ce7943444f46576eb4cd5e11d2d1d71cf6e023ab4fe6d3d410f25e2449308b2e8662fff012e83c6ff3dc68bc351afb93048fb62d98f03c9d0a61ae178c97cf92dff808c94122a26caaefead3d3", 0x67, 0x4000800}, 0x20000010) 16:39:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 1) [ 184.750427][ T26] audit: type=1400 audit(1690648790.379:289): avc: denied { map } for pid=7946 comm="syz-executor.3" path="socket:[33133]" dev="sockfs" ino=33133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.831002][ T26] audit: type=1400 audit(1690648790.379:290): avc: denied { read } for pid=7946 comm="syz-executor.3" path="socket:[33133]" dev="sockfs" ino=33133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.854133][ T7971] FAULT_INJECTION: forcing a failure. [ 184.854133][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.867910][ T7971] CPU: 0 PID: 7971 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 16:39:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0d) 16:39:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x5}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 184.878275][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 184.888371][ T7971] Call Trace: [ 184.891676][ T7971] [ 184.894634][ T7971] dump_stack_lvl+0xda/0x130 [ 184.899265][ T7971] dump_stack+0x15/0x20 [ 184.903488][ T7971] should_fail_ex+0x21f/0x230 [ 184.908242][ T7971] should_fail+0xb/0x10 [ 184.912414][ T7971] should_fail_usercopy+0x1a/0x20 [ 184.917527][ T7971] _copy_from_user+0x1e/0xd0 [ 184.922267][ T7971] copy_msghdr_from_user+0x54/0x2a0 [ 184.927649][ T7971] __sys_sendmsg+0x17d/0x270 [ 184.932341][ T7971] __x64_sys_sendmsg+0x46/0x50 [ 184.937209][ T7971] do_syscall_64+0x41/0xc0 [ 184.941651][ T7971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 184.947585][ T7971] RIP: 0033:0x7f58aeedfb29 [ 184.952089][ T7971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 184.971730][ T7971] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.980210][ T7971] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 184.988216][ T7971] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 184.997062][ T7971] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 185.005341][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.013514][ T7971] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 185.021592][ T7971] [ 185.065834][ T7975] loop2: detected capacity change from 0 to 2048 [ 185.209931][ T7975] bio_check_eod: 1 callbacks suppressed [ 185.209949][ T7975] syz-executor.2: attempt to access beyond end of device [ 185.209949][ T7975] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:51 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80840) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x44}, 0x10) r3 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2}}, 0x10, 0x0}, 0x45040) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:39:51 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x12, r0, 0x80000000) 16:39:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0b) 16:39:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x6}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 2) 16:39:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0f) 16:39:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x7}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 185.604025][ T7985] __nla_validate_parse: 3 callbacks suppressed [ 185.604042][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.629494][ T7982] FAULT_INJECTION: forcing a failure. [ 185.629494][ T7982] name failslab, interval 1, probability 0, space 0, times 0 [ 185.643065][ T7982] CPU: 0 PID: 7982 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 185.653806][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 185.664210][ T7982] Call Trace: [ 185.667535][ T7982] [ 185.670478][ T7982] dump_stack_lvl+0xda/0x130 [ 185.675173][ T7982] dump_stack+0x15/0x20 [ 185.679345][ T7982] should_fail_ex+0x21f/0x230 [ 185.684102][ T7982] __should_failslab+0x92/0xa0 [ 185.688960][ T7982] should_failslab+0x9/0x20 [ 185.693571][ T7982] slab_pre_alloc_hook+0x38/0x180 [ 185.698756][ T7982] kmem_cache_alloc_node+0x54/0x240 [ 185.704123][ T7982] ? __alloc_skb+0x109/0x2e0 [ 185.710053][ T7982] __alloc_skb+0x109/0x2e0 [ 185.714526][ T7982] netlink_sendmsg+0x483/0x770 [ 185.719310][ T7982] ? netlink_getsockopt+0x3e0/0x3e0 [ 185.724593][ T7982] ____sys_sendmsg+0x37c/0x4d0 [ 185.729568][ T7982] __sys_sendmsg+0x1e9/0x270 [ 185.734281][ T7982] __x64_sys_sendmsg+0x46/0x50 [ 185.739331][ T7982] do_syscall_64+0x41/0xc0 [ 185.743763][ T7982] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 185.749755][ T7982] RIP: 0033:0x7f58aeedfb29 [ 185.754199][ T7982] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 185.774875][ T7982] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.783394][ T7982] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 185.791678][ T7982] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 16:39:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0b) 16:39:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 3) 16:39:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x8}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 185.799663][ T7982] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 185.807700][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.815727][ T7982] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 185.823839][ T7982] [ 185.838833][ T7989] loop2: detected capacity change from 0 to 2048 [ 185.839284][ T7988] loop0: detected capacity change from 0 to 2048 16:39:51 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80840) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x44}, 0x10) r3 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2}}, 0x10, 0x0}, 0x45040) (async) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:39:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 4) 16:39:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x9}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 185.928055][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.959761][ T8003] FAULT_INJECTION: forcing a failure. [ 185.959761][ T8003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.973070][ T8003] CPU: 0 PID: 8003 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 185.983523][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 185.992268][ T7993] loop3: detected capacity change from 0 to 2048 [ 185.993606][ T8003] Call Trace: [ 185.993615][ T8003] [ 185.993623][ T8003] dump_stack_lvl+0xda/0x130 [ 185.993655][ T8003] dump_stack+0x15/0x20 [ 186.015361][ T8003] should_fail_ex+0x21f/0x230 [ 186.020783][ T8003] should_fail+0xb/0x10 [ 186.024985][ T8003] should_fail_usercopy+0x1a/0x20 [ 186.030082][ T8003] _copy_from_iter+0xd8/0xa40 [ 186.034802][ T8003] ? kmalloc_reserve+0xfb/0x190 [ 186.039682][ T8003] ? __build_skb_around+0x196/0x1f0 [ 186.044955][ T8003] ? __virt_addr_valid+0x16a/0x1b0 [ 186.050095][ T8003] ? __check_object_size+0x363/0x520 [ 186.055400][ T8003] netlink_sendmsg+0x53c/0x770 [ 186.060239][ T8003] ? netlink_getsockopt+0x3e0/0x3e0 [ 186.065472][ T8003] ____sys_sendmsg+0x37c/0x4d0 [ 186.070313][ T8003] __sys_sendmsg+0x1e9/0x270 [ 186.074949][ T8003] __x64_sys_sendmsg+0x46/0x50 [ 186.079969][ T8003] do_syscall_64+0x41/0xc0 [ 186.084498][ T8003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 186.090478][ T8003] RIP: 0033:0x7f58aeedfb29 [ 186.094901][ T8003] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 186.114712][ T8003] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.123166][ T8003] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 186.131215][ T8003] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 186.139200][ T8003] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 186.147194][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.155183][ T8003] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 186.163209][ T8003] 16:39:52 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80840) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x44}, 0x10) r3 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2}}, 0x10, 0x0}, 0x45040) (async) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:39:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 5) 16:39:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff10) [ 186.343869][ T7988] syz-executor.0: attempt to access beyond end of device [ 186.343869][ T7988] loop0: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 186.347993][ T7989] syz-executor.2: attempt to access beyond end of device [ 186.347993][ T7989] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x22}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 186.421055][ T8015] FAULT_INJECTION: forcing a failure. [ 186.421055][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 186.427306][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.433803][ T8015] CPU: 0 PID: 8015 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 186.453318][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 186.463431][ T8015] Call Trace: [ 186.466801][ T8015] [ 186.469775][ T8015] dump_stack_lvl+0xda/0x130 [ 186.474513][ T8015] dump_stack+0x15/0x20 [ 186.478711][ T8015] should_fail_ex+0x21f/0x230 [ 186.483473][ T8015] __should_failslab+0x92/0xa0 [ 186.488331][ T8015] should_failslab+0x9/0x20 [ 186.492920][ T8015] slab_pre_alloc_hook+0x38/0x180 [ 186.498049][ T8015] kmem_cache_alloc+0x52/0x220 [ 186.503009][ T8015] ? skb_clone+0x154/0x1e0 [ 186.507474][ T8015] skb_clone+0x154/0x1e0 [ 186.511917][ T8015] __netlink_deliver_tap+0x2c0/0x4c0 [ 186.517287][ T8015] netlink_unicast+0x615/0x640 [ 186.522091][ T8015] netlink_sendmsg+0x665/0x770 [ 186.527039][ T8015] ? netlink_getsockopt+0x3e0/0x3e0 [ 186.529371][ T8024] loop2: detected capacity change from 0 to 2048 [ 186.532295][ T8015] ____sys_sendmsg+0x37c/0x4d0 [ 186.543496][ T8015] __sys_sendmsg+0x1e9/0x270 [ 186.548314][ T8015] __x64_sys_sendmsg+0x46/0x50 [ 186.553305][ T8015] do_syscall_64+0x41/0xc0 [ 186.557825][ T8015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 186.563784][ T8015] RIP: 0033:0x7f58aeedfb29 [ 186.568243][ T8015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 186.570884][ T7993] syz-executor.3: attempt to access beyond end of device [ 186.570884][ T7993] loop3: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 186.588317][ T8015] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.588343][ T8015] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 16:39:52 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x2000042}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) 16:39:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff0b) 16:39:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15, 0x4, @thr={&(0x7f00000002c0)="792867a06ecfc73b19325e960ce2afca8daaf34b0a2c83c8fa39d3232c17a831cce902514135be23c43d6b8f173050b76f4c25ab94ca164716603112ba5928e44fd4ef766a479ea6bf2ccee1a9a86dc487c9e2c84e5653ab0bd21fc9d7f3fbe6169646e7", &(0x7f0000000340)="31dda83684ccb7f1e03599a6b42ec3e3d96fde6876ed20b6a4555ae5070a3b9c419634ce92cd15a4ca47bd098449ebeb61e65d9f2af603ca0643a045fa5fc712ac18914e43c7b9b8a25d70854d2d8be595a4c2cdfbcef16a26ba83d80c9d280152f4052b5f9a1ed9a3da1ffb9d3abe523230606fa0faa193f49ab9b49754d8c641a53b36e10133ad7ad74fc0c42241c10adc40511cb5efd38e2f42421e4cec829b87d49c042fa181284dbd1a3d00a6a38a23eb2fa7914bad3e4fa47c6415551826e5f54831308e44d0c7e7182c6919343374836f5206aa87c084edc30b048c0ad5a424aeebe1cba704558e4cc7c894"}}, &(0x7f0000000280)) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = open(0x0, 0x0, 0x61) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff31) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r8 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRESDEC, @ANYRESHEX=r8], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") 16:39:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x28}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 6) [ 186.588358][ T8015] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 186.588374][ T8015] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 186.588389][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.642881][ T8015] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 186.650987][ T8015] [ 186.696687][ T8030] FAULT_INJECTION: forcing a failure. [ 186.696687][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 186.709421][ T8030] CPU: 0 PID: 8030 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 186.719930][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 186.730021][ T8030] Call Trace: [ 186.733326][ T8030] [ 186.736286][ T8030] dump_stack_lvl+0xda/0x130 [ 186.741070][ T8030] dump_stack+0x15/0x20 [ 186.745263][ T8030] should_fail_ex+0x21f/0x230 [ 186.749976][ T8030] __should_failslab+0x92/0xa0 [ 186.754829][ T8030] should_failslab+0x9/0x20 [ 186.759706][ T8030] slab_pre_alloc_hook+0x38/0x180 [ 186.764792][ T8030] kmem_cache_alloc+0x52/0x220 [ 186.769600][ T8030] ? skb_clone+0x154/0x1e0 [ 186.774072][ T8030] skb_clone+0x154/0x1e0 [ 186.777080][ T8024] syz-executor.2: attempt to access beyond end of device [ 186.777080][ T8024] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 186.778345][ T8030] nfnetlink_rcv+0x2ea/0x13b0 16:39:52 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 64) r1 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x2000042}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) 16:39:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff1c) [ 186.797062][ T8030] ? skb_release_data+0x542/0x560 [ 186.802146][ T8030] ? kmem_cache_free+0x1db/0x3a0 [ 186.807201][ T8030] ? __kfree_skb+0x104/0x140 [ 186.811945][ T8030] ? nlmon_xmit+0x4b/0x60 [ 186.816336][ T8030] ? __kfree_skb+0x104/0x140 [ 186.820974][ T8030] ? consume_skb+0x57/0x180 [ 186.825584][ T8030] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 186.830950][ T8030] ? ref_tracker_free+0x3a1/0x400 [ 186.836077][ T8030] ? __dev_queue_xmit+0xabb/0x1d10 [ 186.841289][ T8030] netlink_unicast+0x56f/0x640 16:39:52 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x2000042}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) [ 186.846098][ T8030] netlink_sendmsg+0x665/0x770 [ 186.850916][ T8030] ? netlink_getsockopt+0x3e0/0x3e0 [ 186.856233][ T8030] ____sys_sendmsg+0x37c/0x4d0 [ 186.861129][ T8030] __sys_sendmsg+0x1e9/0x270 [ 186.865945][ T8030] __x64_sys_sendmsg+0x46/0x50 [ 186.870796][ T8030] do_syscall_64+0x41/0xc0 [ 186.875289][ T8030] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 186.881310][ T8030] RIP: 0033:0x7f58aeedfb29 [ 186.885866][ T8030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 186.905508][ T8030] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.913950][ T8030] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 186.922191][ T8030] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 186.930209][ T8030] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 186.938210][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 16:39:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 7) 16:39:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x5c}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) [ 186.946435][ T8030] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 186.954733][ T8030] 16:39:52 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 187.035098][ T8050] FAULT_INJECTION: forcing a failure. [ 187.035098][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 187.035157][ T8049] loop2: detected capacity change from 0 to 2048 [ 187.047906][ T8050] CPU: 1 PID: 8050 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 187.062164][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.064513][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 187.083878][ T8050] Call Trace: [ 187.086054][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.087158][ T8050] [ 187.087168][ T8050] dump_stack_lvl+0xda/0x130 [ 187.104111][ T8050] dump_stack+0x15/0x20 [ 187.108447][ T8050] should_fail_ex+0x21f/0x230 [ 187.113237][ T8050] ? nfnetlink_rcv+0x8a2/0x13b0 [ 187.118144][ T8050] __should_failslab+0x92/0xa0 [ 187.122970][ T8050] should_failslab+0x9/0x20 [ 187.127611][ T8050] slab_pre_alloc_hook+0x38/0x180 [ 187.132854][ T8050] ? nfnetlink_rcv+0x8a2/0x13b0 [ 187.137847][ T8050] __kmem_cache_alloc_node+0x48/0x1d0 [ 187.143262][ T8050] ? nfnetlink_rcv+0x8a2/0x13b0 [ 187.148325][ T8050] kmalloc_trace+0x2a/0xa0 [ 187.152797][ T8050] nfnetlink_rcv+0x8a2/0x13b0 [ 187.157598][ T8050] ? consume_skb+0x57/0x180 [ 187.162177][ T8050] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 187.167644][ T8050] ? ref_tracker_free+0x3a1/0x400 [ 187.172869][ T8050] ? __dev_queue_xmit+0xabb/0x1d10 [ 187.178149][ T8050] netlink_unicast+0x56f/0x640 [ 187.183141][ T8050] netlink_sendmsg+0x665/0x770 [ 187.188029][ T8050] ? netlink_getsockopt+0x3e0/0x3e0 [ 187.193261][ T8050] ____sys_sendmsg+0x37c/0x4d0 [ 187.198219][ T8050] __sys_sendmsg+0x1e9/0x270 [ 187.202973][ T8050] __x64_sys_sendmsg+0x46/0x50 [ 187.207820][ T8050] do_syscall_64+0x41/0xc0 [ 187.212273][ T8050] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 187.218284][ T8050] RIP: 0033:0x7f58aeedfb29 [ 187.222815][ T8050] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 187.242574][ T8050] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.251000][ T8050] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 187.258990][ T8050] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 187.267076][ T8050] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 187.275063][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 16:39:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x60}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 8) [ 187.283384][ T8050] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 187.291450][ T8050] [ 187.362485][ T8058] FAULT_INJECTION: forcing a failure. [ 187.362485][ T8058] name failslab, interval 1, probability 0, space 0, times 0 [ 187.375331][ T8058] CPU: 0 PID: 8058 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 187.378120][ T8054] loop3: detected capacity change from 0 to 2048 [ 187.385679][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 187.385698][ T8058] Call Trace: [ 187.385705][ T8058] [ 187.385745][ T8058] dump_stack_lvl+0xda/0x130 [ 187.413324][ T8058] dump_stack+0x15/0x20 [ 187.417557][ T8058] should_fail_ex+0x21f/0x230 [ 187.422454][ T8058] ? nfnetlink_rcv+0x8a2/0x13b0 [ 187.427497][ T8058] __should_failslab+0x92/0xa0 [ 187.432499][ T8058] should_failslab+0x9/0x20 [ 187.437072][ T8058] slab_pre_alloc_hook+0x38/0x180 [ 187.442214][ T8058] ? nfnetlink_rcv+0x8a2/0x13b0 [ 187.447100][ T8058] __kmem_cache_alloc_node+0x48/0x1d0 [ 187.452533][ T8058] ? nfnetlink_rcv+0x8a2/0x13b0 [ 187.457441][ T8058] kmalloc_trace+0x2a/0xa0 [ 187.461904][ T8058] nfnetlink_rcv+0x8a2/0x13b0 [ 187.466827][ T8058] netlink_unicast+0x56f/0x640 [ 187.471626][ T8058] netlink_sendmsg+0x665/0x770 [ 187.476547][ T8058] ? netlink_getsockopt+0x3e0/0x3e0 [ 187.481890][ T8058] ____sys_sendmsg+0x37c/0x4d0 [ 187.486743][ T8058] __sys_sendmsg+0x1e9/0x270 [ 187.491427][ T8058] __x64_sys_sendmsg+0x46/0x50 [ 187.496214][ T8058] do_syscall_64+0x41/0xc0 [ 187.500673][ T8058] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 187.506627][ T8058] RIP: 0033:0x7f58aeedfb29 [ 187.511056][ T8058] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 187.530920][ T8058] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.539355][ T8058] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 187.547432][ T8058] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 187.555449][ T8058] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 187.563434][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.571432][ T8058] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 187.579464][ T8058] [ 187.804561][ T8054] syz-executor.3: attempt to access beyond end of device [ 187.804561][ T8054] loop3: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff10) 16:39:53 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 16:39:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x7c}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 9) 16:39:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15, 0x4, @thr={&(0x7f00000002c0)="792867a06ecfc73b19325e960ce2afca8daaf34b0a2c83c8fa39d3232c17a831cce902514135be23c43d6b8f173050b76f4c25ab94ca164716603112ba5928e44fd4ef766a479ea6bf2ccee1a9a86dc487c9e2c84e5653ab0bd21fc9d7f3fbe6169646e7", &(0x7f0000000340)="31dda83684ccb7f1e03599a6b42ec3e3d96fde6876ed20b6a4555ae5070a3b9c419634ce92cd15a4ca47bd098449ebeb61e65d9f2af603ca0643a045fa5fc712ac18914e43c7b9b8a25d70854d2d8be595a4c2cdfbcef16a26ba83d80c9d280152f4052b5f9a1ed9a3da1ffb9d3abe523230606fa0faa193f49ab9b49754d8c641a53b36e10133ad7ad74fc0c42241c10adc40511cb5efd38e2f42421e4cec829b87d49c042fa181284dbd1a3d00a6a38a23eb2fa7914bad3e4fa47c6415551826e5f54831308e44d0c7e7182c6919343374836f5206aa87c084edc30b048c0ad5a424aeebe1cba704558e4cc7c894"}}, &(0x7f0000000280)) (async) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, r4}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r5 = open(0x0, 0x0, 0x61) (async, rerun: 32) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff31) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) (async, rerun: 64) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) (rerun: 64) r8 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRESDEC, @ANYRESHEX=r8], 0x1, 0x522, &(0x7f0000000a80)="$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") 16:39:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x4, 0x54e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df49ff134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e8d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8afaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d6341200"/512, 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 187.849868][ T8049] syz-executor.2: attempt to access beyond end of device [ 187.849868][ T8049] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 16:39:53 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x1, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$tipc(r3, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) [ 187.909143][ T8069] FAULT_INJECTION: forcing a failure. [ 187.909143][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 187.921946][ T8069] CPU: 0 PID: 8069 Comm: syz-executor.5 Not tainted 6.5.0-rc3-syzkaller-00275-gffabf7c73176 #0 [ 187.932428][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 187.942690][ T8069] Call Trace: [ 187.946001][ T8069] [ 187.948961][ T8069] dump_stack_lvl+0xda/0x130 [ 187.953673][ T8069] dump_stack+0x15/0x20 [ 187.960781][ T8069] should_fail_ex+0x21f/0x230 [ 187.965539][ T8069] __should_failslab+0x92/0xa0 [ 187.970468][ T8069] should_failslab+0x9/0x20 [ 187.973191][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.974998][ T8069] slab_pre_alloc_hook+0x38/0x180 [ 187.989484][ T8069] kmem_cache_alloc_node+0x54/0x240 [ 187.993359][ T8078] loop3: detected capacity change from 0 to 2048 [ 187.994736][ T8069] ? __alloc_skb+0x109/0x2e0 [ 188.003262][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.010471][ T8069] __alloc_skb+0x109/0x2e0 [ 188.024692][ T8069] netlink_ack+0x23b/0x940 [ 188.029152][ T8069] nfnetlink_rcv+0x1241/0x13b0 [ 188.033982][ T8069] netlink_unicast+0x56f/0x640 [ 188.038888][ T8069] netlink_sendmsg+0x665/0x770 [ 188.043770][ T8069] ? netlink_getsockopt+0x3e0/0x3e0 [ 188.049198][ T8069] ____sys_sendmsg+0x37c/0x4d0 [ 188.054178][ T8069] __sys_sendmsg+0x1e9/0x270 16:39:53 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 188.058952][ T8069] __x64_sys_sendmsg+0x46/0x50 [ 188.063767][ T8069] do_syscall_64+0x41/0xc0 [ 188.068237][ T8069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 188.074190][ T8069] RIP: 0033:0x7f58aeedfb29 [ 188.078636][ T8069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 188.098382][ T8069] RSP: 002b:00007f58ae2620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.106852][ T8069] RAX: ffffffffffffffda RBX: 00007f58aeffef80 RCX: 00007f58aeedfb29 [ 188.114860][ T8069] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 188.122866][ T8069] RBP: 00007f58ae262120 R08: 0000000000000000 R09: 0000000000000000 [ 188.131070][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.139088][ T8069] R13: 000000000000000b R14: 00007f58aeffef80 R15: 00007ffee9f44518 [ 188.147187][ T8069] 16:39:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x90}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:53 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:39:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000240)=0xfffffffe) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r4 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15, 0x4, @thr={&(0x7f00000002c0)="792867a06ecfc73b19325e960ce2afca8daaf34b0a2c83c8fa39d3232c17a831cce902514135be23c43d6b8f173050b76f4c25ab94ca164716603112ba5928e44fd4ef766a479ea6bf2ccee1a9a86dc487c9e2c84e5653ab0bd21fc9d7f3fbe6169646e7", &(0x7f0000000340)="31dda83684ccb7f1e03599a6b42ec3e3d96fde6876ed20b6a4555ae5070a3b9c419634ce92cd15a4ca47bd098449ebeb61e65d9f2af603ca0643a045fa5fc712ac18914e43c7b9b8a25d70854d2d8be595a4c2cdfbcef16a26ba83d80c9d280152f4052b5f9a1ed9a3da1ffb9d3abe523230606fa0faa193f49ab9b49754d8c641a53b36e10133ad7ad74fc0c42241c10adc40511cb5efd38e2f42421e4cec829b87d49c042fa181284dbd1a3d00a6a38a23eb2fa7914bad3e4fa47c6415551826e5f54831308e44d0c7e7182c6919343374836f5206aa87c084edc30b048c0ad5a424aeebe1cba704558e4cc7c894"}}, &(0x7f0000000280)) (async) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = open(0x0, 0x0, 0x61) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff31) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r8 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRESDEC, @ANYRESHEX=r8], 0x1, 0x522, &(0x7f0000000a80)="$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") 16:39:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 10) [ 188.162872][ T8085] loop2: detected capacity change from 0 to 2048 [ 188.171446][ T26] audit: type=1400 audit(1690648793.799:291): avc: denied { getopt } for pid=8086 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 16:39:54 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"/2505], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xec0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2e07, 0x7fff, 0x2, 0x148, r2, 0x4, '\x00', r1, r3, 0x4, 0x3, 0x4, 0x8}, 0x48) 16:39:54 executing program 1: r0 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000200)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f00000017c0)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) 16:39:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xa4}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 16:39:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/150, 0x4e, 0x96, 0x1}, 0x20) 16:39:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 11) [ 188.328798][ T8078] syz-executor.3: attempt to access beyond end of device [ 188.328798][ T8078] loop3: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 188.363242][ T8085] syz-executor.2: attempt to access beyond end of device [ 188.363242][ T8085] loop2: rw=2049, sector=2048, nr_sectors = 4 limit=2048 [ 188.387313][ T8109] FAULT_INJECTION: forcing a failure. [ 188.387313][ T8109] name failslab, interval 1, probability 0, space 0, times 0 [ 188.400093][ T8109] CPU: 0 PID: 8109 Comm: syz-executor.5