ddr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 11:08:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 11:08:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 364.796752] attempt to access beyond end of device [ 364.821987] loop4: rw=1, want=130, limit=112 [ 364.839837] attempt to access beyond end of device 11:08:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 364.871697] loop4: rw=1, want=131, limit=112 [ 364.907864] attempt to access beyond end of device 11:08:52 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:08:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 364.936472] loop4: rw=1, want=132, limit=112 [ 364.941163] FAT-fs (loop2): bogus number of reserved sectors [ 364.954981] FAT-fs (loop2): Can't find a valid FAT filesystem 11:08:52 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 364.989011] attempt to access beyond end of device [ 365.022653] loop4: rw=1, want=133, limit=112 [ 365.027117] attempt to access beyond end of device [ 365.059643] loop4: rw=1, want=142, limit=112 [ 365.064133] attempt to access beyond end of device 11:08:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 365.069063] loop4: rw=1, want=143, limit=112 11:08:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) [ 365.104524] attempt to access beyond end of device [ 365.132507] loop4: rw=1, want=144, limit=112 [ 365.143786] attempt to access beyond end of device [ 365.159883] loop4: rw=1, want=145, limit=112 [ 365.197136] attempt to access beyond end of device [ 365.214264] FAT-fs (loop2): bogus number of reserved sectors [ 365.218159] loop4: rw=1, want=4057, limit=112 [ 365.230324] attempt to access beyond end of device [ 365.235269] loop4: rw=1, want=4086, limit=112 [ 365.244495] FAT-fs (loop2): Can't find a valid FAT filesystem [ 365.342410] attempt to access beyond end of device [ 365.353378] loop4: rw=1, want=4087, limit=112 [ 365.358031] attempt to access beyond end of device [ 365.363122] loop4: rw=1, want=4088, limit=112 [ 365.367748] attempt to access beyond end of device [ 365.373132] loop4: rw=1, want=4089, limit=112 [ 365.389555] attempt to access beyond end of device [ 365.394497] loop4: rw=1, want=4110, limit=112 [ 365.401728] attempt to access beyond end of device [ 365.406667] loop4: rw=1, want=4111, limit=112 [ 365.411269] attempt to access beyond end of device [ 365.416206] loop4: rw=1, want=4112, limit=112 [ 365.420802] attempt to access beyond end of device [ 365.425732] loop4: rw=1, want=4113, limit=112 [ 365.431178] attempt to access beyond end of device [ 365.436151] loop4: rw=1, want=4162, limit=112 [ 365.440773] attempt to access beyond end of device [ 365.445706] loop4: rw=1, want=4163, limit=112 [ 365.456536] attempt to access beyond end of device [ 365.464219] loop4: rw=1, want=4164, limit=112 [ 365.468791] attempt to access beyond end of device [ 365.473889] loop4: rw=1, want=4165, limit=112 [ 365.478457] attempt to access beyond end of device [ 365.483513] loop4: rw=1, want=4174, limit=112 [ 365.488009] attempt to access beyond end of device [ 365.493032] loop4: rw=1, want=4175, limit=112 [ 365.497542] attempt to access beyond end of device [ 365.502526] loop4: rw=1, want=4176, limit=112 [ 365.507032] attempt to access beyond end of device [ 365.512036] loop4: rw=1, want=4177, limit=112 [ 365.519407] attempt to access beyond end of device [ 365.524340] loop4: rw=1, want=8273, limit=112 [ 365.534084] attempt to access beyond end of device [ 365.539018] loop4: rw=1, want=12369, limit=112 [ 365.547930] attempt to access beyond end of device [ 365.552892] loop4: rw=1, want=16465, limit=112 [ 365.563527] attempt to access beyond end of device [ 365.568460] loop4: rw=1, want=20561, limit=112 [ 365.581877] attempt to access beyond end of device [ 365.586830] loop4: rw=1, want=24657, limit=112 [ 365.599695] attempt to access beyond end of device [ 365.604641] loop4: rw=1, want=28753, limit=112 [ 365.616618] attempt to access beyond end of device [ 365.621642] loop4: rw=1, want=32849, limit=112 [ 365.627635] attempt to access beyond end of device [ 365.632639] loop4: rw=1, want=32993, limit=112 [ 366.389487] net_ratelimit: 26 callbacks suppressed [ 366.389497] protocol 88fb is buggy, dev hsr_slave_0 [ 366.399615] protocol 88fb is buggy, dev hsr_slave_1 [ 366.404752] protocol 88fb is buggy, dev hsr_slave_0 [ 366.409859] protocol 88fb is buggy, dev hsr_slave_1 [ 366.414966] protocol 88fb is buggy, dev hsr_slave_0 [ 366.420053] protocol 88fb is buggy, dev hsr_slave_1 [ 366.425192] protocol 88fb is buggy, dev hsr_slave_0 [ 366.430294] protocol 88fb is buggy, dev hsr_slave_1 11:08:54 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:08:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:08:54 executing program 4: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:08:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:08:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:08:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 366.680542] attempt to access beyond end of device [ 366.685540] loop4: rw=1, want=130, limit=112 [ 366.715616] FAT-fs (loop2): bogus number of reserved sectors [ 366.723706] attempt to access beyond end of device [ 366.728752] loop4: rw=1, want=131, limit=112 [ 366.734620] FAT-fs (loop2): Can't find a valid FAT filesystem [ 366.741001] attempt to access beyond end of device [ 366.741014] loop4: rw=1, want=132, limit=112 [ 366.741067] attempt to access beyond end of device [ 366.741102] loop4: rw=1, want=133, limit=112 [ 366.741146] attempt to access beyond end of device [ 366.741156] loop4: rw=1, want=142, limit=112 [ 366.741229] attempt to access beyond end of device [ 366.741238] loop4: rw=1, want=143, limit=112 [ 366.771827] attempt to access beyond end of device 11:08:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:08:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:08:54 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 366.862844] loop4: rw=1, want=144, limit=112 [ 366.867392] attempt to access beyond end of device [ 366.879480] protocol 88fb is buggy, dev hsr_slave_0 [ 366.884567] protocol 88fb is buggy, dev hsr_slave_1 [ 366.887378] loop4: rw=1, want=145, limit=112 [ 366.897692] attempt to access beyond end of device 11:08:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) [ 366.946561] loop4: rw=1, want=3097, limit=112 [ 366.960333] attempt to access beyond end of device [ 366.965277] loop4: rw=1, want=3126, limit=112 11:08:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:08:55 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 367.036477] FAT-fs (loop2): bogus number of reserved sectors [ 367.062713] FAT-fs (loop2): Can't find a valid FAT filesystem [ 367.074022] attempt to access beyond end of device [ 367.078968] loop4: rw=1, want=3127, limit=112 [ 367.100637] attempt to access beyond end of device [ 367.111077] loop4: rw=1, want=3128, limit=112 [ 367.120406] attempt to access beyond end of device [ 367.185189] loop4: rw=1, want=3129, limit=112 [ 367.213535] attempt to access beyond end of device [ 367.241812] loop4: rw=1, want=3150, limit=112 [ 367.277851] attempt to access beyond end of device [ 367.295899] loop4: rw=1, want=3151, limit=112 [ 367.300800] attempt to access beyond end of device [ 367.305846] loop4: rw=1, want=3152, limit=112 [ 367.314297] attempt to access beyond end of device [ 367.319410] loop4: rw=1, want=3153, limit=112 [ 367.323968] attempt to access beyond end of device [ 367.328899] loop4: rw=1, want=3202, limit=112 [ 367.335394] attempt to access beyond end of device [ 367.340484] loop4: rw=1, want=3203, limit=112 [ 367.345012] attempt to access beyond end of device [ 367.350084] loop4: rw=1, want=3204, limit=112 [ 367.354639] attempt to access beyond end of device [ 367.359618] loop4: rw=1, want=3205, limit=112 [ 367.364154] attempt to access beyond end of device [ 367.369105] loop4: rw=1, want=3214, limit=112 [ 367.373708] attempt to access beyond end of device [ 367.378666] loop4: rw=1, want=3215, limit=112 [ 367.383251] attempt to access beyond end of device [ 367.388208] loop4: rw=1, want=3216, limit=112 [ 367.392817] attempt to access beyond end of device [ 367.397799] loop4: rw=1, want=3217, limit=112 [ 367.408354] attempt to access beyond end of device [ 367.413368] loop4: rw=1, want=7313, limit=112 [ 367.426739] attempt to access beyond end of device [ 367.432536] loop4: rw=1, want=11409, limit=112 [ 367.445299] attempt to access beyond end of device [ 367.450321] loop4: rw=1, want=15505, limit=112 [ 367.462754] attempt to access beyond end of device [ 367.467694] loop4: rw=1, want=19601, limit=112 [ 367.481180] attempt to access beyond end of device [ 367.486124] loop4: rw=1, want=23697, limit=112 [ 367.518920] attempt to access beyond end of device [ 367.523943] loop4: rw=1, want=27793, limit=112 11:08:55 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:08:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) [ 367.542668] attempt to access beyond end of device [ 367.547619] loop4: rw=1, want=31889, limit=112 [ 367.556500] attempt to access beyond end of device [ 367.561504] loop4: rw=1, want=32993, limit=112 [ 369.101377] attempt to access beyond end of device [ 369.106449] loop0: rw=1, want=130, limit=112 [ 369.111022] buffer_io_error: 62 callbacks suppressed [ 369.111033] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 369.124157] attempt to access beyond end of device [ 369.129191] loop0: rw=1, want=131, limit=112 [ 369.133844] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 369.141828] attempt to access beyond end of device [ 369.146876] loop0: rw=1, want=132, limit=112 11:08:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:08:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 11:08:57 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:08:57 executing program 4: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:08:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:08:57 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 369.165443] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 369.192743] attempt to access beyond end of device [ 369.197709] loop4: rw=1, want=130, limit=112 [ 369.212610] attempt to access beyond end of device 11:08:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) 11:08:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1ff, 0x0, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 369.238859] loop0: rw=1, want=133, limit=112 [ 369.258996] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 369.268175] FAT-fs (loop2): bogus number of reserved sectors [ 369.274163] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 369.274196] attempt to access beyond end of device [ 369.321115] attempt to access beyond end of device [ 369.322525] loop0: rw=1, want=142, limit=112 [ 369.339547] FAT-fs (loop2): Can't find a valid FAT filesystem [ 369.343180] loop4: rw=1, want=131, limit=112 [ 369.354163] Buffer I/O error on dev loop0, logical block 141, lost async page write 11:08:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) [ 369.371085] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 369.385710] attempt to access beyond end of device [ 369.386659] attempt to access beyond end of device [ 369.396260] loop0: rw=1, want=143, limit=112 [ 369.398068] loop4: rw=1, want=132, limit=112 [ 369.407279] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 369.415764] attempt to access beyond end of device 11:08:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 369.420951] loop4: rw=1, want=133, limit=112 [ 369.425527] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 369.433692] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 369.439306] attempt to access beyond end of device [ 369.446758] loop4: rw=1, want=142, limit=112 [ 369.451801] attempt to access beyond end of device [ 369.456916] loop4: rw=1, want=143, limit=112 [ 369.461660] attempt to access beyond end of device 11:08:57 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 369.489448] attempt to access beyond end of device [ 369.495580] loop4: rw=1, want=144, limit=112 [ 369.500176] loop0: rw=1, want=144, limit=112 [ 369.507834] attempt to access beyond end of device [ 369.513850] attempt to access beyond end of device [ 369.520440] loop4: rw=1, want=145, limit=112 [ 369.525460] loop0: rw=1, want=145, limit=112 11:08:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) [ 369.540064] attempt to access beyond end of device [ 369.545879] attempt to access beyond end of device [ 369.550956] loop0: rw=1, want=2777, limit=112 [ 369.555576] loop4: rw=1, want=4241, limit=112 [ 369.562329] attempt to access beyond end of device 11:08:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 11:08:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r4 = fcntl$getown(r0, 0x9) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001ac0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000001bc0)=0xe8) r7 = getpgid(0x0) r8 = getpid() fstat(r1, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() fstat(r1, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000004cc0)={0x0, 0x0}, &(0x7f0000004d00)=0xc) r15 = getegid() sendmsg$netlink(r2, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f00000002c0)={0x4c0, 0x2d, 0x500, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x4, 0x67}, @generic="a68a5fbd7111deaad73166fc28f5de", @typed={0x8, 0x3a, @u32=0x532}, @typed={0xc, 0xa, @u64=0x5}, @nested={0x2dc, 0x79, [@generic="87520244d297a9934f81bf5981d8f1ede39b1f3bc5604955cd0a5cbc6d9455d06928d4889409472d0d3d2551fca4f3f6ded14964ae3de274885c35efd5f3d787d6863c9ca6c4f2a7ab620621de5501a70b0be30dac5d238bfbb8c2ed1e33066dc09e3ae90ae138d01d6e826eefc795f4479fcc13e3785dd7bb978aa21188491283cb854884893aadd6bb1e2ff8a6cb9086e79eedb85af79ae8604f21e845aefa", @generic="9c832aed4d35efde87fa23688e9ee5240549b10999f02b184d7d95ee2d6b749c5fe5e3d85632499c4fcfa5c9118f70b2982ff2a5414664c202e0cbe3bef1bda9966adcbed12a8c6f23ece7281daa04080a59a1645005551df03e6764dadf25b1f116550bb9bbc19ed48d8e1f5184d988fc0c6a4e7a6220dff50130ed343ddad1f2bdf8904ef92a10165a82e9f6ede1", @generic="da0a7bbc6d7f6c3ebff2238c769ee1b3ac28986f11d8e3d1547efc5f37b7670e151e85291e24393b483ff455dea151f29308d36c891f6ef14c9d26a01d52d87e32516472a31134baf94ca907be32980be90a2b60fca72e9ef995ee6bda8c5a949bf670fa9df25901eb1492e0675dd93c91f5f89cafa0941694a09c142a17a691", @generic="b0454a399314db05bae39def772162f67a20583fc5e2bdfb5b597346f1b7c7df8e528dcd3f664bb844a672bd4601029b2ad54fab2790d287c94f3e38999acb9509b478e90cc3a7baf9031d6bcccca078dcc89a28c96bbd43dbc0b6a4703f593cedd0ff9de7e83eb40f87ae4d3535c1d67671c66954bea2fe12e8b10358ba20852c7f4d65e0965390fe872410338d5e87a43d70f836991101fbdcfffad04056f0d1e2f34f6d49f4054f617b8affb7a86d07e877a6122c36228f751966b23ce8d6ddc8468c02461c074e74a5e7e1c65f5fa197f50ed9adf02a", @typed={0x8, 0x36, @pid=r3}, @typed={0x8, 0x58, @pid=r4}, @generic="f1b15f9cbfc71d02613b4f142288c9c6c44732b43901290922a486f6", @typed={0x20, 0x1e, @str='vmnet1userposix_acl_access'}, @typed={0x4, 0x37}]}, @nested={0x10c, 0x55, [@typed={0x10, 0x47, @str='/dev/kvm\x00'}, @generic="3b730c7451459f1d08661cd56591a3f41518bdb79929b8781f9b8749968c868920cf43b0face25c120de3fdb77083a3873a734377c93bcbb7e1ce0178b4a129ba3394d09b3fe9506917db198dd64dcc22eae5f9b74f026adcd1650dbf912b270b681dd8c9a79dfd85e88f54e320a8de6de79d7006074fc6167d75f428ae100eedfa10feb3d0ae98ef426c1ec421bcc210433cdcbd07ca11932d68dfd87cea46079bdd1a072dfa32c0f84473d0d6cc0f73afa19eef6e8fe3e16679e3f33897bd1cd8e0b6543a27e8d279355d92e386859666e334ed310e0d61f026a7200591a353361625dfc601b53", @typed={0x10, 0xb, @str='/dev/kvm\x00'}]}, @typed={0x4, 0x3d}, @generic="0e0ecb90729f1569ff7db80a5f9846cf21cf87e7790b293d0d7f887fccdfb1fb34dbfa7bb2f4822bbe10534e2824de13575f368f693e74977e67df4176a1de8ae39a3706bf46e3faf418b7abad94ff8b84affcf4c3ad01b2725d495211ba2d77eaf71a1cde50b1dc513e55aa18e6e3b20e9e691c41a9018d2594beb624a87c545033377afe735cad65c0917fc8b6614e54bf37627c3b910d9f28b320"]}, 0x4c0}, {&(0x7f00000001c0)={0x98, 0x2b, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x10, 0x10, @str='/dev/kvm\x00'}, @typed={0x64, 0x51, @binary="cfd4286d911624740959b439d0d05d67401b23794f6103b7f4f0c80487ef06b355d7e2c9710892865abdd6686f60f95db68603a83a9bae08f330d9fee897365cd62bcdf1adee298c88477ecfa7cbfa0923f991091d921fbe7555819d5ae4"}, @nested={0x14, 0x11, [@typed={0x10, 0x61, @str='/dev/kvm\x00'}]}]}, 0x98}, {&(0x7f0000000780)={0x12c, 0x2c, 0x0, 0x70bd26, 0x25dfdbfb, "", [@nested={0x11c, 0x52, [@typed={0x14, 0x5, @ipv6=@local}, @typed={0x70, 0x17, @binary="646f35be5fe1effb856bb30ebb2fdbca45d81ccadb520488a1c8eb601141238a51c0918450a987eb79d641d0f37926b664de10f6a0c967198d73a04085999fa7ac5c6ffb38fb33b1764d87c40de8c5ef040b2e6715ff30636dba113356200b4a36f59cd005f2d490350bec9f"}, @generic="d945f17796a8e868c385f64ac26d9d1717ce97ca4329679bf377a57deba779b116a63264627ab965c4673b6f70703b16bce16176b7370031683c71cda1eaf4b12128e755dab79017d5c859e650d7cd105ab655d917274fd8e5095307049b07ddda7ea4dbb5c5102ae48c64e261077b9f4d7461ff38f2019e0a86789c5a63a0d889a20eff8e94b0e31d892361a9c8c287e1cb27"]}]}, 0x12c}, {&(0x7f00000008c0)={0x11bc, 0x40, 0x401, 0x70bd26, 0x25dfdbfe, "", [@nested={0x11ac, 0x62, [@generic="81d3a3d14cb1c7937f0696b59181d0cb640c0ef6f7d953d70583aab44a4113bf3465628118778d4b66e8f04cfb20bb4d868084d3e5c96353ef9bcf374cc463c033fe56698329420b0f5d14d8b8f7bb7d96f029dfd04740974fca4b9d0b038c542654be42de986205e91ac7b60449bf1f7aba2d4775b33b18349890a9008694af1f16969a4687956772845fea1c03edaca612f1ecddc9bd436dacab2358586a546a188dbe487720ad8f6b0dfb429f4a10d10b58a3", @typed={0xc, 0x6, @u64=0x3}, @typed={0x8, 0x5e, @pid=r5}, @generic="0779e0db7eede5161e831472e3764b93cee542c2c469bf812dc8d259f372ab98faf47e3c99c0727a93209db72d046468d7d3d1ef646cde43b4828786fbf4563c2dbbdc4b595248a4ecf9459568ddd52855e7951ab5627f23a39b20e1f96788d0d19cfe072afb85925e9c4eae38ceebf5b78630488ee7ee11f390dbb92cb12e85e69ee4cc321e72e274011f8099af5a25c26b8c23a5a3340182c3ba7bdacc137b36a18bc3ec0fae2485e9955d74e49e85efaac3ff2192dfe515b366a0385c269d7d71fe058597c7f197898895c53280c863f66d90f66f812202e3d0e7af1314", @generic="f9a3bc5160b6036fba1d7db2c0d43c7fcac7ca65edea890aaa69a635554633d1b96daf9ea4883533fd62ea89ddde39eecab7a98f489c6bf79a3bc1bb5b55e6d6e9dec9a1433e25087d97691d5638fddd5585b8390de6dc925890b9cc0feae1742d35903df58051b4101b37df12e0608f64a50ee13314cc9c0a5a4730408e090d89f518a0eacbca8972bdcbbdf1bb5dfc97efbd4def0684e44d18150e82708b431f930d4268c2b4c5dc8d80c030341c9b30669dfd827ff16af8f8d471b5ddcf77b5cd3765d89a6304db31082533fc6c839cac7e39952fa859cf5ec1c8d3395526f68862e2c5dd3c7e3690e2446c84b15629f6c0032db81a775acfd55d824b140102711d4b95d5e144c26949b5fc2eecebed4262dccb1be34ae46e5995e65964e580515b7a850480245132ff0ea7daa51dedbc5b5b45b7792110c7202df78a895d462221fef9602a2a40125c6e4bc763e2188828d9724f96c9ccca93d51e6692546ca4b6c060a2da0e395c7dc48e1302632f1ab8ef8bd4a3fd0e82244dbf195a406be392f3f75297e00eedd093c30e734ccf4d5ed82118939ce3652f7656ecafdb3930b02fc88226219c7b1c79775a445d3384ffeb861d443b4bd781d6fd5eeff8e789b8e6a26f7837ff60d5a99a0ac464926a30b6887b3584e5d49991f604996a8bc7a803ccf3ccf708072dadbd8bc0866f857051f3b96d1737634210c9522296235c1433e6a1b939f7f47e308244b6a024a815514c18989bc09c355d3133d078aeda511100510479a85952f71bd50328e5a1e33a609ab7e7c4898e25ab244ba4237354224ddc4102b6d6f9a1f65a81f7ee3c92a320fb43fb12f026709380b15c85d5da899076be51e64a7c53aa5be55d1b370aa4aae9ad8477e091d30bc1e4bbd1deb95d78c107a060f80c022bf80824f71572da90634a321cd0a92ce8aae45c2a99efa216472010344d8386ae53c90561f16abd16a5157fb255472c6458cf7192c3c2f46bd8d1555782b694b75ded549df56becfa6e0b839147911638a3174e5aaa0b1b825305a842b0928a4d530130594914980a50d7190f1e16af1e49cfe0197cc8d913a87e49a4b7247245e6ed52fcc05a97b3d80cb232cc65340d51bc6b6e5b0dedebb01c74ccc8c1685a9db76d252d13e640a9abd3d76921263171fcfab04783a9189c18ee78a7cefaa95d7b759ae47781da67549bd28c337bec0a5b84680b872878014006645ca5229f806b9e9ee7b1a6a574c1a3c03fe062ad0e4165ae76b28fa92b0dfeb776ef38adb1dfd2782c3afe14f2e218688025038cb4564e4719136c3bba8d8b45783ff5f44b8cfde5537262f1ad10eddbc823a1ec41a736aa17b1ca5ff0b34edb2f19d63f67bcff8b4ab34dc80fd5e0d87ccf75ad119d59372fe8633e924f197162da5524abf0e79cb8822c3316efe90d7126e877fd2f3a610978dd1b317273952c978d0a62a6026518684ef657e4ca21268e21d135ded4dcb4a6fc062c0f0c120876ff3ed1b64ed69e12966921350249655ab86df3074234cd31e0da0ca1b4da0416dfb2f2f76b802099776285b34f52bab7984dccf49ed1ae175d2394a14b8f51bcb5c0a2ab802d7e5dd441119c00a29ab9d7566ff81a78f0f9b2f8a9ed69fc1337fc38b036260792b1122a6013d287459c9a5df9550245cc4e87da55f499ee61211b5e0eac448bdabc33687fb5a07b6be9d275a5a812d3c0dd02d8b0fff638571bcdfcd29ec26eb5bc5cb40c752b2e6d02259724228ddd44a82b0ed0b035d8e47efb6eb536956eaa0a78c789c46cea1b8fc3ff09081a808b5b98735427243690f7d53b4002902bcbc78f8230b024c9dd59fce5dad339c6270dd426c8ac3b4dd8ba457ebe897cc948a1a06b11afa053a41eaea3561f10f8e1b995e96fc977b2dbf0a70c6f23618b49663b31b226b1d2f0b4342881d211e848f9ac1fe0cf5807762dfd7e3a1ff05f2c45ca362f46d418f585c9077c0e19db3b6c48845e8569c9640213740ddc1d478cd7395ca37dc5d21e3a696d35abe66e8b3bc9af424f8b79564045f8d96eefe6bd4e29ef2ef1c62522dd0d26ba93144f13033535a9851afc218e8852e04447fa856682779a54bf3618bac9db3e384d3920446588c20b2ca21da5b0d676f79bb91843bd1df1e918b6fee80bb0c4047eaf81164533551409e42910830f8c07ee6ef3ee4d46844102ec5932e416e276ada8dd962780357f8c54e3b39963a1d95f847974d6e3fba884b81d4e67571c17c0acb2abdf33ba2b20032ef94259933dbbc97b0eedabd958d7e9d9c367a43ba9846a0426816ca325bcde6a7ebf96cf8437295096f00303abf07e9598fe325c0efca505284bf6453b59dc8ef4c39bbecbe4b8edd2d56ab960cecf231c70067b4f10eb796db146fd5858cae9fdec5b65a02b0707039d4e6292a14631ee8d12ec77409efd1a71be907a8117e2d79eb0d13ac092ace74446d2a927b4b5f8e4f74bfabd37f3375e2c640351d36d14f279126440dfea336ec69c9493723eb802a92b783c68089f1e12128ad87ad71a471a5c098f586cb57fc4e8f58f75cdfc8529b79edaae4cf6c7fd457b7a5a08262fb7b5a5e562643a4a34f560adf957084abd862eb7a42ca583a7943181693618bc1d8eb2866bb62b7268f726153b92f2f84c62aebe4725148241d3fd8e68e1afffa8a7cbd5503293a8b11dc8ef99376663996a084a5e3725bcb8b03ff8c838db17bdbbd9d84446a6935da6e68ffdfa3c9719bacfc4c67182bc44343112aac0cb28e02adddb5951b59e646dae2b497e1e266e2d76897300b3227e1dba9918732e6cc831ddd76ce4c851a1046493769cacdf1bbeeb16fbfff56ca2cc3c738bb7c96cf1d468424a0f2d9302a929d66f0dd6812825f9d2cc1bb4e2b115280ee9b384b1db181b5efab7318e4d04d8b0fa57e54102ad7158a35ca1eb284a02f1b003564e656efe985f15ce6d615205b19214d1026df002de05a6c9c30d3f2102cb9f07dec1b422e7cfe7e9c37490ace87f5242c981220c610781fc5ec77c010b3e4b16018453501db136725a0683d6e9e89bc6c5e21f5473b3e65913de31aa1cd24cd0ca0472c98dc4d30d08b86135f71616a03233d47c858af026d94e88c7e9bef63d962b5676993fd45e2e959d0c1aec6d27706389af48df80d221418a298c95c73eb5f6f3659fda0af0b725290e392fb07160c9d72d83dc9530bf96dd5d40216a5f479ee6a3a304cdd46026029b0b96a827d0e841e453bbb8c173915b02f3bf6df932e6c95000d9cfb8024543b76e3fd741969d5359ba5c1529ef1fc885f092d2f596123d6d04058aa0e8bdd271b7a7a9e84e9a5f2c368c9773fbd165a3d81fa7074a14d131e2c939158f5fa1d2944184a1b10a39f18af06e05fcd5ff6926bf9a9a5c258ab265cdbd01c147bd0c77d93ad140b9232eff69a8fd70a081fd30f10eca7d7b8704b6d8ee318d093fdfa473da978d5033296db96956b49deae29e2e2ed3bec0e55ae73cb5638fd1749e037bb0ef89f8da15bebe5356a002932b74fb9b6cd0172f5fff7a7329843f0a79c2c4fc2ad71fff3dc3d7ffc7a9676522d7710ac72e1ca2af72ca82288d667d6d5b3b5d0279026daa691587891994571545cb62d007fac51d3ea5705625e13f864b72dd94685f5d52c4018df1372000ddcfe26e4309c87b2ac69e2566caf4835bfb8c3fb21054fe536903faf743b4fa45fd6e7015da2202a17645b92a76a4fb3b12e5f6292f700da4fdfd7d1bc7a588afbb47c5357dca2698eb4222fd5200adaf647ea5db9c0996e355c16fa8290b4aaebd7a2f8936aeb8bb8d1438155fc2a5338f44c210386e7d660a5da1b23ecc2b42aa437bb95842721bf954a32ccb4549d261f170f855e0cd47626938142b0cd280dd4e91b273dd49f7c7f431ae5d23d87d130fc1614eef6ba313e6d38707b5e9264b0f94c62f4ae98c0297e4087f0a9c5c38ee113dfa0398273a62f05b77162d662b5278f32ecf7806ea3d74b51fb6a17202b3f3d23491aa0dfcbe779298af0acc1c12b0928a5bc4fd2ccef24417612f390c7f54cf0ce0f5fe075bcfe5fda752c47c66ec8650f7f7a25837d75b1e455005dca59640fe1b07565d2e062dbcd1a6effa80df2810f8c00e7dcdb680600b5cf6ef92895cd3d124e0f5006b111c1a869e4236733beed9779ae8e0615766fb7c015566627d2396daef47258833e7c4657d52364c0d250a9f5f2f43733112e09ebf832fe52dc49234fd0b675a9f02caaf7092fc8bcc1ddf9232151f6af95be8194a59181fd26b970b49606ff1a24edf20086e22da3fdcd6f4227b0217619047948d9a26a72217627456456ced99a56aec3b8a67c1d0fee05e8063f0c5802decb530e2db4101ec08e536c53d9415b7b2e1156d9d20c4e963f1aa8870e7fcd1a228cd90193d88b2899988d42c959bac7c8406aa174683ebaf9068c889845c4b7a15adffd9696588bda160b8dfc1f0f0765b95d13e769e3bc43846fbcd852b0efc58f262d71547886d4a850f0bbeeda160e82bd95dd692244ffbea7f1a6635069f76822a81e98490ec2de19de3d7a40c60407a70c57c3c9f263851340150fed8e3ff7862495f7b7e33ae9c5dac5f3ad69a905a07486562f8ea2a1f3f2d64aca0b07913ee38d727d6b4c3e7f484c89405a596d6c488a256802452995d99845164f312b04d313313ad593cfe7f1db4562dbc893fd016e0ff64897d6dabe899b8dfef3c4e2dfa5f16b0cb28c1e99c04f08cff6c927f748db5df36ffac2af6ecf1389030f5252ffe6fb3550705905bf7efb2bac974dd25e06cd39b169b1fb93415a649d8bcf4bc54418684d6cacab9e5fb7379e140ff77cd973501c48b9e2d94e1a791e85d49c410aa30e5d2350472601edb18c87504136a9fa34d6a7753014fd64fd09af5aa2d2ce373194d02464eff63dd5864f2e81707397b878f8518753ef5ea5c661d1f06067b58a77c95803b2e0cd07ed2f9f942716f733e412c69132dbf4533917fed90a438331cca2020aa3f81c7264ebc4a6273c5014d4fabc756dc2e8f82a7eb3c2706c5ec5b139abee5cc6c15ca7065e7993f581d4cb96b42f24ec637cc7c0c6eb544a492998689d505889b828e5fcf4ab8c77df643fe3de054965fd9a54ac5aa9f46f94cea7f601b1c983ad159999e18006eda45a8778207a8bd88364648649b8447f7cf48f15b080d53da8092846324b68d5222e5043abb903a12e728a9c31b4179ba9f1a3789c933424c9489a656fa6988fa0e22905aa5ec6f31c003e6598e419c1c293cd53ea4e99dfb53d3d6440df1b018920481168ccbaa4bdef20663cc517c90f71de84764da662e6b46f2375b95a5423f91ed786306673d08297135d10e89faddbec451372801ce202e5e6addc323c8872f064a3a87e045203da8793d33e603b22f2fed8f9ffbe88fd0fc17b1b964a6ec24ad489c0ee4a44f1443d3ae4715bd8ccce91618a12d2561c7278354d4183c8ebcb8c6b63ab2294bfca24e0721e09d31b92bf2c1a9e89b056f7c0f4e4cf6c71e9f83ddfaa06dfd2de30ae6d04b131c3481a7f6a0bbfeea44bf86187a7b84ac804db59d44a1c532c9bde1b25e84cc3d1e4aa6eed7bf81c61254ba2938a9f658f09fc7627fb5257adcc47ecc85f9d93c4f152720b69ddc21ec8a78c37f6eae6fb740d8f5f8d8ff43442c90cb016132379c69cf4cd072c71ec4bf3305db99e9b291bba88774f9bb0dbf54a33cfc6c40d52811c7f2ebc3244256d19e75483bae2d474736175386ff519fba23099709a797e2d5324d98"]}]}, 0x11bc}, {&(0x7f0000000140)={0x18, 0x3c, 0xc, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x42, @fd=r0}]}, 0x18}, {&(0x7f0000001a80)={0x18, 0x3f, 0x0, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x2b, @ipv4=@multicast1}]}, 0x18}, {&(0x7f0000001c00)={0x3bc, 0x19, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x18, 0x5, [@typed={0x4, 0x1c}, @typed={0x8, 0x57, @fd=r0}, @typed={0x8, 0x86, @ipv4=@multicast1}]}, @typed={0x8, 0x8, @str='\x00'}, @nested={0x88, 0x64, [@generic="34ee1347c6657eb7a99be1024bb37fd6c98fb4818eb4541ca1a48adc0a85af466e834e46555489cdc94472bab6454f9666aa9ea685664ef7b86c6dde5af5e5463c2a2db7e458d86a1c86da01f082522475ff30fa48213a9b64ecbf184386c9b0a4e9fce30dd5637f", @generic="22c9fc012c382c49b1c3fb744f3ae11d34eb0723de9457e04b9f"]}, @typed={0x4, 0x46}, @nested={0x17c, 0x6a, [@generic="f61f977f99121a6df5924386664819c40d72", @typed={0x8, 0x45, @uid=r6}, @typed={0x5c, 0x2d, @binary="f687446376944d4bc3327dac0e49302a0824c9e96b69b2be46c0e2c74dfa83ec151dd9de5c33e3e01008a08dbd38eac75e6bd2ee4d698ecb73e6cb6d46e082c87e7c3cb77bed384eccd29fc38f7b495dd198030197bb"}, @generic="4428942bc428e031221415332f987fc2b5631fd9220bbb7be16fbe00a99c66540f1843127eb30034c67eb54101922c7fbda36ab1bc31df614a89e3aac596ccbf671f28fbfe14ded6bc55d07428b5f1992386162ccce1592d5df47d0aa01cf9cc61db7ed872b77c7db33dc4c0f42d7fcfa56aadac3b524b0fd961e889a23b8cfa0bdbc762d0c32829cb5b3636e2c5a6594968c1fefea06b5d8e7ea7498818ef1ecafff6a62f4bec886dd544f3591a", @generic="08b0d83f8381d04621fd50270f352eafb3e3a057e708a226d225a2a2bec4a169f21c0910c19070debc22cfdd43871179f68e76a6276cfd152b9ee31b28aee2b9eea2f8eaaebe1040a5c9e3e6133a114def264b"]}, @generic="b83ef51d66603b9b80f1b42977aadc17d6059877ac00246c9ea77cfb4da29531cee3155ed2477002e40bb9b42414c966800a900d69c29047819c5f47f58ec7b78ea8b80c32f01aea558c30639ab6b5592d6d23ff6e1aad1b4090dcf2840b26d63e749a1eabc18474", @nested={0x30, 0x4, [@generic="3cf4ba3c4fba6b0a566cc47fd815c07e4be46db011f0797f64e28599c0295604887fe7a6c11aa88349"]}, @generic="a88e3c23d68794273284668a1e26235c606f29243268cb91dc6aadb2abc73890be5e883f33f370bf8ece40ca20d8329b6d6fea409632143eb9c4a93a6cf25ab82ced08ea2f1a087211b80fccfb9402bd3b50fbf470bfad02235db5b8bc2fbe40a54655a41c5d3131d76c8ffafd6f7cfcf18d81276186191f815c62b90223fb97f235b0e3f4ab8fe034743e343933386af49ca0d262c76113e4e8af790095a6dd47e3bcc20bfba2105c1a2060eec23eec985091a950c82a2ec82e7e215b28c296e67c4282562f069a70d0a3afb5158fc6a2b8ae339ac84727d884ea7a90df0cda96004c576a3e87e7bc"]}, 0x3bc}, {&(0x7f0000001fc0)={0xc0, 0x17, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="16c18c170682ba2d76a38ef4945fe46390dd9fda13acede526964b6182d55b5ee71a849f98bf71c9d62ffcb999a9082df09c5ac539cb207679f8bb97022c6a396a92c615ba6caf33b732f891dbb705732be0ef46a9263fe8c9d9833576656590fbb24011eb6753f4446c66608720739a5556849e175fa7c90444dec1eb4e7fc312e48c07d0f2d3b3d1ee17f2ad6bcdabe05ba5670ac83fb67eef10f69dd65172ea4365ee878985a5f10fdd22aa0947ab"]}, 0xc0}, {&(0x7f0000002080)={0xc0, 0x24, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xb0, 0x6e, [@generic="05e239490ce43d9e9ea5a973", @typed={0xc, 0x4, @u64=0xfffffffffffffff8}, @typed={0x8, 0x39, @pid=r7}, @generic="94935e4f19d0c19343bc3c98cb8ba0a165effb17602b12c13d3df3176d7c3ce9e2a063e505cd8c2cc72366f29a5f160a56368640ec33190eeab28a5c831b3d53a05d20b9d64086764a6c543b5552de4237c7df657cf766d62b9688405e6fce58a8b35bb6eee329112dc98b719e9a2a9b476403fb35a051404bcdf0c4f488", @typed={0xc, 0x2a, @u64=0x410e0477}]}]}, 0xc0}, {&(0x7f00000021c0)={0x28c8, 0x10001, 0x300, 0x70bd25, 0x25dfdbfe, "", [@generic="49b2a507b627bc9c3526fea73529d084211173e5cb949df7101dd00964be3788e7774c86d335c19f5c365830d466f61d32bb5d3d334582f15617639c56643d2be989b95a680a3573a6c4322c730147f3940c1d049b00c9feccd35ff7ae9b2ece20bd8076a8d283df5079be3a6aad17d49b4aa6a3a149188a17bad4a727698820f263a4473f66c7461538033f1ad16ff6b9fcd59571e116fada0241b604d4375f9e7600378c0bf96b41d70c0bb9da56d3f9dcdcc966093662530b5cb37f3fffbd38c33e87f8474d2b0a5e0bf4717661bc95dfa97e31e828b6fdbfa9cd70d199da01ced55e2604e4", @typed={0x8, 0x6, @pid=r8}, @typed={0x14, 0x68, @ipv6=@mcast1}, @nested={0x1318, 0x31, [@generic="20e94f3d836e6a25405c0dac5ab395cdc7ab7a07926f709036f8b020a4c703f084db53d52a365344f7662eda29a925750eafc476ecba090dd02777aa7079df9d088e664160d6f2d1641b13b2da4aec7342dd76c7f5ad77b4b60aa0db36eae18c8e4e020e66e66d5d7ece539318651e86c31da3f723b8d9e944484bbc732ba81595d4f638f1795e096f911abcf9cff2e3da584536fef262", @generic="8831a7d67b81d64a632351305f0a43f3c9a4c5f6e27972fab4f2b6ff0c9e19065920a4de90f43e54e324058bc5f006ab5e3ae88b2169612af8b64ef0afed9431bc45acd13b12492b908b6f1b88451fca7a3f3933aa29f7b5b88430cd425e32831b82fc530e744c9a5e8fd59ab2e43daf1aa50fd6ffafde84ed4b7324bfab710d4dd2a0e30a8ca6a5ee79aafc952b0154c3c19bb58225de401f53a52bb0baa6a604c5d08ca75d747130d6e497109c8f00526056b4a58580e0b14d8b127bf9888cd7afe8004893a9", @generic="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", @generic="a29d07c7da704af9954d2407f660f61acb884ca38864c40a366d0215228b9e8da7eaedccc021c6b1a4fea863b8a0b6d8a52116f12ae9c5560b44e2055a8b4291f19fbfd085998494a036c8f27ee7f53a21b0a70bad4cdab009a955d1eda49a991b1bde342d1c735f0cf310806ad443ef4af65aed48f7bbc6064a9d92cd978369cfb23a81079f5e69efa451b841a35b75017b339240bc4052c663b82653abbcf6d17baa896028cb62948765ac266b7710a54c5e99e83ce9a8c1329fc2", @generic="5c17ad56f133c7dc6b9f8741ecb62d7025a7f34b05052414c57d7ea38fdcc74b608d131abbaff90ff24fc11a65e61e11d90e0612d347c81669a66e4fa18c0fb6b6a7a9a5c8f3f35c269d2fd19b0fedbac6fc8be9e26952ae5be2afbc7479f41dd1e1bbc0c17930b4517db798400f75ef6f2edd7cd2a1e0dca6363792974a3522b9b6190bdc1ee5f4b895c231ee919e9bcdbb08b06ee716e8323560a037125f88ac3edeafe2b27a8f0a6f524002223eca7f2a1d717ff396c585c2bf8e514dd60b95fe9481201b0912ab209466f8888a674f29c6741db1220eb8fa7efb8b4a4967385418efb5836082499ae03b1672557b0db6fdf6fba28416"]}, @typed={0x1004, 0x7c, @binary="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"}, @typed={0x8, 0x8, @u32=0x1}, @typed={0x4, 0x39}, @generic="b8c8c5c77ff468e76a3c6962562bb22238c9070975232c615f21a22ae276149ac9a3585082970b4d9c8bb2e75a1d0bcc02d67405a7f927a1f5e393b6623b397913b5739b4c9623feb4a7c3cc7030a0b0cb7695b9544ad63651fbcdf7f2a6e8444de4e9808d7022fa6135e1d2d5e6cf0771a36d1b348fdae2c4518f7ddddb380790822dd7f848a60ebd1078ca14ed2034d5908c687a27164f828e56920c15c6e4a05459ae0cc4d931f0a0486a8ba441014abf1429782ba7b754ba6bac9078fc1225f0e4327d84c8e728d823f5af59cec624b02fac639569b3165bc9dfaaa7d0c0c79fe5c444ddb233d3002db1ee8d", @nested={0x39c, 0x52, [@generic="eafa9d956a1e2496e9430f034a86064dda892c9c852ac06bc6864165aac26c710dbab65658428d81fdfba086e642f83189fd0ca87893d8b156e4ec181cc8643f68278a60e17a002825891c45cdeafc4970b8a0d5af76f424c65e0ffd347df5a1de5e1efcb17bc914d6ef94fd996718b633e634236b0596855163b64ee703cb9a113b874c10220aa37891974166f87f1822da4dbbe0986379c15116160feaeea10c34feb01a77b06a6c0008fee46132c936a829df8e9280690f8514521a6d59afc7d4efe326defd1f41eae07e29937ca5a448e00e5be42521d0b49feb", @typed={0x10, 0x6b, @str='em1-\xa8J*[\x00'}, @typed={0x8, 0x55, @fd=r0}, @generic="27cd00132f5c94313407d3725bf55a94904d0c9de41e1dea0dac31c8856a9a45c35773ef91973953808ca2c0bc7d5f619b10a6d1702b6f008b3e60737ec09ec48e552a337b9f083fefeb164f700534c3a5620f22f8839e2fbce98dde04651be7320a41b449aed4b3931ce065b829fbc63a585dc9aa3805ce39dda2e54e5a34a0574cf896a458dd24e1187e38916907ee63abd83c88f55aab19ed5c9dac3a0d9e9665d8a52e51ca422600265452d41ab32d962d9bd0c8d2df64529012857414cf8e9199a9d6b22e50a08c5d1f70590b57ce342126bb466274a84ea8ade8921c08d2c798606714b8de9360cb974385bdf0d0ffa0de", @typed={0x8, 0x4b, @u32=0x3}, @typed={0x30, 0x7a, @binary="24e97b99371eaf927a918c2c6fba22183a50f624dd826cb342bbf6b2e5429a3d59955eef1eb1a18d361d"}, @typed={0x8, 0x6d, @uid=r9}, @generic="a5a25c6616b9877baf89f2bf9e99c49f2933fa1a9af60c819e2e8faca823430af6422bf288c6d18cf5ecc0980d8b3c55b18ebc664bfa222c50376406423e10b6251ecabb0217bf74097fd758781f5905496a35c3057b66505e1b4baeecffe97e7277fd5ad12930af7df483d456aa1adf19159423eeb9edd1e614ca5106d55e5731c809defa8940aee0", @generic="baf8bdd2c832249f8569d9237aa881dd0753a9dc35f964bfbcd280be1407c5497adec4224a9368c97ba4b887277929806c9991ce19ab1fed81226e099def4fd249ce8db176610ba3130e16dcc3f77388ed7051908ad6b8255e41e62c51b82c373fffb5b8a4b759c803cc31c7bf7480809e003309ee4d568c0f83eac8b8f9140f244923028516f24ee6e1aeaf49af9c221c33cbf9a7fca5560ff48a9ccfaacb73cac60d51b7280bb15d230c95e368dc512f47dfbce2544f79e3ab5cbd3cf709d531b23e9cf58591487ba1dc4dc933b352f8815f49f060b9a6c9393f0bb36e3e44328b2fa668ff"]}]}, 0x28c8}], 0xa, &(0x7f0000004d40)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x78, 0x4000}, 0x6f702920bcc13434) [ 369.588360] attempt to access beyond end of device [ 369.598554] loop0: rw=1, want=2806, limit=112 [ 369.603528] attempt to access beyond end of device [ 369.612604] loop4: rw=1, want=8337, limit=112 [ 369.627213] loop0: rw=1, want=2807, limit=112 [ 369.665923] attempt to access beyond end of device 11:08:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, 0x0, 0x0) [ 369.688681] attempt to access beyond end of device [ 369.699578] loop0: rw=1, want=2808, limit=112 [ 369.714586] loop4: rw=1, want=12433, limit=112 [ 369.736417] attempt to access beyond end of device [ 369.752229] attempt to access beyond end of device [ 369.760463] loop4: rw=1, want=16529, limit=112 [ 369.770221] loop0: rw=1, want=2809, limit=112 [ 369.780701] attempt to access beyond end of device [ 369.802418] FAT-fs (loop2): bogus number of reserved sectors [ 369.811764] attempt to access beyond end of device [ 369.820799] loop0: rw=1, want=2830, limit=112 [ 369.825772] FAT-fs (loop2): Can't find a valid FAT filesystem [ 369.836153] attempt to access beyond end of device [ 369.837999] loop4: rw=1, want=20625, limit=112 [ 369.847580] loop0: rw=1, want=2831, limit=112 [ 369.858048] attempt to access beyond end of device [ 369.864937] loop0: rw=1, want=2832, limit=112 [ 369.869190] attempt to access beyond end of device [ 369.869971] attempt to access beyond end of device [ 369.883578] loop4: rw=1, want=24721, limit=112 [ 369.886996] loop0: rw=1, want=2833, limit=112 [ 369.893741] attempt to access beyond end of device [ 369.898845] loop0: rw=1, want=2882, limit=112 [ 369.899017] attempt to access beyond end of device [ 369.911209] attempt to access beyond end of device [ 369.911428] loop4: rw=1, want=28817, limit=112 [ 369.916277] loop0: rw=1, want=2883, limit=112 [ 369.925848] attempt to access beyond end of device [ 369.931239] loop0: rw=1, want=2884, limit=112 [ 369.933569] attempt to access beyond end of device [ 369.935930] attempt to access beyond end of device [ 369.945119] loop4: rw=1, want=31513, limit=112 [ 369.946110] loop0: rw=1, want=2885, limit=112 [ 369.954097] attempt to access beyond end of device [ 369.955335] attempt to access beyond end of device [ 369.964031] loop4: rw=1, want=31542, limit=112 [ 369.970399] loop0: rw=1, want=2894, limit=112 [ 369.976796] attempt to access beyond end of device [ 369.993168] loop4: rw=1, want=31543, limit=112 [ 370.015245] attempt to access beyond end of device [ 370.020322] attempt to access beyond end of device [ 370.023908] loop0: rw=1, want=2895, limit=112 [ 370.025256] loop4: rw=1, want=31544, limit=112 [ 370.025303] attempt to access beyond end of device [ 370.030506] attempt to access beyond end of device [ 370.040327] loop4: rw=1, want=31545, limit=112 [ 370.046944] loop0: rw=1, want=2896, limit=112 [ 370.049149] attempt to access beyond end of device [ 370.049161] loop4: rw=1, want=31566, limit=112 [ 370.068971] attempt to access beyond end of device [ 370.073758] attempt to access beyond end of device [ 370.089406] loop4: rw=1, want=31567, limit=112 [ 370.093673] loop0: rw=1, want=2897, limit=112 [ 370.094025] attempt to access beyond end of device [ 370.104400] attempt to access beyond end of device [ 370.104772] loop4: rw=1, want=31568, limit=112 [ 370.119431] loop0: rw=1, want=6993, limit=112 [ 370.119541] attempt to access beyond end of device [ 370.128873] loop4: rw=1, want=31569, limit=112 [ 370.137842] attempt to access beyond end of device [ 370.138574] attempt to access beyond end of device [ 370.143168] loop0: rw=1, want=11089, limit=112 [ 370.147797] loop4: rw=1, want=31618, limit=112 [ 370.159493] attempt to access beyond end of device [ 370.164444] loop4: rw=1, want=31619, limit=112 [ 370.167910] attempt to access beyond end of device [ 370.169067] attempt to access beyond end of device [ 370.174017] loop0: rw=1, want=15185, limit=112 [ 370.185028] loop4: rw=1, want=31620, limit=112 [ 370.187994] attempt to access beyond end of device [ 370.189977] attempt to access beyond end of device [ 370.194612] loop0: rw=1, want=19281, limit=112 [ 370.199926] loop4: rw=1, want=31621, limit=112 [ 370.208868] attempt to access beyond end of device [ 370.214178] loop4: rw=1, want=31630, limit=112 [ 370.217596] attempt to access beyond end of device [ 370.218797] attempt to access beyond end of device [ 370.228350] loop0: rw=1, want=23377, limit=112 [ 370.229636] loop4: rw=1, want=31631, limit=112 [ 370.237928] attempt to access beyond end of device [ 370.241242] attempt to access beyond end of device [ 370.247784] loop0: rw=1, want=27473, limit=112 [ 370.248489] loop4: rw=1, want=31632, limit=112 [ 370.257695] attempt to access beyond end of device [ 370.260487] attempt to access beyond end of device [ 370.267561] loop0: rw=1, want=31569, limit=112 [ 370.268337] loop4: rw=1, want=31633, limit=112 [ 370.276588] attempt to access beyond end of device [ 370.279505] attempt to access beyond end of device [ 370.281774] loop0: rw=1, want=32993, limit=112 [ 370.286607] loop4: rw=1, want=32993, limit=112 [ 371.919658] attempt to access beyond end of device [ 371.924640] loop0: rw=1, want=130, limit=112 [ 371.937042] attempt to access beyond end of device [ 371.942053] loop0: rw=1, want=131, limit=112 [ 371.946494] attempt to access beyond end of device [ 371.953195] loop0: rw=1, want=132, limit=112 [ 371.957782] attempt to access beyond end of device [ 371.963287] loop0: rw=1, want=133, limit=112 11:08:59 executing program 4: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:08:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, 0x0, 0x0) 11:08:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:08:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x100) r3 = getegid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) 11:08:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) 11:08:59 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 371.967861] attempt to access beyond end of device [ 371.974202] loop0: rw=1, want=142, limit=112 [ 371.978646] attempt to access beyond end of device [ 372.005777] loop0: rw=1, want=143, limit=112 [ 372.012461] attempt to access beyond end of device [ 372.017400] loop4: rw=1, want=130, limit=112 [ 372.042597] attempt to access beyond end of device [ 372.049903] attempt to access beyond end of device [ 372.061153] FAT-fs (loop2): bogus number of reserved sectors [ 372.070661] loop0: rw=1, want=144, limit=112 [ 372.078821] loop4: rw=1, want=131, limit=112 11:09:00 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)=[0xfffffffffffffff8, 0x8000]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x2000, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400, 0x0) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000240)) getsockopt$inet6_buf(r4, 0x29, 0x0, &(0x7f00000002c0)=""/246, &(0x7f0000000140)=0xf6) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000240)}], 0x2, &(0x7f00000004c0)=""/88, 0x58}, 0x2546}], 0x1, 0x100, &(0x7f0000000580)={0x77359400}) ioctl$TIOCNXCL(r4, 0x540d) 11:09:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, 0x0, 0x0) [ 372.095136] FAT-fs (loop2): Can't find a valid FAT filesystem [ 372.095780] attempt to access beyond end of device [ 372.114285] attempt to access beyond end of device 11:09:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 372.149464] loop0: rw=1, want=145, limit=112 [ 372.158580] loop4: rw=1, want=132, limit=112 [ 372.168214] attempt to access beyond end of device [ 372.173973] attempt to access beyond end of device [ 372.179060] loop0: rw=1, want=4241, limit=112 [ 372.201667] attempt to access beyond end of device [ 372.206609] loop0: rw=1, want=8337, limit=112 [ 372.219295] loop4: rw=1, want=133, limit=112 [ 372.225665] attempt to access beyond end of device 11:09:00 executing program 1 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) [ 372.253538] attempt to access beyond end of device [ 372.254683] loop4: rw=1, want=142, limit=112 [ 372.258479] loop0: rw=1, want=12433, limit=112 [ 372.273593] attempt to access beyond end of device 11:09:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0x6, 0x60a0}, 'port0\x00', 0x2, 0x10, 0x0, 0x0, 0x9, 0x100, 0x1, 0x0, 0x5, 0x7fff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0xc, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r5, &(0x7f0000000100)}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x800000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x111000, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) [ 372.303671] loop0: rw=1, want=16529, limit=112 11:09:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) [ 372.328625] attempt to access beyond end of device [ 372.338565] loop4: rw=1, want=143, limit=112 [ 372.343206] attempt to access beyond end of device [ 372.348265] loop4: rw=1, want=144, limit=112 [ 372.382263] attempt to access beyond end of device [ 372.384231] attempt to access beyond end of device [ 372.400713] loop0: rw=1, want=20625, limit=112 [ 372.429702] FAT-fs (loop2): bogus number of reserved sectors [ 372.435536] FAT-fs (loop2): Can't find a valid FAT filesystem [ 372.445204] loop4: rw=1, want=145, limit=112 [ 372.455609] attempt to access beyond end of device [ 372.481029] loop0: rw=1, want=24721, limit=112 [ 372.506744] attempt to access beyond end of device [ 372.508357] attempt to access beyond end of device [ 372.520325] loop0: rw=1, want=28817, limit=112 [ 372.531618] loop4: rw=1, want=4241, limit=112 [ 372.544167] attempt to access beyond end of device [ 372.549127] loop0: rw=1, want=32889, limit=112 [ 372.555893] attempt to access beyond end of device [ 372.568059] loop4: rw=1, want=8337, limit=112 [ 372.582953] attempt to access beyond end of device [ 372.587997] loop4: rw=1, want=12433, limit=112 [ 372.621779] attempt to access beyond end of device [ 372.629437] net_ratelimit: 26 callbacks suppressed [ 372.629445] protocol 88fb is buggy, dev hsr_slave_0 [ 372.639538] protocol 88fb is buggy, dev hsr_slave_1 [ 372.644674] protocol 88fb is buggy, dev hsr_slave_0 [ 372.649842] protocol 88fb is buggy, dev hsr_slave_1 [ 372.654951] protocol 88fb is buggy, dev hsr_slave_0 [ 372.660065] protocol 88fb is buggy, dev hsr_slave_1 [ 372.665228] protocol 88fb is buggy, dev hsr_slave_0 [ 372.670337] protocol 88fb is buggy, dev hsr_slave_1 [ 372.684942] loop4: rw=1, want=16529, limit=112 [ 372.709249] attempt to access beyond end of device [ 372.714431] loop4: rw=1, want=20625, limit=112 [ 372.728370] attempt to access beyond end of device [ 372.734197] loop4: rw=1, want=24721, limit=112 [ 372.753222] attempt to access beyond end of device [ 372.758164] loop4: rw=1, want=28817, limit=112 [ 372.771246] attempt to access beyond end of device [ 372.776189] loop4: rw=1, want=32889, limit=112 [ 373.109505] protocol 88fb is buggy, dev hsr_slave_0 [ 373.114690] protocol 88fb is buggy, dev hsr_slave_1 [ 373.870833] attempt to access beyond end of device [ 373.875956] loop0: rw=1, want=130, limit=112 [ 373.887761] attempt to access beyond end of device [ 373.893417] loop0: rw=1, want=131, limit=112 [ 373.897989] attempt to access beyond end of device [ 373.909824] loop0: rw=1, want=132, limit=112 [ 373.916352] attempt to access beyond end of device [ 373.927616] loop0: rw=1, want=133, limit=112 [ 373.945601] attempt to access beyond end of device [ 373.950924] loop0: rw=1, want=142, limit=112 [ 373.955474] attempt to access beyond end of device [ 373.966674] loop0: rw=1, want=143, limit=112 [ 373.972533] attempt to access beyond end of device 11:09:01 executing program 4: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:09:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x131000) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x9, 0x2, 0x5, 0xe3e2}, 0x10) 11:09:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) 11:09:01 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 373.977577] loop0: rw=1, want=144, limit=112 [ 373.988329] attempt to access beyond end of device [ 373.999461] loop0: rw=1, want=145, limit=112 [ 374.015664] attempt to access beyond end of device [ 374.020973] loop0: rw=1, want=4241, limit=112 [ 374.039712] attempt to access beyond end of device [ 374.044663] loop0: rw=1, want=8337, limit=112 [ 374.060732] attempt to access beyond end of device [ 374.063172] attempt to access beyond end of device [ 374.065675] loop4: rw=1, want=130, limit=112 [ 374.092119] attempt to access beyond end of device [ 374.105590] loop4: rw=1, want=131, limit=112 [ 374.112682] attempt to access beyond end of device [ 374.112819] loop0: rw=1, want=12433, limit=112 [ 374.117802] loop4: rw=1, want=132, limit=112 11:09:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0xfffe) [ 374.147929] FAT-fs (loop2): bogus number of reserved sectors [ 374.159073] attempt to access beyond end of device [ 374.164676] buffer_io_error: 64 callbacks suppressed [ 374.164686] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 374.178831] FAT-fs (loop2): Can't find a valid FAT filesystem [ 374.187684] loop0: rw=1, want=13689, limit=112 11:09:02 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x297ef) [ 374.198269] attempt to access beyond end of device [ 374.229458] loop4: rw=1, want=133, limit=112 [ 374.234546] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 374.257212] attempt to access beyond end of device [ 374.264448] loop4: rw=1, want=142, limit=112 [ 374.282711] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 374.313366] attempt to access beyond end of device [ 374.344011] loop4: rw=1, want=143, limit=112 [ 374.348454] Buffer I/O error on dev loop4, logical block 142, lost async page write 11:09:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x100000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0xffff, 0x6, 0x14044ad0, 0xffff}, {0xa6, 0x3, 0x80000000, 0x1f}]}, 0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:09:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) 11:09:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x297ef) [ 374.429468] attempt to access beyond end of device [ 374.434436] loop4: rw=1, want=144, limit=112 [ 374.438870] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 374.453680] attempt to access beyond end of device [ 374.458703] loop4: rw=1, want=145, limit=112 [ 374.481538] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 374.512726] attempt to access beyond end of device [ 374.524607] loop4: rw=1, want=4241, limit=112 [ 374.545676] attempt to access beyond end of device [ 374.555799] loop4: rw=1, want=4633, limit=112 [ 374.564673] attempt to access beyond end of device [ 374.574371] loop4: rw=1, want=4662, limit=112 [ 374.602120] Buffer I/O error on dev loop4, logical block 4661, lost async page write [ 374.624195] attempt to access beyond end of device [ 374.629149] loop4: rw=1, want=4663, limit=112 [ 374.636664] FAT-fs (loop2): bogus number of reserved sectors [ 374.655008] Buffer I/O error on dev loop4, logical block 4662, lost async page write [ 374.691961] FAT-fs (loop2): Can't find a valid FAT filesystem [ 374.694304] attempt to access beyond end of device [ 374.724816] loop4: rw=1, want=4664, limit=112 [ 374.732805] Buffer I/O error on dev loop4, logical block 4663, lost async page write [ 374.742099] attempt to access beyond end of device [ 374.747034] loop4: rw=1, want=4665, limit=112 [ 374.752662] Buffer I/O error on dev loop4, logical block 4664, lost async page write [ 374.761733] attempt to access beyond end of device [ 374.766678] loop4: rw=1, want=4686, limit=112 [ 374.766718] attempt to access beyond end of device [ 374.766742] loop4: rw=1, want=4687, limit=112 [ 374.766789] attempt to access beyond end of device [ 374.779447] loop4: rw=1, want=4688, limit=112 [ 374.790559] attempt to access beyond end of device [ 374.797707] loop4: rw=1, want=4689, limit=112 [ 374.807040] attempt to access beyond end of device [ 374.812163] loop4: rw=1, want=4738, limit=112 [ 374.812217] attempt to access beyond end of device [ 374.821711] loop4: rw=1, want=4739, limit=112 [ 374.856865] attempt to access beyond end of device [ 374.868795] loop4: rw=1, want=4740, limit=112 [ 374.884268] attempt to access beyond end of device [ 374.889293] loop4: rw=1, want=4741, limit=112 [ 374.894230] attempt to access beyond end of device [ 374.899171] loop4: rw=1, want=4750, limit=112 [ 374.905429] attempt to access beyond end of device [ 374.911598] loop4: rw=1, want=4751, limit=112 [ 374.916216] attempt to access beyond end of device [ 374.924410] loop4: rw=1, want=4752, limit=112 [ 374.930792] attempt to access beyond end of device [ 374.935768] loop4: rw=1, want=4753, limit=112 [ 374.946123] attempt to access beyond end of device [ 374.951361] loop4: rw=1, want=8849, limit=112 [ 374.960938] attempt to access beyond end of device [ 374.965880] loop4: rw=1, want=12945, limit=112 [ 374.975343] attempt to access beyond end of device [ 374.980351] loop4: rw=1, want=17041, limit=112 [ 374.989030] attempt to access beyond end of device [ 374.994038] loop4: rw=1, want=21137, limit=112 [ 375.005159] attempt to access beyond end of device [ 375.010127] loop4: rw=1, want=25233, limit=112 [ 375.016600] attempt to access beyond end of device [ 375.021586] loop4: rw=1, want=25865, limit=112 11:09:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x100}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040)=0x6, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = getuid() ioprio_set$uid(0x3, r5, 0xf49) 11:09:04 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x4, 0x297ef) 11:09:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) 11:09:04 executing program 4: r0 = socket$inet(0x2, 0x0, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:04 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 376.088805] attempt to access beyond end of device [ 376.107740] loop4: rw=1, want=130, limit=112 [ 376.131746] attempt to access beyond end of device 11:09:04 executing program 5: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 376.248289] loop4: rw=1, want=131, limit=112 [ 376.259525] FAT-fs (loop2): bogus number of reserved sectors [ 376.278324] attempt to access beyond end of device [ 376.283566] FAT-fs (loop2): Can't find a valid FAT filesystem 11:09:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x5, 0x297ef) 11:09:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 376.304923] loop4: rw=1, want=132, limit=112 [ 376.312067] attempt to access beyond end of device [ 376.359687] loop4: rw=1, want=133, limit=112 [ 376.387994] attempt to access beyond end of device [ 376.425862] loop4: rw=1, want=142, limit=112 [ 376.456978] attempt to access beyond end of device [ 376.488223] loop4: rw=1, want=143, limit=112 11:09:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x80) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 376.512524] attempt to access beyond end of device [ 376.541283] loop4: rw=1, want=144, limit=112 [ 376.568475] attempt to access beyond end of device 11:09:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6, 0x297ef) [ 376.596956] loop4: rw=1, want=145, limit=112 [ 376.649333] attempt to access beyond end of device [ 376.678446] loop4: rw=1, want=2457, limit=112 11:09:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x4, 0x4, 0xffffffffffff6b6e}) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 376.712030] attempt to access beyond end of device [ 376.741790] loop4: rw=1, want=2486, limit=112 [ 376.766066] attempt to access beyond end of device [ 376.793707] loop4: rw=1, want=2487, limit=112 [ 376.817780] attempt to access beyond end of device [ 376.844853] loop4: rw=1, want=2488, limit=112 [ 376.869621] attempt to access beyond end of device [ 376.903278] loop4: rw=1, want=2489, limit=112 11:09:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, r3, 0x1c, 0x0, @in={0x2, 0x4e20, @empty}}}, 0xa0) 11:09:04 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 376.933383] attempt to access beyond end of device 11:09:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x7, 0x297ef) [ 376.954531] attempt to access beyond end of device [ 376.990893] loop4: rw=1, want=2510, limit=112 [ 377.006208] loop0: rw=1, want=130, limit=112 [ 377.021843] attempt to access beyond end of device [ 377.031888] attempt to access beyond end of device [ 377.043513] loop4: rw=1, want=2511, limit=112 11:09:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) [ 377.069742] loop0: rw=1, want=131, limit=112 [ 377.078421] attempt to access beyond end of device [ 377.092220] attempt to access beyond end of device [ 377.099762] loop4: rw=1, want=2512, limit=112 [ 377.107707] loop0: rw=1, want=132, limit=112 [ 377.124833] attempt to access beyond end of device [ 377.132806] attempt to access beyond end of device [ 377.143321] loop4: rw=1, want=2513, limit=112 [ 377.148847] loop0: rw=1, want=133, limit=112 [ 377.156615] attempt to access beyond end of device [ 377.163077] loop4: rw=1, want=2562, limit=112 [ 377.172168] attempt to access beyond end of device [ 377.173312] attempt to access beyond end of device [ 377.177678] loop4: rw=1, want=2563, limit=112 [ 377.188707] loop0: rw=1, want=142, limit=112 [ 377.194024] attempt to access beyond end of device [ 377.197306] attempt to access beyond end of device [ 377.198967] loop4: rw=1, want=2564, limit=112 [ 377.207488] loop0: rw=1, want=143, limit=112 [ 377.223391] attempt to access beyond end of device [ 377.223525] attempt to access beyond end of device [ 377.238460] loop4: rw=1, want=2565, limit=112 [ 377.248046] attempt to access beyond end of device [ 377.256144] loop0: rw=1, want=144, limit=112 [ 377.258628] FAT-fs (loop2): bogus number of reserved sectors [ 377.266116] loop4: rw=1, want=2574, limit=112 [ 377.268930] FAT-fs (loop2): Can't find a valid FAT filesystem [ 377.273822] attempt to access beyond end of device [ 377.287043] attempt to access beyond end of device [ 377.290328] loop0: rw=1, want=145, limit=112 [ 377.294754] loop4: rw=1, want=2575, limit=112 [ 377.302604] attempt to access beyond end of device [ 377.305593] attempt to access beyond end of device [ 377.307626] loop0: rw=1, want=4241, limit=112 [ 377.315040] loop4: rw=1, want=2576, limit=112 [ 377.326955] attempt to access beyond end of device [ 377.327644] attempt to access beyond end of device [ 377.334556] loop4: rw=1, want=2577, limit=112 [ 377.337363] loop0: rw=1, want=8337, limit=112 [ 377.355177] attempt to access beyond end of device [ 377.366740] attempt to access beyond end of device [ 377.371889] loop0: rw=1, want=12433, limit=112 [ 377.376562] loop4: rw=1, want=6673, limit=112 [ 377.398880] attempt to access beyond end of device [ 377.399736] attempt to access beyond end of device [ 377.404038] loop0: rw=1, want=16529, limit=112 [ 377.408808] loop4: rw=1, want=10769, limit=112 [ 377.417474] attempt to access beyond end of device [ 377.433929] attempt to access beyond end of device [ 377.437877] loop4: rw=1, want=14865, limit=112 [ 377.443805] loop0: rw=1, want=20625, limit=112 [ 377.458899] attempt to access beyond end of device [ 377.464229] loop0: rw=1, want=22433, limit=112 [ 377.474230] attempt to access beyond end of device [ 377.480693] loop4: rw=1, want=18961, limit=112 [ 377.494800] attempt to access beyond end of device [ 377.500027] loop4: rw=1, want=23057, limit=112 [ 377.513472] attempt to access beyond end of device [ 377.518413] loop4: rw=1, want=27153, limit=112 [ 377.532176] attempt to access beyond end of device [ 377.537125] loop4: rw=1, want=31249, limit=112 [ 377.548907] attempt to access beyond end of device [ 377.554273] loop4: rw=1, want=32993, limit=112 11:09:06 executing program 4: r0 = socket$inet(0x2, 0x0, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:06 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8, 0x297ef) 11:09:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) 11:09:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x2e, 0x0, 0xcd7, 0x3, 0x0, 0x1, 0x66}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x200000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x1, 0x3ff, 0x10001, 0xf00, 0xfff, 0x40, 0xff}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:06 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 378.827993] attempt to access beyond end of device [ 378.843044] loop4: rw=1, want=130, limit=112 [ 378.854780] attempt to access beyond end of device [ 378.863229] loop4: rw=1, want=131, limit=112 [ 378.867854] attempt to access beyond end of device [ 378.869470] net_ratelimit: 26 callbacks suppressed [ 378.869478] protocol 88fb is buggy, dev hsr_slave_0 [ 378.873370] loop4: rw=1, want=132, limit=112 [ 378.877767] protocol 88fb is buggy, dev hsr_slave_1 [ 378.877881] protocol 88fb is buggy, dev hsr_slave_0 [ 378.883297] attempt to access beyond end of device [ 378.887291] protocol 88fb is buggy, dev hsr_slave_1 [ 378.887382] protocol 88fb is buggy, dev hsr_slave_0 [ 378.892798] loop4: rw=1, want=133, limit=112 [ 378.897473] protocol 88fb is buggy, dev hsr_slave_1 [ 378.897593] protocol 88fb is buggy, dev hsr_slave_0 [ 378.902840] attempt to access beyond end of device [ 378.907544] protocol 88fb is buggy, dev hsr_slave_1 [ 378.914717] loop4: rw=1, want=142, limit=112 [ 378.945473] attempt to access beyond end of device 11:09:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 378.969701] FAT-fs (loop2): invalid media value (0x00) [ 378.975514] loop4: rw=1, want=143, limit=112 [ 378.999799] FAT-fs (loop2): Can't find a valid FAT filesystem 11:09:07 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 379.030981] attempt to access beyond end of device [ 379.044507] loop4: rw=1, want=144, limit=112 [ 379.051441] attempt to access beyond end of device [ 379.065352] loop4: rw=1, want=145, limit=112 11:09:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x297ef) 11:09:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 379.082306] attempt to access beyond end of device 11:09:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc020660b, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x7fffffff, 0x0, 0x980000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400004, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0xffffffff, 0x7, 0x1f, 'queue0\x00', 0x9}) [ 379.124841] loop4: rw=1, want=3737, limit=112 [ 379.162212] attempt to access beyond end of device [ 379.174104] loop4: rw=1, want=3766, limit=112 [ 379.194427] buffer_io_error: 52 callbacks suppressed [ 379.194438] Buffer I/O error on dev loop4, logical block 3765, lost async page write 11:09:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) [ 379.224230] attempt to access beyond end of device [ 379.243982] loop4: rw=1, want=3767, limit=112 [ 379.286918] Buffer I/O error on dev loop4, logical block 3766, lost async page write [ 379.325321] attempt to access beyond end of device [ 379.349483] protocol 88fb is buggy, dev hsr_slave_0 [ 379.350733] loop4: rw=1, want=3768, limit=112 [ 379.354585] protocol 88fb is buggy, dev hsr_slave_1 [ 379.369027] Buffer I/O error on dev loop4, logical block 3767, lost async page write [ 379.399253] attempt to access beyond end of device [ 379.408975] loop4: rw=1, want=3769, limit=112 [ 379.418975] Buffer I/O error on dev loop4, logical block 3768, lost async page write [ 379.427238] attempt to access beyond end of device [ 379.434803] loop4: rw=1, want=3790, limit=112 [ 379.440731] Buffer I/O error on dev loop4, logical block 3789, lost async page write [ 379.448681] FAT-fs (loop2): invalid media value (0x00) [ 379.459484] FAT-fs (loop2): Can't find a valid FAT filesystem [ 379.465644] attempt to access beyond end of device [ 379.470699] loop4: rw=1, want=3791, limit=112 [ 379.475201] Buffer I/O error on dev loop4, logical block 3790, lost async page write [ 379.487379] attempt to access beyond end of device [ 379.492382] loop4: rw=1, want=3792, limit=112 [ 379.492399] Buffer I/O error on dev loop4, logical block 3791, lost async page write [ 379.492431] attempt to access beyond end of device [ 379.492443] loop4: rw=1, want=3793, limit=112 [ 379.492456] Buffer I/O error on dev loop4, logical block 3792, lost async page write [ 379.492512] attempt to access beyond end of device [ 379.492523] loop4: rw=1, want=3842, limit=112 [ 379.492534] Buffer I/O error on dev loop4, logical block 3841, lost async page write [ 379.492568] attempt to access beyond end of device [ 379.492576] loop4: rw=1, want=3843, limit=112 [ 379.492586] Buffer I/O error on dev loop4, logical block 3842, lost async page write [ 379.540474] attempt to access beyond end of device [ 379.567036] loop4: rw=1, want=3844, limit=112 [ 379.571626] attempt to access beyond end of device [ 379.576575] loop4: rw=1, want=3845, limit=112 [ 379.581274] attempt to access beyond end of device [ 379.586212] loop4: rw=1, want=3854, limit=112 [ 379.590745] attempt to access beyond end of device [ 379.595682] loop4: rw=1, want=3855, limit=112 [ 379.600266] attempt to access beyond end of device [ 379.605219] loop4: rw=1, want=3856, limit=112 [ 379.609794] attempt to access beyond end of device [ 379.614726] loop4: rw=1, want=3857, limit=112 [ 379.625136] attempt to access beyond end of device [ 379.630113] loop4: rw=1, want=7953, limit=112 [ 379.639570] attempt to access beyond end of device [ 379.644516] loop4: rw=1, want=12049, limit=112 [ 379.658819] attempt to access beyond end of device [ 379.663840] loop4: rw=1, want=16145, limit=112 [ 379.681515] attempt to access beyond end of device [ 379.686459] loop4: rw=1, want=20241, limit=112 [ 379.700709] attempt to access beyond end of device [ 379.705651] loop4: rw=1, want=24337, limit=112 [ 379.719656] attempt to access beyond end of device [ 379.724597] loop4: rw=1, want=28433, limit=112 [ 379.736853] attempt to access beyond end of device [ 379.741833] loop4: rw=1, want=32529, limit=112 [ 379.744965] attempt to access beyond end of device [ 379.751596] loop4: rw=1, want=32993, limit=112 [ 380.389819] attempt to access beyond end of device [ 380.394966] loop1: rw=1, want=16661, limit=112 11:09:08 executing program 4: r0 = socket$inet(0x2, 0x0, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:08 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x1, 0x1, 0x1000, &(0x7f0000001000/0x1000)=nil}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) 11:09:08 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xa, 0x297ef) 11:09:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) [ 380.890518] attempt to access beyond end of device [ 380.895537] loop4: rw=1, want=130, limit=112 [ 380.901690] attempt to access beyond end of device [ 380.906925] loop4: rw=1, want=131, limit=112 [ 380.911777] attempt to access beyond end of device [ 380.917481] loop4: rw=1, want=132, limit=112 [ 380.922470] attempt to access beyond end of device [ 380.927594] loop4: rw=1, want=133, limit=112 [ 380.932283] attempt to access beyond end of device [ 380.937409] loop4: rw=1, want=142, limit=112 [ 380.943331] attempt to access beyond end of device [ 380.948577] loop4: rw=1, want=143, limit=112 [ 380.953323] attempt to access beyond end of device [ 380.958532] loop4: rw=1, want=144, limit=112 [ 380.963284] attempt to access beyond end of device [ 380.968448] loop4: rw=1, want=145, limit=112 [ 380.978581] attempt to access beyond end of device 11:09:08 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x101ff, 0xfffffffffffffffc, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x10001, 0x2000, 0xfff, 0x3, 0x5}) [ 380.992254] loop4: rw=1, want=3097, limit=112 [ 381.026880] attempt to access beyond end of device [ 381.031348] FAT-fs (loop2): invalid media value (0x00) [ 381.050819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 381.056465] loop4: rw=1, want=3126, limit=112 11:09:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb, 0x297ef) [ 381.087503] attempt to access beyond end of device [ 381.104031] loop4: rw=1, want=3127, limit=112 [ 381.118529] attempt to access beyond end of device [ 381.126923] loop4: rw=1, want=3128, limit=112 [ 381.131997] attempt to access beyond end of device 11:09:09 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 381.137481] loop4: rw=1, want=3129, limit=112 [ 381.142964] attempt to access beyond end of device [ 381.169814] loop4: rw=1, want=3150, limit=112 [ 381.180382] attempt to access beyond end of device 11:09:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0xfffffffffffffff7, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = dup2(r0, r1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x84000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x1, 0xffffffffffffff24, r3}) [ 381.190475] loop4: rw=1, want=3151, limit=112 [ 381.195397] attempt to access beyond end of device [ 381.200978] loop4: rw=1, want=3152, limit=112 [ 381.208778] attempt to access beyond end of device [ 381.221171] loop4: rw=1, want=3153, limit=112 [ 381.228779] attempt to access beyond end of device [ 381.234282] loop4: rw=1, want=3202, limit=112 [ 381.245638] attempt to access beyond end of device [ 381.264048] loop4: rw=1, want=3203, limit=112 [ 381.283417] attempt to access beyond end of device [ 381.294745] loop4: rw=1, want=3204, limit=112 [ 381.308734] attempt to access beyond end of device [ 381.338869] loop4: rw=1, want=3205, limit=112 [ 381.352907] attempt to access beyond end of device [ 381.367653] loop4: rw=1, want=3214, limit=112 [ 381.389678] attempt to access beyond end of device [ 381.394626] loop4: rw=1, want=3215, limit=112 [ 381.399158] attempt to access beyond end of device [ 381.409864] loop4: rw=1, want=3216, limit=112 [ 381.416543] attempt to access beyond end of device [ 381.421776] loop4: rw=1, want=3217, limit=112 [ 381.429239] attempt to access beyond end of device [ 381.436083] loop4: rw=1, want=7313, limit=112 [ 381.447759] attempt to access beyond end of device [ 381.453601] loop4: rw=1, want=11409, limit=112 [ 381.466566] attempt to access beyond end of device [ 381.471839] loop4: rw=1, want=15505, limit=112 [ 381.485223] attempt to access beyond end of device [ 381.499465] loop4: rw=1, want=19601, limit=112 [ 381.513838] attempt to access beyond end of device [ 381.518777] loop4: rw=1, want=23697, limit=112 [ 381.527822] attempt to access beyond end of device [ 381.532943] loop4: rw=1, want=27793, limit=112 [ 381.543306] attempt to access beyond end of device [ 381.548230] loop4: rw=1, want=31889, limit=112 [ 381.555300] attempt to access beyond end of device [ 381.560309] loop4: rw=1, want=32993, limit=112 11:09:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc, 0x297ef) 11:09:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) 11:09:10 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getuid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f00000002c0)="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", 0x1000, r0}, 0x68) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) fchown(r1, r2, r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200100, 0x0) write$P9_RSTATu(r4, &(0x7f00000012c0)={0x8a, 0x7d, 0x2, {{0x0, 0x6c, 0x5, 0x40, {0x18, 0x4, 0x8}, 0x88810000, 0x71d, 0x3f, 0x8, 0x0, '', 0x0, '', 0x30, 'vmnet1vboxnet0^@$wlan1//\xef$)\'cgroup)proceth1nodev', 0x9, '/dev/kvm\x00'}, 0x9, '/dev/kvm\x00', r2, r3, r2}}, 0x8a) 11:09:10 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:10 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 382.684499] attempt to access beyond end of device [ 382.700801] loop4: rw=1, want=130, limit=112 [ 382.721792] attempt to access beyond end of device [ 382.735699] loop4: rw=1, want=131, limit=112 [ 382.740747] attempt to access beyond end of device [ 382.746014] loop4: rw=1, want=132, limit=112 [ 382.757682] attempt to access beyond end of device [ 382.763497] loop4: rw=1, want=133, limit=112 [ 382.768234] attempt to access beyond end of device 11:09:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x7) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x4002) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10007, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)) [ 382.788010] loop4: rw=1, want=142, limit=112 [ 382.804611] attempt to access beyond end of device [ 382.816388] FAT-fs (loop2): invalid media value (0x00) 11:09:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xd, 0x297ef) [ 382.846076] FAT-fs (loop2): Can't find a valid FAT filesystem [ 382.869863] loop4: rw=1, want=143, limit=112 [ 382.874316] attempt to access beyond end of device [ 382.879265] loop4: rw=1, want=144, limit=112 11:09:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x80b00) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0xa, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000140)={{r4, r5+30000000}, {0x0, 0x989680}}, &(0x7f00000001c0)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 382.940990] attempt to access beyond end of device [ 382.956454] loop4: rw=1, want=145, limit=112 11:09:10 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) [ 382.991934] attempt to access beyond end of device [ 383.008150] loop4: rw=1, want=2585, limit=112 [ 383.024737] attempt to access beyond end of device [ 383.033579] loop4: rw=1, want=2614, limit=112 [ 383.040195] attempt to access beyond end of device [ 383.054308] loop4: rw=1, want=2615, limit=112 [ 383.079479] attempt to access beyond end of device 11:09:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10, 0x4000000, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) [ 383.099591] loop4: rw=1, want=2616, limit=112 [ 383.119064] attempt to access beyond end of device 11:09:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xe, 0x297ef) [ 383.142638] loop4: rw=1, want=2617, limit=112 [ 383.159304] attempt to access beyond end of device [ 383.176187] loop4: rw=1, want=2638, limit=112 [ 383.191331] attempt to access beyond end of device [ 383.206547] loop4: rw=1, want=2639, limit=112 [ 383.225865] attempt to access beyond end of device 11:09:11 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 383.258467] FAT-fs (loop2): invalid media value (0x00) [ 383.259092] loop4: rw=1, want=2640, limit=112 [ 383.264434] FAT-fs (loop2): Can't find a valid FAT filesystem [ 383.284950] attempt to access beyond end of device [ 383.297177] loop4: rw=1, want=2641, limit=112 [ 383.322243] attempt to access beyond end of device 11:09:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf, 0x297ef) [ 383.343644] loop4: rw=1, want=2690, limit=112 [ 383.372369] attempt to access beyond end of device [ 383.377394] loop4: rw=1, want=2691, limit=112 [ 383.394861] attempt to access beyond end of device [ 383.423863] loop4: rw=1, want=2692, limit=112 [ 383.458623] attempt to access beyond end of device [ 383.481840] loop4: rw=1, want=2693, limit=112 [ 383.491763] attempt to access beyond end of device [ 383.527383] loop4: rw=1, want=2702, limit=112 [ 383.550872] attempt to access beyond end of device [ 383.565889] loop4: rw=1, want=2703, limit=112 [ 383.571624] attempt to access beyond end of device [ 383.576618] loop4: rw=1, want=2704, limit=112 [ 383.589526] attempt to access beyond end of device [ 383.597256] loop4: rw=1, want=2705, limit=112 [ 383.611548] attempt to access beyond end of device [ 383.616487] loop4: rw=1, want=6801, limit=112 [ 383.633990] attempt to access beyond end of device [ 383.638932] loop4: rw=1, want=10897, limit=112 [ 383.648568] attempt to access beyond end of device [ 383.653557] loop4: rw=1, want=14993, limit=112 [ 383.663470] attempt to access beyond end of device [ 383.668388] loop4: rw=1, want=19089, limit=112 [ 383.677414] attempt to access beyond end of device [ 383.682368] loop4: rw=1, want=23185, limit=112 [ 383.692777] attempt to access beyond end of device [ 383.697722] loop4: rw=1, want=27281, limit=112 [ 383.715931] attempt to access beyond end of device [ 383.722002] loop4: rw=1, want=31377, limit=112 [ 383.731698] attempt to access beyond end of device [ 383.736644] loop4: rw=1, want=32993, limit=112 11:09:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) 11:09:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f00000002c0)="08cae1d00d4ff8f3834edbce7c00b0330881e9e241a340fa3a5a796b24fd5eb22f1281f9706e70862a23a06c14d66acc9e30e95b6a9121fc1a35ba9d7784226f8a417e195353b27decf83c6ea3e514ce010d67e0b94e090b2d69f2b6d5e4c5a418cf264af4c76b9fea315771e2f599265c149abfaf79e95d0d3a9c676f120060ca73302cdf03ef78e0f0259609d61ced850729789f30524dbd2a7fe880ec0936ee956210482da3960aed86f57502a4e3c72e94ff518e69393139e3c52e7092b9491b19e4bbdaf97df5eb62407f78185b0176f5de6de612910e", 0xd9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:12 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:12 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x10, 0x297ef) 11:09:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x801) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 384.944004] attempt to access beyond end of device [ 384.948990] loop4: rw=1, want=130, limit=112 [ 384.978732] buffer_io_error: 54 callbacks suppressed [ 384.978741] Buffer I/O error on dev loop4, logical block 129, lost async page write 11:09:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x11, 0x297ef) [ 385.035666] attempt to access beyond end of device [ 385.055711] FAT-fs (loop2): invalid media value (0x00) [ 385.065624] FAT-fs (loop2): Can't find a valid FAT filesystem [ 385.075418] loop4: rw=1, want=131, limit=112 [ 385.104212] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 385.112184] net_ratelimit: 26 callbacks suppressed [ 385.112193] protocol 88fb is buggy, dev hsr_slave_0 [ 385.112250] protocol 88fb is buggy, dev hsr_slave_1 [ 385.112369] protocol 88fb is buggy, dev hsr_slave_0 [ 385.112418] protocol 88fb is buggy, dev hsr_slave_1 [ 385.112511] protocol 88fb is buggy, dev hsr_slave_0 [ 385.112558] protocol 88fb is buggy, dev hsr_slave_1 [ 385.112657] protocol 88fb is buggy, dev hsr_slave_0 11:09:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x8000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) getpeername$tipc(r4, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000200)="6766c7442400570000006766c74424020af3d0c56766c744240600000000670f0114240f01d10f74f8653e0fc71d6766c7442400ba1b30336766c74424028b98ffff6766c744240600000000670f011424660f0ff7900f20c06635080000000f22c066b9800000c00f326635000800000f30f20f2d0e40002e0fc7bfa4fd", 0x7e}], 0x1, 0x40, &(0x7f0000000300), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) [ 385.112702] protocol 88fb is buggy, dev hsr_slave_1 11:09:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x201, 0x8000) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x100000001}]}, 0xc, 0x2) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getuid() ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 11:09:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) [ 385.388003] attempt to access beyond end of device [ 385.418844] loop4: rw=1, want=132, limit=112 [ 385.423655] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 385.448399] attempt to access beyond end of device [ 385.458904] FAT-fs (loop2): invalid media value (0x00) [ 385.463225] loop4: rw=1, want=133, limit=112 [ 385.472349] FAT-fs (loop2): Can't find a valid FAT filesystem [ 385.480081] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 385.493282] attempt to access beyond end of device [ 385.498370] loop4: rw=1, want=142, limit=112 [ 385.503222] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 385.511759] attempt to access beyond end of device [ 385.516825] loop4: rw=1, want=143, limit=112 [ 385.521461] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 385.548728] attempt to access beyond end of device [ 385.554026] loop4: rw=1, want=144, limit=112 [ 385.558614] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 385.581779] attempt to access beyond end of device [ 385.589475] protocol 88fb is buggy, dev hsr_slave_0 [ 385.594672] protocol 88fb is buggy, dev hsr_slave_1 [ 385.603493] loop4: rw=1, want=145, limit=112 [ 385.616560] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 385.636335] attempt to access beyond end of device [ 385.646009] loop4: rw=1, want=2969, limit=112 [ 385.655372] attempt to access beyond end of device [ 385.666369] loop4: rw=1, want=2998, limit=112 [ 385.673421] Buffer I/O error on dev loop4, logical block 2997, lost async page write [ 385.686193] attempt to access beyond end of device [ 385.693647] loop4: rw=1, want=2999, limit=112 [ 385.698294] Buffer I/O error on dev loop4, logical block 2998, lost async page write [ 385.713430] attempt to access beyond end of device [ 385.718537] loop4: rw=1, want=3000, limit=112 [ 385.725606] attempt to access beyond end of device [ 385.735167] loop4: rw=1, want=3001, limit=112 [ 385.742205] attempt to access beyond end of device [ 385.748581] loop4: rw=1, want=3022, limit=112 [ 385.758025] attempt to access beyond end of device [ 385.765475] loop4: rw=1, want=3023, limit=112 [ 385.785345] attempt to access beyond end of device [ 385.791285] loop4: rw=1, want=3024, limit=112 [ 385.795912] attempt to access beyond end of device [ 385.801944] loop4: rw=1, want=3025, limit=112 [ 385.806510] attempt to access beyond end of device [ 385.811518] loop4: rw=1, want=3074, limit=112 [ 385.816033] attempt to access beyond end of device [ 385.821044] loop4: rw=1, want=3075, limit=112 [ 385.825585] attempt to access beyond end of device [ 385.830715] loop4: rw=1, want=3076, limit=112 [ 385.835249] attempt to access beyond end of device [ 385.846762] loop4: rw=1, want=3077, limit=112 [ 385.851397] attempt to access beyond end of device [ 385.856347] loop4: rw=1, want=3086, limit=112 [ 385.863867] attempt to access beyond end of device [ 385.869202] loop4: rw=1, want=3087, limit=112 [ 385.874260] attempt to access beyond end of device [ 385.879195] loop4: rw=1, want=3088, limit=112 [ 385.883762] attempt to access beyond end of device [ 385.888695] loop4: rw=1, want=3089, limit=112 [ 385.897052] attempt to access beyond end of device [ 385.902013] loop4: rw=1, want=7185, limit=112 [ 385.912568] attempt to access beyond end of device [ 385.917939] loop4: rw=1, want=11281, limit=112 [ 385.927534] attempt to access beyond end of device [ 385.935470] loop4: rw=1, want=15377, limit=112 [ 385.944420] attempt to access beyond end of device [ 385.949424] loop4: rw=1, want=19473, limit=112 [ 385.973538] attempt to access beyond end of device [ 385.978482] loop4: rw=1, want=23569, limit=112 [ 385.991982] attempt to access beyond end of device [ 386.002907] loop4: rw=1, want=27665, limit=112 [ 386.016056] attempt to access beyond end of device [ 386.021052] loop4: rw=1, want=31761, limit=112 [ 386.027851] attempt to access beyond end of device [ 386.032846] loop4: rw=1, want=32993, limit=112 11:09:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x12, 0x297ef) 11:09:15 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_snmp6\x00') ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000001c0)=0x7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x3, 0xb1, 0x9, 0xffff, 0x8, 0xffffffffffff9df9, 0x9, 0x0, 0x582, 0xfe0, 0x6742, 0x0, 0x1000, 0x7, 0x81, 0x600000000000000}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) 11:09:15 executing program 0: socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:15 executing program 3: recvmmsg(0xffffffffffffff9c, &(0x7f0000000140)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/220, 0xdc}], 0x4}, 0x328}], 0x1, 0x2020, &(0x7f00000013c0)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001400)=@assoc_value={0x0, 0x400}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001480)={r1, @in6={{0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x25}, 0x3}}, [0x7, 0x3, 0x4, 0x799, 0x0, 0x3, 0x8, 0x6, 0x4, 0x5, 0x5, 0xfffffffffffffffd, 0xff, 0x401, 0x7]}, &(0x7f0000001580)=0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 387.254020] attempt to access beyond end of device [ 387.254674] FAT-fs (loop2): invalid media value (0x00) [ 387.259021] loop4: rw=1, want=130, limit=112 [ 387.259079] attempt to access beyond end of device [ 387.314992] FAT-fs (loop2): Can't find a valid FAT filesystem [ 387.350757] loop4: rw=1, want=131, limit=112 11:09:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 387.367525] attempt to access beyond end of device [ 387.382965] loop4: rw=1, want=132, limit=112 11:09:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) 11:09:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x13, 0x297ef) 11:09:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x801, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 387.409555] attempt to access beyond end of device [ 387.424052] loop4: rw=1, want=133, limit=112 [ 387.436496] attempt to access beyond end of device [ 387.451298] loop4: rw=1, want=142, limit=112 [ 387.464130] attempt to access beyond end of device [ 387.502729] loop4: rw=1, want=143, limit=112 11:09:15 executing program 0: socket$inet(0x2, 0x3, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 387.525817] attempt to access beyond end of device [ 387.546593] loop4: rw=1, want=144, limit=112 [ 387.564561] attempt to access beyond end of device [ 387.565177] FAT-fs (loop2): invalid media value (0x00) [ 387.597448] loop4: rw=1, want=145, limit=112 [ 387.635156] attempt to access beyond end of device [ 387.641758] FAT-fs (loop2): Can't find a valid FAT filesystem [ 387.646738] loop4: rw=1, want=2073, limit=112 [ 387.656581] attempt to access beyond end of device [ 387.662088] loop4: rw=1, want=2102, limit=112 [ 387.666885] attempt to access beyond end of device [ 387.672606] loop4: rw=1, want=2103, limit=112 [ 387.677330] attempt to access beyond end of device [ 387.682847] loop4: rw=1, want=2104, limit=112 [ 387.687503] attempt to access beyond end of device [ 387.693233] loop4: rw=1, want=2105, limit=112 [ 387.697909] attempt to access beyond end of device [ 387.703061] loop4: rw=1, want=2126, limit=112 [ 387.708006] attempt to access beyond end of device [ 387.735917] loop4: rw=1, want=2127, limit=112 [ 387.741764] attempt to access beyond end of device [ 387.746792] loop4: rw=1, want=2128, limit=112 [ 387.751590] attempt to access beyond end of device [ 387.756691] loop4: rw=1, want=2129, limit=112 [ 387.761752] attempt to access beyond end of device [ 387.785089] loop4: rw=1, want=2178, limit=112 [ 387.791087] attempt to access beyond end of device [ 387.796042] loop4: rw=1, want=2179, limit=112 [ 387.800729] attempt to access beyond end of device [ 387.805680] loop4: rw=1, want=2180, limit=112 [ 387.810617] attempt to access beyond end of device [ 387.815574] loop4: rw=1, want=2181, limit=112 [ 387.820282] attempt to access beyond end of device [ 387.825585] loop4: rw=1, want=2190, limit=112 [ 387.830221] attempt to access beyond end of device [ 387.835154] loop4: rw=1, want=2191, limit=112 [ 387.839818] attempt to access beyond end of device [ 387.844852] loop4: rw=1, want=2192, limit=112 [ 387.849502] attempt to access beyond end of device [ 387.854531] loop4: rw=1, want=2193, limit=112 [ 387.869273] attempt to access beyond end of device [ 387.874336] loop4: rw=1, want=6289, limit=112 [ 387.887980] attempt to access beyond end of device [ 387.892965] loop4: rw=1, want=10385, limit=112 [ 387.905883] attempt to access beyond end of device [ 387.911753] loop4: rw=1, want=14481, limit=112 [ 387.924534] attempt to access beyond end of device [ 387.929539] loop4: rw=1, want=18577, limit=112 [ 387.942551] attempt to access beyond end of device [ 387.947491] loop4: rw=1, want=22673, limit=112 [ 387.956529] attempt to access beyond end of device [ 387.961501] loop4: rw=1, want=26769, limit=112 [ 387.971314] attempt to access beyond end of device [ 387.976266] loop4: rw=1, want=30865, limit=112 [ 387.984042] attempt to access beyond end of device [ 387.988966] loop4: rw=1, want=32993, limit=112 11:09:17 executing program 4: socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x502, 0x444001) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 11:09:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x14, 0x297ef) 11:09:17 executing program 0: socket$inet(0x2, 0x3, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:17 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 389.108014] attempt to access beyond end of device [ 389.113233] loop4: rw=1, want=130, limit=112 [ 389.129568] attempt to access beyond end of device [ 389.148993] loop4: rw=1, want=131, limit=112 11:09:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0xffffffffffffff13, 0x9, 0x2}]}) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x20100) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x28, &(0x7f0000000140)}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 389.371002] attempt to access beyond end of device 11:09:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x15, 0x297ef) [ 389.407198] loop4: rw=1, want=132, limit=112 [ 389.463249] attempt to access beyond end of device 11:09:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 389.505528] loop4: rw=1, want=133, limit=112 11:09:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb, 0x297ef) [ 389.541763] attempt to access beyond end of device 11:09:17 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r0, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = socket(0x9, 0x1, 0x9) recvfrom$x25(r2, &(0x7f0000000140)=""/37, 0x25, 0x10002, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = getpid() getpgrp(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 389.575490] loop4: rw=1, want=142, limit=112 [ 389.598678] attempt to access beyond end of device [ 389.638171] loop4: rw=1, want=143, limit=112 [ 389.683633] attempt to access beyond end of device [ 389.729760] loop4: rw=1, want=144, limit=112 [ 389.783003] attempt to access beyond end of device [ 389.846247] loop4: rw=1, want=145, limit=112 11:09:17 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4041fd, 0x0) write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7, 0x79, 0x2}, 0x7) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 389.905265] attempt to access beyond end of device [ 389.925310] loop4: rw=1, want=2713, limit=112 [ 389.931732] attempt to access beyond end of device [ 389.936764] loop4: rw=1, want=2742, limit=112 [ 389.941439] attempt to access beyond end of device [ 389.946470] loop4: rw=1, want=2743, limit=112 [ 389.951138] attempt to access beyond end of device [ 389.956167] loop4: rw=1, want=2744, limit=112 [ 389.961073] attempt to access beyond end of device [ 389.966075] loop4: rw=1, want=2745, limit=112 [ 389.970709] attempt to access beyond end of device [ 389.975753] loop4: rw=1, want=2766, limit=112 [ 389.980370] buffer_io_error: 50 callbacks suppressed [ 389.980379] Buffer I/O error on dev loop4, logical block 2765, lost async page write [ 389.996130] attempt to access beyond end of device [ 389.998699] attempt to access beyond end of device [ 390.006218] loop4: rw=1, want=2767, limit=112 [ 390.006297] loop0: rw=1, want=130, limit=112 [ 390.016191] Buffer I/O error on dev loop4, logical block 2766, lost async page write [ 390.024213] attempt to access beyond end of device [ 390.029155] loop4: rw=1, want=2768, limit=112 [ 390.039937] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 390.040315] Buffer I/O error on dev loop4, logical block 2767, lost async page write [ 390.047762] attempt to access beyond end of device [ 390.047776] loop0: rw=1, want=131, limit=112 [ 390.060313] attempt to access beyond end of device [ 390.077808] loop4: rw=1, want=2769, limit=112 [ 390.082463] Buffer I/O error on dev loop4, logical block 2768, lost async page write [ 390.091928] attempt to access beyond end of device [ 390.096952] loop4: rw=1, want=2818, limit=112 [ 390.101595] Buffer I/O error on dev loop4, logical block 2817, lost async page write [ 390.114692] attempt to access beyond end of device [ 390.119451] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 390.119722] loop4: rw=1, want=2819, limit=112 [ 390.127584] attempt to access beyond end of device [ 390.131954] Buffer I/O error on dev loop4, logical block 2818, lost async page write [ 390.131985] attempt to access beyond end of device [ 390.132008] loop4: rw=1, want=2820, limit=112 [ 390.132033] Buffer I/O error on dev loop4, logical block 2819, lost async page write [ 390.132057] attempt to access beyond end of device [ 390.132079] loop4: rw=1, want=2821, limit=112 [ 390.132091] Buffer I/O error on dev loop4, logical block 2820, lost async page write [ 390.132127] attempt to access beyond end of device [ 390.132151] loop4: rw=1, want=2830, limit=112 [ 390.132178] attempt to access beyond end of device [ 390.132190] loop4: rw=1, want=2831, limit=112 [ 390.158822] loop0: rw=1, want=132, limit=112 [ 390.162603] attempt to access beyond end of device [ 390.172488] attempt to access beyond end of device [ 390.181023] loop4: rw=1, want=2832, limit=112 [ 390.187696] loop0: rw=1, want=133, limit=112 [ 390.189597] attempt to access beyond end of device [ 390.189608] loop4: rw=1, want=2833, limit=112 [ 390.194942] attempt to access beyond end of device [ 390.205999] attempt to access beyond end of device [ 390.208549] loop4: rw=1, want=6929, limit=112 [ 390.213826] loop0: rw=1, want=142, limit=112 [ 390.225874] attempt to access beyond end of device [ 390.233510] attempt to access beyond end of device [ 390.236960] loop4: rw=1, want=11025, limit=112 [ 390.244027] loop0: rw=1, want=143, limit=112 [ 390.254646] attempt to access beyond end of device [ 390.262126] attempt to access beyond end of device [ 390.265430] loop4: rw=1, want=15121, limit=112 [ 390.272784] loop0: rw=1, want=144, limit=112 [ 390.283131] attempt to access beyond end of device [ 390.287711] attempt to access beyond end of device [ 390.288850] loop4: rw=1, want=19217, limit=112 [ 390.296788] loop0: rw=1, want=145, limit=112 [ 390.306578] attempt to access beyond end of device [ 390.313843] loop4: rw=1, want=23313, limit=112 [ 390.325492] attempt to access beyond end of device [ 390.327060] attempt to access beyond end of device [ 390.335031] loop0: rw=1, want=4241, limit=112 [ 390.335398] loop4: rw=1, want=27409, limit=112 [ 390.348376] attempt to access beyond end of device [ 390.353785] loop0: rw=1, want=8337, limit=112 [ 390.358881] attempt to access beyond end of device [ 390.364865] loop4: rw=1, want=31505, limit=112 [ 390.366607] attempt to access beyond end of device [ 390.374991] loop0: rw=1, want=12433, limit=112 [ 390.378726] attempt to access beyond end of device [ 390.385566] loop4: rw=1, want=32993, limit=112 [ 390.388071] attempt to access beyond end of device [ 390.395690] loop0: rw=1, want=16529, limit=112 [ 390.409645] attempt to access beyond end of device [ 390.414592] loop0: rw=1, want=20625, limit=112 [ 390.428240] attempt to access beyond end of device [ 390.433241] loop0: rw=1, want=24721, limit=112 [ 390.448149] attempt to access beyond end of device [ 390.453168] loop0: rw=1, want=28817, limit=112 [ 390.467086] attempt to access beyond end of device [ 390.472327] loop0: rw=1, want=32889, limit=112 [ 391.349521] net_ratelimit: 26 callbacks suppressed [ 391.349532] protocol 88fb is buggy, dev hsr_slave_0 [ 391.359639] protocol 88fb is buggy, dev hsr_slave_1 [ 391.364753] protocol 88fb is buggy, dev hsr_slave_0 [ 391.369914] protocol 88fb is buggy, dev hsr_slave_1 [ 391.375045] protocol 88fb is buggy, dev hsr_slave_0 [ 391.380252] protocol 88fb is buggy, dev hsr_slave_1 [ 391.385432] protocol 88fb is buggy, dev hsr_slave_0 [ 391.390561] protocol 88fb is buggy, dev hsr_slave_1 11:09:19 executing program 4: socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x16, 0x297ef) 11:09:19 executing program 0: socket$inet(0x2, 0x3, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:19 executing program 2: r0 = socket$inet(0x2, 0x0, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x1, 0x4, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r2, 0x80000001, 0x20}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'sha512_mb\x00'}}, &(0x7f00000002c0)="adf40d29715edd2446738e33ad2a151c10a2fd81a74f4e52880a79af40248c060f122083b6067ad3121dd402e521921ec593a44fd5b685a984a1c98cd27c3b8e2f8c3c5087c45e35022bce544e9e006bffa05278deab2a976eb465b3fc4ca182fccb96c8523522246bee982e920e62c95250d7408a6d32efec7d5ac224e34503e3afa00a09fcaa6481c538acee49787caa4e0593c3fb93125c616a369d35e713518a0409edd4b090e020543a372c7f6c5eea9a9f74830cf89c08aade4dd1b96d35016ceea4f9", &(0x7f00000003c0)=""/136) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 391.781953] attempt to access beyond end of device [ 391.786922] loop4: rw=1, want=130, limit=112 11:09:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x17, 0x297ef) [ 391.829470] protocol 88fb is buggy, dev hsr_slave_0 [ 391.834571] protocol 88fb is buggy, dev hsr_slave_1 [ 391.856313] attempt to access beyond end of device [ 391.919425] loop4: rw=1, want=131, limit=112 [ 391.923917] attempt to access beyond end of device [ 391.928855] loop4: rw=1, want=132, limit=112 [ 392.749036] attempt to access beyond end of device [ 392.840607] loop4: rw=1, want=133, limit=112 [ 392.845087] attempt to access beyond end of device 11:09:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x2, 0x102000}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000080)={r3, 0xfffffffffffff800}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) removexattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)=@random={'osx.', 'posix_acl_access\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 392.929027] attempt to access beyond end of device [ 392.935029] loop4: rw=1, want=142, limit=112 [ 392.948147] loop0: rw=1, want=130, limit=112 [ 392.969840] attempt to access beyond end of device [ 392.974791] loop4: rw=1, want=143, limit=112 [ 392.979231] attempt to access beyond end of device [ 392.984705] attempt to access beyond end of device [ 393.032681] loop0: rw=1, want=131, limit=112 [ 393.037150] attempt to access beyond end of device 11:09:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x18, 0x297ef) [ 393.073555] loop4: rw=1, want=144, limit=112 [ 393.078014] attempt to access beyond end of device [ 393.083077] loop4: rw=1, want=145, limit=112 [ 393.089425] loop0: rw=1, want=132, limit=112 [ 393.093891] attempt to access beyond end of device [ 393.098832] loop0: rw=1, want=133, limit=112 [ 393.106839] attempt to access beyond end of device [ 393.111989] loop4: rw=1, want=3673, limit=112 [ 393.119008] attempt to access beyond end of device [ 393.124049] attempt to access beyond end of device [ 393.128989] loop0: rw=1, want=142, limit=112 [ 393.149205] attempt to access beyond end of device [ 393.158433] loop4: rw=1, want=3702, limit=112 [ 393.169635] attempt to access beyond end of device [ 393.172512] loop0: rw=1, want=143, limit=112 [ 393.174579] loop2: rw=1, want=130, limit=112 [ 393.179015] attempt to access beyond end of device [ 393.187118] attempt to access beyond end of device [ 393.196288] loop0: rw=1, want=144, limit=112 [ 393.207440] attempt to access beyond end of device [ 393.207659] loop4: rw=1, want=3703, limit=112 [ 393.213023] loop0: rw=1, want=145, limit=112 [ 393.227643] attempt to access beyond end of device [ 393.227951] attempt to access beyond end of device [ 393.242666] loop2: rw=1, want=131, limit=112 [ 393.245581] loop0: rw=1, want=4241, limit=112 [ 393.247122] attempt to access beyond end of device [ 393.253224] attempt to access beyond end of device [ 393.270595] loop4: rw=1, want=3704, limit=112 [ 393.275149] attempt to access beyond end of device [ 393.284337] loop4: rw=1, want=3705, limit=112 [ 393.288885] attempt to access beyond end of device [ 393.302990] loop2: rw=1, want=132, limit=112 [ 393.303628] loop4: rw=1, want=3726, limit=112 [ 393.310644] attempt to access beyond end of device [ 393.320190] loop0: rw=1, want=8337, limit=112 [ 393.324314] attempt to access beyond end of device [ 393.332498] loop4: rw=1, want=3727, limit=112 [ 393.337032] attempt to access beyond end of device [ 393.339542] attempt to access beyond end of device [ 393.345834] loop4: rw=1, want=3728, limit=112 [ 393.346892] loop2: rw=1, want=133, limit=112 [ 393.353721] attempt to access beyond end of device [ 393.364800] loop4: rw=1, want=3729, limit=112 [ 393.371676] attempt to access beyond end of device [ 393.376662] loop4: rw=1, want=3778, limit=112 [ 393.376728] attempt to access beyond end of device [ 393.385192] attempt to access beyond end of device [ 393.395665] loop4: rw=1, want=3779, limit=112 [ 393.397601] attempt to access beyond end of device [ 393.405062] attempt to access beyond end of device [ 393.410392] loop0: rw=1, want=12433, limit=112 [ 393.418631] attempt to access beyond end of device [ 393.423979] loop4: rw=1, want=3780, limit=112 [ 393.424077] loop2: rw=1, want=142, limit=112 [ 393.428510] attempt to access beyond end of device [ 393.444567] attempt to access beyond end of device [ 393.445695] loop4: rw=1, want=3781, limit=112 [ 393.449565] loop2: rw=1, want=143, limit=112 [ 393.449601] attempt to access beyond end of device [ 393.454750] attempt to access beyond end of device [ 393.458489] loop2: rw=1, want=144, limit=112 [ 393.469239] loop0: rw=1, want=16529, limit=112 [ 393.472872] attempt to access beyond end of device [ 393.482405] loop4: rw=1, want=3790, limit=112 [ 393.485917] attempt to access beyond end of device [ 393.486927] attempt to access beyond end of device [ 393.496852] loop2: rw=1, want=145, limit=112 [ 393.497589] loop0: rw=1, want=20625, limit=112 [ 393.507039] attempt to access beyond end of device [ 393.509635] loop4: rw=1, want=3791, limit=112 [ 393.513688] loop2: rw=1, want=4241, limit=112 [ 393.528922] attempt to access beyond end of device [ 393.530247] attempt to access beyond end of device [ 393.534012] attempt to access beyond end of device [ 393.538783] loop2: rw=1, want=8337, limit=112 [ 393.549163] loop4: rw=1, want=3792, limit=112 [ 393.553882] attempt to access beyond end of device [ 393.558305] attempt to access beyond end of device [ 393.558819] loop4: rw=1, want=3793, limit=112 [ 393.564182] loop0: rw=1, want=24721, limit=112 [ 393.574243] loop2: rw=1, want=12433, limit=112 [ 393.578584] attempt to access beyond end of device [ 393.587696] attempt to access beyond end of device [ 393.593787] loop0: rw=1, want=28817, limit=112 [ 393.596898] attempt to access beyond end of device [ 393.607861] attempt to access beyond end of device [ 393.609385] loop4: rw=1, want=7889, limit=112 [ 393.613209] loop2: rw=1, want=16529, limit=112 [ 393.623329] loop0: rw=1, want=32889, limit=112 [ 393.626430] attempt to access beyond end of device [ 393.634037] loop4: rw=1, want=11985, limit=112 [ 393.647550] attempt to access beyond end of device [ 393.652596] loop4: rw=1, want=16081, limit=112 [ 393.663195] attempt to access beyond end of device [ 393.668139] loop2: rw=1, want=20625, limit=112 [ 393.679579] attempt to access beyond end of device [ 393.684522] loop4: rw=1, want=20177, limit=112 [ 393.697793] attempt to access beyond end of device [ 393.698241] attempt to access beyond end of device [ 393.702832] loop4: rw=1, want=24273, limit=112 [ 393.710966] attempt to access beyond end of device [ 393.717292] loop4: rw=1, want=28369, limit=112 [ 393.730396] attempt to access beyond end of device [ 393.735339] loop4: rw=1, want=32465, limit=112 [ 393.740019] loop2: rw=1, want=24721, limit=112 [ 393.753148] attempt to access beyond end of device [ 393.758088] loop4: rw=1, want=32993, limit=112 [ 393.766801] attempt to access beyond end of device [ 393.774157] loop2: rw=1, want=28817, limit=112 [ 393.783602] attempt to access beyond end of device [ 393.788560] loop2: rw=1, want=29721, limit=112 [ 393.810043] attempt to access beyond end of device [ 393.814983] loop2: rw=1, want=29750, limit=112 [ 393.819693] attempt to access beyond end of device [ 393.824631] loop2: rw=1, want=29751, limit=112 [ 393.829259] attempt to access beyond end of device [ 393.834262] loop2: rw=1, want=29752, limit=112 [ 393.838871] attempt to access beyond end of device [ 393.844133] loop2: rw=1, want=29753, limit=112 [ 393.848768] attempt to access beyond end of device [ 393.853822] loop2: rw=1, want=29774, limit=112 [ 393.858458] attempt to access beyond end of device [ 393.863493] loop2: rw=1, want=29775, limit=112 [ 393.868143] attempt to access beyond end of device [ 393.873375] loop2: rw=1, want=29776, limit=112 [ 393.878001] attempt to access beyond end of device [ 393.888042] loop2: rw=1, want=29777, limit=112 [ 393.893001] attempt to access beyond end of device [ 393.897947] loop2: rw=1, want=29826, limit=112 [ 393.902912] attempt to access beyond end of device [ 393.907855] loop2: rw=1, want=29827, limit=112 [ 393.912780] attempt to access beyond end of device [ 393.917722] loop2: rw=1, want=29828, limit=112 [ 393.939466] attempt to access beyond end of device [ 393.944412] loop2: rw=1, want=29829, limit=112 [ 393.949020] attempt to access beyond end of device [ 393.979432] loop2: rw=1, want=29838, limit=112 [ 393.984047] attempt to access beyond end of device [ 393.988980] loop2: rw=1, want=29839, limit=112 [ 393.999492] attempt to access beyond end of device [ 394.004534] loop2: rw=1, want=29840, limit=112 [ 394.009144] attempt to access beyond end of device [ 394.054181] loop2: rw=1, want=29841, limit=112 [ 394.064573] attempt to access beyond end of device [ 394.094240] loop2: rw=1, want=32993, limit=112 11:09:23 executing program 4: socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:23 executing program 2: r0 = socket$inet(0x2, 0x0, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x19, 0x297ef) 11:09:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402502, 0x0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f00000000c0)=0x1, 0x4) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(r2, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000000)=0x80, 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10000000, 0x2, 0x1004, 0x1000, &(0x7f0000000000/0x1000)=nil}) 11:09:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 395.246017] attempt to access beyond end of device [ 395.251116] loop4: rw=1, want=130, limit=112 [ 395.255614] buffer_io_error: 66 callbacks suppressed [ 395.255624] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 395.287537] attempt to access beyond end of device [ 395.307408] loop4: rw=1, want=131, limit=112 [ 395.317358] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 395.339653] attempt to access beyond end of device [ 395.373514] loop4: rw=1, want=132, limit=112 [ 395.402367] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 395.505345] attempt to access beyond end of device 11:09:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1a, 0x297ef) [ 395.583030] loop4: rw=1, want=133, limit=112 [ 395.615393] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 395.662603] attempt to access beyond end of device [ 395.695096] loop4: rw=1, want=142, limit=112 11:09:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x20, 0x0, @thr={&(0x7f00000002c0)="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", &(0x7f00000012c0)="63c9457e292a784fe2799380b8df380e9b09aa49b9875bdf83310f56a91145aee9effd7566637b99f4fa29542d8a64d4e21f2ed07f30e8218fc82ab7e062ebd40fbf399c21f88aa0378edef8731b42002bd9c4093f7d208b1cae9a3992eed034ca3be86638eb8f0ff728cdb0bc79f45500040ec81029c0926ee89c28cb9c47f09a35fc817a71363dafacf17767934669f1ec3eeb24fcd26fa292b6021dfb52acebcdc4ecfc35e9bc20f90c125a1c52"}}, &(0x7f00000000c0)=0x0) timer_gettime(r2, &(0x7f0000000240)) alarm(0x200) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000001500)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x307, @random="13b85b95de4e"}, 0x0, {0x2, 0x4e20, @broadcast}, 'hsr0\x00'}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001380)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f00000013c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4$bt_l2cap(r4, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x1) ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f0000001400)={{0x1, @name="a3b05aad5e812845b1ed2291b1ff4e6f331aed432a0a53286886be5c29ed7d2c"}, "eeb2ae2ff20198f62d47159e4042af314f8a319f2703b63f501c55431322703b", 0x1}) [ 395.725432] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 395.778054] attempt to access beyond end of device [ 395.809970] loop4: rw=1, want=143, limit=112 [ 395.835755] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 395.884588] attempt to access beyond end of device [ 395.917173] loop4: rw=1, want=144, limit=112 11:09:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1b, 0x297ef) [ 395.946628] Buffer I/O error on dev loop4, logical block 143, lost async page write 11:09:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x83) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 395.999822] attempt to access beyond end of device [ 396.032206] loop4: rw=1, want=145, limit=112 [ 396.057205] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 396.167482] attempt to access beyond end of device 11:09:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 396.215843] loop4: rw=1, want=4241, limit=112 [ 396.273692] attempt to access beyond end of device [ 396.300838] loop4: rw=1, want=5465, limit=112 [ 396.321595] attempt to access beyond end of device [ 396.352777] loop4: rw=1, want=5494, limit=112 [ 396.359756] Buffer I/O error on dev loop4, logical block 5493, lost async page write [ 396.367800] attempt to access beyond end of device [ 396.373030] loop4: rw=1, want=5495, limit=112 [ 396.377620] Buffer I/O error on dev loop4, logical block 5494, lost async page write [ 396.383285] attempt to access beyond end of device [ 396.388207] attempt to access beyond end of device [ 396.395402] loop4: rw=1, want=5496, limit=112 [ 396.397935] loop2: rw=1, want=130, limit=112 [ 396.400141] attempt to access beyond end of device [ 396.409470] loop4: rw=1, want=5497, limit=112 [ 396.414011] attempt to access beyond end of device [ 396.418942] loop4: rw=1, want=5518, limit=112 [ 396.423559] attempt to access beyond end of device [ 396.428506] loop4: rw=1, want=5519, limit=112 [ 396.433117] attempt to access beyond end of device [ 396.439423] loop2: rw=1, want=131, limit=112 [ 396.443871] attempt to access beyond end of device [ 396.448822] loop2: rw=1, want=132, limit=112 [ 396.456651] attempt to access beyond end of device [ 396.462696] loop4: rw=1, want=5520, limit=112 [ 396.467231] attempt to access beyond end of device [ 396.473209] attempt to access beyond end of device [ 396.478148] loop2: rw=1, want=133, limit=112 [ 396.484347] attempt to access beyond end of device [ 396.489309] loop2: rw=1, want=142, limit=112 [ 396.494198] loop4: rw=1, want=5521, limit=112 [ 396.498759] attempt to access beyond end of device [ 396.504456] attempt to access beyond end of device [ 396.509749] loop4: rw=1, want=5570, limit=112 [ 396.514285] attempt to access beyond end of device [ 396.519228] loop4: rw=1, want=5571, limit=112 [ 396.523803] loop2: rw=1, want=143, limit=112 [ 396.523840] attempt to access beyond end of device [ 396.523851] loop2: rw=1, want=144, limit=112 [ 396.523879] attempt to access beyond end of device [ 396.523889] loop2: rw=1, want=145, limit=112 [ 396.528644] attempt to access beyond end of device [ 396.552095] attempt to access beyond end of device [ 396.557045] loop4: rw=1, want=5572, limit=112 [ 396.561733] attempt to access beyond end of device [ 396.566728] loop4: rw=1, want=5573, limit=112 [ 396.574165] loop2: rw=1, want=3737, limit=112 [ 396.579032] attempt to access beyond end of device [ 396.584216] attempt to access beyond end of device [ 396.584469] loop4: rw=1, want=5582, limit=112 [ 396.602682] attempt to access beyond end of device [ 396.606076] loop2: rw=1, want=3766, limit=112 [ 396.612910] attempt to access beyond end of device [ 396.619112] loop2: rw=1, want=3767, limit=112 [ 396.619251] loop4: rw=1, want=5583, limit=112 [ 396.624520] attempt to access beyond end of device [ 396.641374] attempt to access beyond end of device [ 396.641906] loop2: rw=1, want=3768, limit=112 [ 396.646423] loop4: rw=1, want=5584, limit=112 [ 396.656718] attempt to access beyond end of device [ 396.663220] loop2: rw=1, want=3769, limit=112 [ 396.666057] attempt to access beyond end of device [ 396.668230] attempt to access beyond end of device [ 396.686549] loop4: rw=1, want=5585, limit=112 [ 396.688047] loop2: rw=1, want=3790, limit=112 [ 396.695670] attempt to access beyond end of device [ 396.705564] attempt to access beyond end of device [ 396.707207] loop2: rw=1, want=3791, limit=112 [ 396.715671] attempt to access beyond end of device [ 396.717464] loop4: rw=1, want=9681, limit=112 [ 396.727438] loop2: rw=1, want=3792, limit=112 [ 396.732513] attempt to access beyond end of device [ 396.737461] loop2: rw=1, want=3793, limit=112 [ 396.741514] attempt to access beyond end of device [ 396.746889] loop4: rw=1, want=13777, limit=112 [ 396.748879] attempt to access beyond end of device [ 396.756993] loop2: rw=1, want=3842, limit=112 [ 396.768536] attempt to access beyond end of device [ 396.773828] loop2: rw=1, want=3843, limit=112 [ 396.778379] attempt to access beyond end of device [ 396.782795] attempt to access beyond end of device [ 396.788255] loop4: rw=1, want=17873, limit=112 [ 396.790218] loop2: rw=1, want=3844, limit=112 [ 396.797879] attempt to access beyond end of device [ 396.809572] loop2: rw=1, want=3845, limit=112 [ 396.814118] attempt to access beyond end of device [ 396.814157] attempt to access beyond end of device [ 396.819055] loop2: rw=1, want=3854, limit=112 [ 396.835923] attempt to access beyond end of device [ 396.841667] loop2: rw=1, want=3855, limit=112 [ 396.843518] loop4: rw=1, want=21969, limit=112 [ 396.846200] attempt to access beyond end of device [ 396.863582] loop2: rw=1, want=3856, limit=112 [ 396.868142] attempt to access beyond end of device [ 396.868288] attempt to access beyond end of device [ 396.876523] loop2: rw=1, want=3857, limit=112 [ 396.896094] attempt to access beyond end of device [ 396.897536] loop4: rw=1, want=26065, limit=112 [ 396.904609] loop2: rw=1, want=7953, limit=112 [ 396.926242] attempt to access beyond end of device [ 396.926818] attempt to access beyond end of device [ 396.934468] loop2: rw=1, want=12049, limit=112 [ 396.949407] loop4: rw=1, want=30161, limit=112 [ 396.958374] attempt to access beyond end of device [ 396.967585] attempt to access beyond end of device [ 396.972805] loop4: rw=1, want=32993, limit=112 [ 396.972905] loop2: rw=1, want=16145, limit=112 [ 396.999814] attempt to access beyond end of device [ 397.004769] loop2: rw=1, want=20241, limit=112 [ 397.028311] attempt to access beyond end of device [ 397.049435] loop2: rw=1, want=24337, limit=112 [ 397.073168] attempt to access beyond end of device [ 397.078143] loop2: rw=1, want=28433, limit=112 [ 397.102898] attempt to access beyond end of device [ 397.107859] loop2: rw=1, want=28897, limit=112 [ 397.589493] net_ratelimit: 26 callbacks suppressed [ 397.589501] protocol 88fb is buggy, dev hsr_slave_0 [ 397.599563] protocol 88fb is buggy, dev hsr_slave_1 [ 397.604647] protocol 88fb is buggy, dev hsr_slave_0 [ 397.609746] protocol 88fb is buggy, dev hsr_slave_1 [ 397.614813] protocol 88fb is buggy, dev hsr_slave_0 [ 397.619905] protocol 88fb is buggy, dev hsr_slave_1 [ 397.624982] protocol 88fb is buggy, dev hsr_slave_0 [ 397.630081] protocol 88fb is buggy, dev hsr_slave_1 [ 398.069519] protocol 88fb is buggy, dev hsr_slave_0 [ 398.074623] protocol 88fb is buggy, dev hsr_slave_1 11:09:26 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1c, 0x297ef) 11:09:26 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x101) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x9, &(0x7f0000000040)=[{0x800}, {0x80000000, 0xfffffffffffff263}, {0x9, 0x81}, {0x11b8, 0x5}, {0x1, 0xfffffffffffffffc}, {0x8, 0x7}, {0x523, 0xffffffffffffa95d}, {0x7f, 0xfffffffffffffffb}, {0x2, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:26 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:26 executing program 0: socket$inet(0x2, 0x0, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 398.612345] attempt to access beyond end of device [ 398.636903] loop4: rw=1, want=130, limit=112 [ 398.659123] attempt to access beyond end of device 11:09:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 398.715946] loop4: rw=1, want=131, limit=112 11:09:26 executing program 3: r0 = semget(0x3, 0x1, 0x0) semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 398.749761] attempt to access beyond end of device [ 398.768497] loop4: rw=1, want=132, limit=112 [ 398.787857] attempt to access beyond end of device 11:09:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf0, 0x297ef) [ 398.814552] loop4: rw=1, want=133, limit=112 [ 398.833948] attempt to access beyond end of device 11:09:26 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 398.856510] loop4: rw=1, want=142, limit=112 [ 398.874055] attempt to access beyond end of device [ 398.889466] loop4: rw=1, want=143, limit=112 11:09:26 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000001c0)={0xffffffffffffff9c}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, {0x7fffffff, 0x37ed400, 0x1f, 0xcb8, 0x4, 0x6}}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd4, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc11e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9b3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x74ad}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x194b6896}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 398.914536] attempt to access beyond end of device [ 398.941513] loop4: rw=1, want=144, limit=112 [ 398.961874] attempt to access beyond end of device [ 398.981713] loop4: rw=1, want=145, limit=112 [ 399.020564] attempt to access beyond end of device [ 399.038221] loop4: rw=1, want=2201, limit=112 11:09:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$KDMKTONE(r2, 0x4b30, 0x2) recvfrom$llc(r2, &(0x7f0000000000)=""/254, 0xfe, 0x60, &(0x7f0000000140)={0x1a, 0x102, 0xfff, 0x8001, 0x2962, 0x7f}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x3, 0x1, 0x1f003, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000002c0)) pread64(r2, &(0x7f00000003c0)=""/4096, 0x1000, 0x39) [ 399.067495] attempt to access beyond end of device [ 399.098426] loop4: rw=1, want=2230, limit=112 [ 399.121395] attempt to access beyond end of device [ 399.146205] loop4: rw=1, want=2231, limit=112 [ 399.186068] attempt to access beyond end of device [ 399.191206] loop4: rw=1, want=2232, limit=112 [ 399.198078] attempt to access beyond end of device [ 399.211892] loop4: rw=1, want=2233, limit=112 [ 399.218761] attempt to access beyond end of device [ 399.233963] loop4: rw=1, want=2254, limit=112 [ 399.244922] attempt to access beyond end of device [ 399.252290] loop4: rw=1, want=2255, limit=112 [ 399.256917] attempt to access beyond end of device [ 399.266534] loop4: rw=1, want=2256, limit=112 [ 399.274180] attempt to access beyond end of device [ 399.279232] loop4: rw=1, want=2257, limit=112 [ 399.288532] attempt to access beyond end of device [ 399.295923] loop4: rw=1, want=2306, limit=112 [ 399.305007] attempt to access beyond end of device [ 399.312302] loop4: rw=1, want=2307, limit=112 [ 399.316921] attempt to access beyond end of device [ 399.326568] loop4: rw=1, want=2308, limit=112 [ 399.333558] attempt to access beyond end of device [ 399.338574] loop4: rw=1, want=2309, limit=112 [ 399.347469] attempt to access beyond end of device [ 399.357286] loop4: rw=1, want=2318, limit=112 [ 399.372903] attempt to access beyond end of device [ 399.385178] loop4: rw=1, want=2319, limit=112 [ 399.395529] attempt to access beyond end of device [ 399.423849] loop4: rw=1, want=2320, limit=112 [ 399.428388] attempt to access beyond end of device [ 399.440587] loop4: rw=1, want=2321, limit=112 [ 399.472588] attempt to access beyond end of device [ 399.477730] loop4: rw=1, want=6417, limit=112 [ 399.492142] attempt to access beyond end of device [ 399.497184] loop4: rw=1, want=10513, limit=112 [ 399.526235] attempt to access beyond end of device [ 399.533829] loop4: rw=1, want=14609, limit=112 [ 399.558310] attempt to access beyond end of device [ 399.567388] loop4: rw=1, want=18705, limit=112 [ 399.586505] attempt to access beyond end of device [ 399.606531] loop4: rw=1, want=22801, limit=112 [ 399.636065] attempt to access beyond end of device [ 399.648973] loop4: rw=1, want=26897, limit=112 [ 399.668989] attempt to access beyond end of device [ 399.675663] loop4: rw=1, want=30993, limit=112 [ 399.692085] attempt to access beyond end of device [ 399.697037] loop4: rw=1, want=32993, limit=112 11:09:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x300, 0x297ef) 11:09:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="276b1f4f2be56803a1589c54d85fa85bf08569df7450962613b12aa0814eff64af1a6660bb4b45faa9673f934bfa1be2e345d6c661b37f4484cb0654fdd86372b322a4fa00d13ebdf05e5c86c0a3b388cc9c7355845ffd7effe5b37f586ae41ede14266551e95563b6e2f85e3c88ddfaa6f04d0a156e22fc8316f4808953631f5b4dda64241ace952a4471a3580ed86037317c6c9d3637887abd38f82385d0c2d1370c48823f6aeb268d6a7adbea437a6f79688741e9d4e4406e12aeeb882b6cc1ff623cccd447537aa769656f32d5752d5bb2", 0xd3, 0x9}], 0x100010, &(0x7f00000003c0)={[{@fmask={'fmask', 0x3d, 0x996d}}, {@case_sensitive_no='case_sensitive=no'}, {@utf8='utf8'}], [{@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmime_type]$'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\''}}, {@subj_user={'subj_user', 0x3d, '/#!.tsystem'}}, {@context={'context', 0x3d, 'root'}}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:28 executing program 0: socket$inet(0x2, 0x0, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:28 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 400.842685] attempt to access beyond end of device [ 400.847665] loop4: rw=1, want=130, limit=112 [ 400.875388] buffer_io_error: 62 callbacks suppressed [ 400.875399] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 400.896297] attempt to access beyond end of device [ 400.912639] FAT-fs (loop5): bogus number of reserved sectors 11:09:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 400.943981] FAT-fs (loop5): Can't find a valid FAT filesystem [ 400.956543] loop4: rw=1, want=131, limit=112 [ 400.985015] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 401.006066] attempt to access beyond end of device [ 401.037858] loop4: rw=1, want=132, limit=112 [ 401.057389] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 401.095667] attempt to access beyond end of device 11:09:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x500, 0x297ef) [ 401.123789] loop4: rw=1, want=133, limit=112 [ 401.168343] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 401.209899] attempt to access beyond end of device 11:09:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x1, 0xfffffffffffffffe, 0x1, 0x4, 0x7}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 401.251127] loop4: rw=1, want=142, limit=112 [ 401.292465] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 401.346070] attempt to access beyond end of device [ 401.378069] loop4: rw=1, want=143, limit=112 [ 401.439513] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 401.472485] attempt to access beyond end of device [ 401.511589] loop4: rw=1, want=144, limit=112 11:09:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 11:09:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x600, 0x297ef) 11:09:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004b40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0x3b0}], 0x1}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 401.549573] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 401.592931] attempt to access beyond end of device [ 401.611945] loop4: rw=1, want=145, limit=112 [ 401.619022] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 401.632660] attempt to access beyond end of device [ 401.637766] loop4: rw=1, want=2841, limit=112 [ 401.644410] attempt to access beyond end of device [ 401.649567] loop4: rw=1, want=2870, limit=112 [ 401.654311] Buffer I/O error on dev loop4, logical block 2869, lost async page write [ 401.662702] attempt to access beyond end of device [ 401.668566] loop4: rw=1, want=2871, limit=112 [ 401.683051] Buffer I/O error on dev loop4, logical block 2870, lost async page write 11:09:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x20080) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 11:09:29 executing program 0: socket$inet(0x2, 0x0, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 401.696918] attempt to access beyond end of device [ 401.714256] loop4: rw=1, want=2872, limit=112 [ 401.726345] attempt to access beyond end of device [ 401.738302] loop4: rw=1, want=2873, limit=112 11:09:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x700, 0x297ef) [ 401.764348] attempt to access beyond end of device [ 401.778826] loop4: rw=1, want=2894, limit=112 [ 401.787295] attempt to access beyond end of device [ 401.799320] loop4: rw=1, want=2895, limit=112 [ 401.826958] attempt to access beyond end of device [ 401.844707] loop4: rw=1, want=2896, limit=112 [ 401.849277] attempt to access beyond end of device [ 401.864931] loop4: rw=1, want=2897, limit=112 [ 401.876471] attempt to access beyond end of device [ 401.887188] loop4: rw=1, want=2946, limit=112 [ 401.896405] attempt to access beyond end of device [ 401.907125] loop4: rw=1, want=2947, limit=112 [ 401.917491] attempt to access beyond end of device [ 401.928363] loop4: rw=1, want=2948, limit=112 [ 401.939130] attempt to access beyond end of device [ 401.947038] loop4: rw=1, want=2949, limit=112 [ 401.958096] attempt to access beyond end of device [ 401.968353] loop4: rw=1, want=2958, limit=112 [ 401.978838] attempt to access beyond end of device [ 401.987897] loop4: rw=1, want=2959, limit=112 [ 402.028804] attempt to access beyond end of device [ 402.073164] loop4: rw=1, want=2960, limit=112 [ 402.089541] attempt to access beyond end of device [ 402.110411] loop4: rw=1, want=2961, limit=112 [ 402.155935] attempt to access beyond end of device [ 402.189062] loop4: rw=1, want=7057, limit=112 [ 402.226690] attempt to access beyond end of device [ 402.244835] loop4: rw=1, want=11153, limit=112 [ 402.276842] attempt to access beyond end of device [ 402.284390] loop4: rw=1, want=15249, limit=112 [ 402.307867] attempt to access beyond end of device [ 402.318898] loop4: rw=1, want=19345, limit=112 [ 402.344577] attempt to access beyond end of device [ 402.354275] loop4: rw=1, want=23441, limit=112 [ 402.377321] attempt to access beyond end of device [ 402.385006] loop4: rw=1, want=27537, limit=112 [ 402.408387] attempt to access beyond end of device [ 402.418412] loop4: rw=1, want=31633, limit=112 [ 402.436435] attempt to access beyond end of device [ 402.445020] loop4: rw=1, want=32993, limit=112 11:09:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 402.518557] FAT-fs (loop5): bogus number of reserved sectors [ 402.538798] FAT-fs (loop5): Can't find a valid FAT filesystem [ 402.849766] attempt to access beyond end of device [ 402.854738] loop0: rw=1, want=130, limit=112 [ 402.859175] attempt to access beyond end of device [ 402.867628] loop0: rw=1, want=131, limit=112 [ 402.872437] attempt to access beyond end of device [ 402.877389] loop0: rw=1, want=132, limit=112 [ 402.893718] attempt to access beyond end of device [ 402.898665] loop0: rw=1, want=133, limit=112 [ 402.908560] attempt to access beyond end of device [ 402.914786] loop0: rw=1, want=142, limit=112 [ 402.919234] attempt to access beyond end of device [ 402.929312] loop0: rw=1, want=143, limit=112 [ 402.938137] attempt to access beyond end of device [ 402.948276] loop0: rw=1, want=144, limit=112 [ 402.954224] attempt to access beyond end of device [ 402.959166] loop0: rw=1, want=145, limit=112 [ 402.978357] attempt to access beyond end of device [ 402.983366] loop0: rw=1, want=4241, limit=112 [ 402.994573] attempt to access beyond end of device [ 402.999562] loop0: rw=1, want=8337, limit=112 [ 403.008334] attempt to access beyond end of device [ 403.013313] loop0: rw=1, want=12433, limit=112 [ 403.024833] attempt to access beyond end of device [ 403.029799] loop0: rw=1, want=16529, limit=112 [ 403.038620] attempt to access beyond end of device [ 403.043607] loop0: rw=1, want=20625, limit=112 [ 403.055611] attempt to access beyond end of device [ 403.060586] loop0: rw=1, want=24721, limit=112 [ 403.066681] attempt to access beyond end of device [ 403.071674] loop0: rw=1, want=24897, limit=112 [ 403.829453] net_ratelimit: 26 callbacks suppressed [ 403.829463] protocol 88fb is buggy, dev hsr_slave_0 [ 403.839579] protocol 88fb is buggy, dev hsr_slave_1 [ 403.844699] protocol 88fb is buggy, dev hsr_slave_0 [ 403.849804] protocol 88fb is buggy, dev hsr_slave_1 [ 403.854926] protocol 88fb is buggy, dev hsr_slave_0 [ 403.860029] protocol 88fb is buggy, dev hsr_slave_1 [ 403.865161] protocol 88fb is buggy, dev hsr_slave_0 [ 403.870260] protocol 88fb is buggy, dev hsr_slave_1 11:09:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) bind$netrom(r2, &(0x7f0000000000)={{0x3, @null, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2000) 11:09:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x900, 0x297ef) 11:09:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03000e1f0000856bff01000000"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) unlink(&(0x7f0000000100)='./bus\x00') ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000400)=0x100000) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f0000000340)="d5931c0f25bc56f6a076d847c648648875b195a9f52ecc21ce7bc1ed25955ac0d3765838d3265892e211f567e1907ab49ee5", 0x32) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) lstat(0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) 11:09:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:09:32 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 404.051887] attempt to access beyond end of device [ 404.056888] loop4: rw=1, want=130, limit=112 [ 404.071762] attempt to access beyond end of device [ 404.078407] loop4: rw=1, want=131, limit=112 [ 404.113403] attempt to access beyond end of device [ 404.120130] FAT-fs (loop5): bogus number of reserved sectors [ 404.135389] loop4: rw=1, want=132, limit=112 [ 404.149611] FAT-fs (loop5): Can't find a valid FAT filesystem 11:09:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'hwsim0\x00', {0x2, 0x4e20, @loopback}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 404.182079] attempt to access beyond end of device [ 404.197515] loop4: rw=1, want=133, limit=112 11:09:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 404.272676] attempt to access beyond end of device [ 404.285101] loop4: rw=1, want=142, limit=112 [ 404.292242] attempt to access beyond end of device [ 404.305814] loop4: rw=1, want=143, limit=112 11:09:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xa00, 0x297ef) [ 404.319496] protocol 88fb is buggy, dev hsr_slave_0 [ 404.324590] protocol 88fb is buggy, dev hsr_slave_1 [ 404.327480] attempt to access beyond end of device [ 404.338206] loop4: rw=1, want=144, limit=112 [ 404.362930] attempt to access beyond end of device [ 404.370676] loop4: rw=1, want=145, limit=112 [ 404.388735] FAT-fs (loop5): bogus number of reserved sectors [ 404.412436] FAT-fs (loop5): Can't find a valid FAT filesystem [ 404.425044] attempt to access beyond end of device [ 404.444172] loop4: rw=1, want=4241, limit=112 11:09:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 404.490611] attempt to access beyond end of device 11:09:32 executing program 3: r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xdf17, 0x400) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66bad004ed48b800800000000000000f23c00f21f83503000c000f23f80f00d266b840000f00d866ba6100b000ee66b846008ed046da7749c7442400e3000000c7442402cd000000c7442406000000000f011424b9130a00000f32470f01c9", 0x5f}], 0x1, 0x11, &(0x7f0000000240), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) accept4$netrom(r0, &(0x7f00000003c0)={{0x3, @netrom}, [@rose, @rose, @null, @default, @netrom, @bcast, @bcast, @null]}, &(0x7f0000000240)=0x48, 0x80800) socket$can_bcm(0x1d, 0x2, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000080)={0x0, 0x1000, 0x6, &(0x7f0000000040)=0x947}) prctl$PR_SET_PDEATHSIG(0x1, 0xd) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f00000002c0)=""/208) [ 404.521630] loop4: rw=1, want=4825, limit=112 [ 404.550301] attempt to access beyond end of device [ 404.577043] loop4: rw=1, want=4854, limit=112 [ 404.595462] attempt to access beyond end of device [ 404.612027] loop4: rw=1, want=4855, limit=112 11:09:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb00, 0x297ef) [ 404.633386] attempt to access beyond end of device [ 404.649857] loop4: rw=1, want=4856, limit=112 [ 404.660844] FAT-fs (loop5): bogus number of reserved sectors [ 404.666692] FAT-fs (loop5): Can't find a valid FAT filesystem [ 404.673941] attempt to access beyond end of device [ 404.723175] loop4: rw=1, want=4857, limit=112 [ 404.750796] attempt to access beyond end of device [ 404.773530] loop4: rw=1, want=4878, limit=112 [ 404.789255] attempt to access beyond end of device [ 404.807509] loop4: rw=1, want=4879, limit=112 [ 404.830994] attempt to access beyond end of device [ 404.858412] loop4: rw=1, want=4880, limit=112 [ 404.879875] attempt to access beyond end of device [ 404.884924] loop4: rw=1, want=4881, limit=112 [ 404.939554] attempt to access beyond end of device [ 404.944537] loop4: rw=1, want=4930, limit=112 [ 404.956399] attempt to access beyond end of device [ 404.967929] loop4: rw=1, want=4931, limit=112 [ 404.976740] attempt to access beyond end of device [ 404.987597] loop4: rw=1, want=4932, limit=112 [ 404.993006] attempt to access beyond end of device [ 404.998038] loop4: rw=1, want=4933, limit=112 [ 405.009336] attempt to access beyond end of device [ 405.014764] loop4: rw=1, want=4942, limit=112 [ 405.029074] attempt to access beyond end of device [ 405.034189] attempt to access beyond end of device [ 405.039147] loop4: rw=1, want=4943, limit=112 [ 405.043591] loop0: rw=1, want=130, limit=112 [ 405.044142] attempt to access beyond end of device [ 405.053349] loop4: rw=1, want=4944, limit=112 [ 405.057946] attempt to access beyond end of device [ 405.058063] attempt to access beyond end of device [ 405.063504] loop4: rw=1, want=4945, limit=112 [ 405.070896] loop0: rw=1, want=131, limit=112 [ 405.077379] attempt to access beyond end of device [ 405.081635] attempt to access beyond end of device [ 405.086574] loop0: rw=1, want=132, limit=112 [ 405.089047] loop4: rw=1, want=9041, limit=112 [ 405.096077] attempt to access beyond end of device [ 405.105763] loop0: rw=1, want=133, limit=112 [ 405.106436] attempt to access beyond end of device [ 405.116007] attempt to access beyond end of device [ 405.123443] loop4: rw=1, want=13137, limit=112 [ 405.135652] loop0: rw=1, want=142, limit=112 [ 405.147435] attempt to access beyond end of device [ 405.149632] attempt to access beyond end of device [ 405.155315] loop4: rw=1, want=17233, limit=112 [ 405.158124] loop0: rw=1, want=143, limit=112 [ 405.166516] attempt to access beyond end of device [ 405.171913] loop0: rw=1, want=144, limit=112 [ 405.176151] attempt to access beyond end of device [ 405.176351] attempt to access beyond end of device [ 405.186336] loop0: rw=1, want=145, limit=112 [ 405.187152] loop4: rw=1, want=21329, limit=112 [ 405.197498] attempt to access beyond end of device [ 405.202501] loop0: rw=1, want=4241, limit=112 [ 405.210595] attempt to access beyond end of device [ 405.211347] attempt to access beyond end of device [ 405.215548] loop4: rw=1, want=25425, limit=112 [ 405.220538] loop0: rw=1, want=5305, limit=112 [ 405.238234] attempt to access beyond end of device [ 405.243263] loop4: rw=1, want=29521, limit=112 [ 405.255476] attempt to access beyond end of device [ 405.260467] loop4: rw=1, want=32993, limit=112 11:09:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) 11:09:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="03000e1f0000856bff01000000"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) unlink(&(0x7f0000000100)='./bus\x00') ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000400)=0x100000) keyctl$update(0x2, 0x0, &(0x7f0000000340)="d5931c0f25bc56f6a076d847c648648875b195a9f52ecc21ce7bc1ed25955ac0d3765838d3265892e211f567e1907a", 0x2f) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x0, 0x0, 0x9, 0x5, 0x0, 0x1, 0x30, 0xf, 0xe000000000, 0xe60, 0x8, 0x0, 0x41c9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x2091, 0x0, 0x0, 0x81, 0x100000001, 0x0, 0x8001, 0x9, 0x1f, 0x0, 0xffffffffffff534f, 0xaa63, 0x0, 0x9, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0xfffffffffffffffd, 0x0, 0xb, 0x4, 0xff, 0x8}, 0x0, 0x0, r0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) 11:09:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = dup(r1) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x9, 0xe83, 0xffff, 0x800}, {0x8, 0x2, 0x459d, 0x4}, {0xfffffffffffff801, 0x9, 0x7ff, 0x4}, {0x8291, 0x8, 0x4, 0x100000000}, {0x42c, 0x1, 0xec2, 0x9}, {0x77, 0x1, 0x8c8}, {0x8, 0x2441291c, 0x10001, 0x89}, {0xffff, 0x5d5e, 0x3, 0x7}]}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0xfffffffffffffffa, 0x7, 0x8, 0xb3d, 0x100000001, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:34 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb8e, 0x297ef) 11:09:34 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 406.356833] attempt to access beyond end of device [ 406.387453] loop4: rw=1, want=130, limit=112 [ 406.421455] buffer_io_error: 54 callbacks suppressed [ 406.421477] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 406.448590] FAT-fs (loop5): bogus number of reserved sectors [ 406.492502] FAT-fs (loop5): Can't find a valid FAT filesystem [ 406.537435] attempt to access beyond end of device 11:09:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc00, 0x297ef) [ 406.580689] loop4: rw=1, want=131, limit=112 [ 406.626915] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 406.703656] attempt to access beyond end of device 11:09:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read(r0, &(0x7f0000000000)=""/203, 0xcb) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 406.738197] loop4: rw=1, want=132, limit=112 [ 406.772179] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 406.795362] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 406.825865] attempt to access beyond end of device [ 406.839855] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 406.857603] loop4: rw=1, want=133, limit=112 [ 406.879508] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 406.893587] FAT-fs (loop2): Filesystem has been set read-only [ 406.926703] attempt to access beyond end of device [ 406.942176] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 11:09:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000015580)={&(0x7f0000012fc0)=@can, 0x80, &(0x7f0000015500)=[{0x0}, {&(0x7f0000014140)=""/216, 0xd8}, {&(0x7f0000014240)=""/68, 0x44}, {&(0x7f00000142c0)=""/199, 0xc7}, {0x0}, {&(0x7f0000014500)=""/4096, 0x1000}], 0x6}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\xf4\xb8\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xa71o\xcc\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\a/\xf6\x1f\a]\xd9PJ@\x94 \x9f\x15\x7fVu\xf5\x8d\xf88\x95i\xd9E\x96\x86x\x87\xf7e<\xfdt$x95\xba\xe4C#R\xe1\xe4\xa8', 0x2761, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x8, 0x100000000000000, 0x2, 0x0, 0x0, 0x0, 0x62140, 0x8, 0x10001, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x9, 0x0, 0x0, 0xe5c, 0x0, 0x2, 0x1, 0x3fe0000000, 0x0, 0xb3, 0x0, 0x0, 0x6b34, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x20, 0x1, 0x7fffffff, 0x1, 0x6, 0x0, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000040)={0x7, 0x1, 0x80000001}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x81600}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x237, &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffff07}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000380)={{0x6, 0x9a8, 0x80000001, 0x8, 0x9, 0x9}, 0x7f, 0x1, 0x6, 0x200, 0x3, "256b6a6f3273be3166887a33309b535f8aba39100ea1f7096a5e0fae9f28e4f55d6ca091ed2c79c082d8431f6a3bb26a5405c3b1adcfeebc2acaf3416f4dd84c41fae3c49aba7f45517f76a2c30e3f22412d29d6a24a49d215a471fd810c92d168e2dbf8200cececfa17606f0f7fceecbd96956c5ad589e74ff276e6f110af5c"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x21, 0x3, 0xa3}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000240)={0x20, 0x8, [0x4, 0x5a35fd23]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 406.967483] loop4: rw=1, want=142, limit=112 11:09:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xd00, 0x297ef) [ 406.992984] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 407.045423] attempt to access beyond end of device [ 407.070887] loop4: rw=1, want=143, limit=112 [ 407.082868] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 407.104213] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 407.167533] attempt to access beyond end of device [ 407.219011] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 11:09:35 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 407.262846] loop4: rw=1, want=144, limit=112 [ 407.267282] Buffer I/O error on dev loop4, logical block 143, lost async page write 11:09:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 407.323976] attempt to access beyond end of device [ 407.327084] attempt to access beyond end of device [ 407.333732] loop4: rw=1, want=145, limit=112 [ 407.339169] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 407.381510] loop0: rw=1, want=130, limit=112 [ 407.385906] attempt to access beyond end of device [ 407.385986] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 407.414149] loop4: rw=1, want=4241, limit=112 [ 407.414960] attempt to access beyond end of device [ 407.428488] attempt to access beyond end of device [ 407.430756] loop0: rw=1, want=131, limit=112 [ 407.438015] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 407.446564] attempt to access beyond end of device [ 407.456577] loop0: rw=1, want=132, limit=112 [ 407.461481] attempt to access beyond end of device [ 407.466562] loop0: rw=1, want=133, limit=112 [ 407.471946] attempt to access beyond end of device [ 407.475797] loop4: rw=1, want=4697, limit=112 [ 407.477007] loop0: rw=1, want=142, limit=112 [ 407.483714] attempt to access beyond end of device [ 407.492267] attempt to access beyond end of device [ 407.498293] loop4: rw=1, want=4726, limit=112 [ 407.509336] loop0: rw=1, want=143, limit=112 [ 407.509847] attempt to access beyond end of device [ 407.516199] FAT-fs (loop5): bogus number of reserved sectors [ 407.519455] loop4: rw=1, want=4727, limit=112 [ 407.525711] FAT-fs (loop5): Can't find a valid FAT filesystem [ 407.537508] attempt to access beyond end of device [ 407.542055] attempt to access beyond end of device [ 407.547529] loop4: rw=1, want=4728, limit=112 [ 407.554573] attempt to access beyond end of device [ 407.564857] loop4: rw=1, want=4729, limit=112 [ 407.567563] loop0: rw=1, want=144, limit=112 [ 407.574420] attempt to access beyond end of device [ 407.580421] loop0: rw=1, want=145, limit=112 [ 407.589628] attempt to access beyond end of device [ 407.598208] attempt to access beyond end of device [ 407.599237] loop4: rw=1, want=4750, limit=112 [ 407.606627] loop0: rw=1, want=4241, limit=112 [ 407.613467] attempt to access beyond end of device [ 407.618414] loop4: rw=1, want=4751, limit=112 [ 407.624063] attempt to access beyond end of device [ 407.629097] loop4: rw=1, want=4752, limit=112 [ 407.641455] attempt to access beyond end of device [ 407.646485] loop0: rw=1, want=8337, limit=112 [ 407.657818] attempt to access beyond end of device [ 407.676386] attempt to access beyond end of device [ 407.676706] loop4: rw=1, want=4753, limit=112 [ 407.686015] loop0: rw=1, want=12433, limit=112 [ 407.696517] attempt to access beyond end of device [ 407.701549] loop4: rw=1, want=4802, limit=112 [ 407.704247] attempt to access beyond end of device [ 407.706090] attempt to access beyond end of device [ 407.711571] loop0: rw=1, want=16529, limit=112 [ 407.719498] loop4: rw=1, want=4803, limit=112 [ 407.725329] attempt to access beyond end of device [ 407.728706] attempt to access beyond end of device [ 407.735232] loop4: rw=1, want=4804, limit=112 [ 407.736186] loop0: rw=1, want=20625, limit=112 [ 407.745217] attempt to access beyond end of device [ 407.753997] attempt to access beyond end of device [ 407.756223] loop4: rw=1, want=4805, limit=112 [ 407.772018] loop0: rw=1, want=21209, limit=112 [ 407.783019] attempt to access beyond end of device [ 407.787999] loop4: rw=1, want=4814, limit=112 [ 407.798437] attempt to access beyond end of device [ 407.803501] loop4: rw=1, want=4815, limit=112 [ 407.808151] attempt to access beyond end of device [ 407.813691] loop4: rw=1, want=4816, limit=112 [ 407.818224] attempt to access beyond end of device [ 407.823239] loop4: rw=1, want=4817, limit=112 [ 407.846882] attempt to access beyond end of device [ 407.857848] loop4: rw=1, want=8913, limit=112 [ 407.877952] attempt to access beyond end of device [ 407.883013] loop4: rw=1, want=13009, limit=112 [ 407.901875] attempt to access beyond end of device [ 407.906820] loop4: rw=1, want=17105, limit=112 [ 407.928908] attempt to access beyond end of device [ 407.939970] loop4: rw=1, want=21201, limit=112 [ 407.958459] attempt to access beyond end of device [ 407.964521] loop4: rw=1, want=25297, limit=112 [ 407.977390] attempt to access beyond end of device [ 407.982383] loop4: rw=1, want=29393, limit=112 [ 407.992259] attempt to access beyond end of device [ 407.997206] loop4: rw=1, want=32993, limit=112 [ 409.286879] attempt to access beyond end of device [ 409.319481] loop0: rw=1, want=130, limit=112 [ 409.323962] attempt to access beyond end of device [ 409.328907] loop0: rw=1, want=131, limit=112 [ 409.354210] attempt to access beyond end of device [ 409.359322] loop0: rw=1, want=132, limit=112 [ 409.367447] attempt to access beyond end of device [ 409.376739] loop0: rw=1, want=133, limit=112 [ 409.385395] attempt to access beyond end of device [ 409.395797] loop0: rw=1, want=142, limit=112 [ 409.404184] attempt to access beyond end of device [ 409.409271] loop0: rw=1, want=143, limit=112 [ 409.417863] attempt to access beyond end of device [ 409.427064] loop0: rw=1, want=144, limit=112 [ 409.436952] attempt to access beyond end of device [ 409.465782] loop0: rw=1, want=145, limit=112 [ 409.477191] attempt to access beyond end of device [ 409.488632] loop0: rw=1, want=4241, limit=112 [ 409.508848] attempt to access beyond end of device 11:09:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xe00, 0x297ef) 11:09:37 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:37 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x80400) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffffe, 0x7}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='keyringposix_acl_accessselinux\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='/dev/midi#\x00', r3) 11:09:37 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:09:37 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 409.513935] loop0: rw=1, want=8337, limit=112 [ 409.535369] attempt to access beyond end of device [ 409.542199] loop0: rw=1, want=12433, limit=112 [ 409.555419] attempt to access beyond end of device [ 409.560420] loop0: rw=1, want=16529, limit=112 [ 409.599334] attempt to access beyond end of device [ 409.601912] attempt to access beyond end of device [ 409.604482] loop4: rw=1, want=130, limit=112 [ 409.604523] attempt to access beyond end of device [ 409.604534] loop4: rw=1, want=131, limit=112 [ 409.604564] attempt to access beyond end of device [ 409.610027] loop0: rw=1, want=20625, limit=112 [ 409.629305] loop4: rw=1, want=132, limit=112 [ 409.644447] attempt to access beyond end of device [ 409.650163] loop0: rw=1, want=24721, limit=112 [ 409.660255] attempt to access beyond end of device [ 409.665209] loop4: rw=1, want=133, limit=112 [ 409.670574] attempt to access beyond end of device [ 409.682951] loop0: rw=1, want=28817, limit=112 [ 409.691258] attempt to access beyond end of device [ 409.708087] loop4: rw=1, want=142, limit=112 [ 409.717546] attempt to access beyond end of device [ 409.719130] FAT-fs (loop5): bogus number of reserved sectors [ 409.724690] attempt to access beyond end of device [ 409.737290] loop4: rw=1, want=143, limit=112 [ 409.748017] attempt to access beyond end of device 11:09:37 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x551000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180)=0x2, 0x4) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x8, 0x6, "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", 0x95, 0x8, 0x10001, 0x46, 0x2, 0x8, 0x1ff}, r1}}, 0x120) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x10200, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 409.755887] FAT-fs (loop5): Can't find a valid FAT filesystem [ 409.761883] loop0: rw=1, want=32889, limit=112 [ 409.775750] loop4: rw=1, want=144, limit=112 [ 409.789989] attempt to access beyond end of device [ 409.806696] loop4: rw=1, want=145, limit=112 [ 409.836366] attempt to access beyond end of device 11:09:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf00, 0x297ef) [ 409.860047] loop4: rw=1, want=4241, limit=112 11:09:37 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x404000, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0x5, 0x80000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 409.922705] attempt to access beyond end of device [ 409.937143] loop4: rw=1, want=8337, limit=112 [ 409.985929] attempt to access beyond end of device 11:09:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001300)={r3, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, [0x3, 0x81, 0x3, 0x84, 0x6, 0xeb, 0x3, 0x1, 0x6ca, 0x8000, 0x4, 0x96, 0x3, 0x8, 0x8]}, &(0x7f0000000080)=0x100) [ 410.030214] loop4: rw=1, want=12433, limit=112 [ 410.069439] net_ratelimit: 26 callbacks suppressed [ 410.069447] protocol 88fb is buggy, dev hsr_slave_0 [ 410.076941] attempt to access beyond end of device [ 410.079503] protocol 88fb is buggy, dev hsr_slave_1 [ 410.087977] FAT-fs (loop5): bogus number of reserved sectors [ 410.089556] protocol 88fb is buggy, dev hsr_slave_0 [ 410.100417] protocol 88fb is buggy, dev hsr_slave_1 [ 410.105544] protocol 88fb is buggy, dev hsr_slave_0 [ 410.110654] protocol 88fb is buggy, dev hsr_slave_1 [ 410.113163] FAT-fs (loop5): Can't find a valid FAT filesystem [ 410.115822] protocol 88fb is buggy, dev hsr_slave_0 [ 410.122992] loop4: rw=1, want=16529, limit=112 [ 410.126726] protocol 88fb is buggy, dev hsr_slave_1 11:09:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x2000000000000004, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 410.204682] attempt to access beyond end of device [ 410.220088] loop4: rw=1, want=20625, limit=112 11:09:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1100, 0x297ef) [ 410.260483] attempt to access beyond end of device [ 410.280860] loop4: rw=1, want=23129, limit=112 [ 410.298414] attempt to access beyond end of device [ 410.334156] loop4: rw=1, want=23158, limit=112 [ 410.341767] attempt to access beyond end of device [ 410.346727] loop4: rw=1, want=23159, limit=112 [ 410.366067] attempt to access beyond end of device [ 410.373703] loop4: rw=1, want=23160, limit=112 [ 410.397231] attempt to access beyond end of device [ 410.407040] loop4: rw=1, want=23161, limit=112 [ 410.419024] attempt to access beyond end of device [ 410.442300] loop4: rw=1, want=23182, limit=112 [ 410.446944] attempt to access beyond end of device [ 410.474153] loop4: rw=1, want=23183, limit=112 [ 410.478778] attempt to access beyond end of device [ 410.486440] loop4: rw=1, want=23184, limit=112 [ 410.502728] attempt to access beyond end of device [ 410.507676] loop4: rw=1, want=23185, limit=112 [ 410.516138] attempt to access beyond end of device [ 410.524004] loop4: rw=1, want=23234, limit=112 [ 410.528632] attempt to access beyond end of device [ 410.545219] loop4: rw=1, want=23235, limit=112 [ 410.556127] attempt to access beyond end of device [ 410.559506] protocol 88fb is buggy, dev hsr_slave_0 [ 410.566222] protocol 88fb is buggy, dev hsr_slave_1 [ 410.579729] loop4: rw=1, want=23236, limit=112 [ 410.584357] attempt to access beyond end of device [ 410.593342] loop4: rw=1, want=23237, limit=112 [ 410.597985] attempt to access beyond end of device [ 410.604270] loop4: rw=1, want=23246, limit=112 [ 410.608974] attempt to access beyond end of device [ 410.614511] loop4: rw=1, want=23247, limit=112 [ 410.619231] attempt to access beyond end of device [ 410.626798] loop4: rw=1, want=23248, limit=112 [ 410.632443] attempt to access beyond end of device [ 410.637404] loop4: rw=1, want=23249, limit=112 [ 410.675669] attempt to access beyond end of device [ 410.691136] loop4: rw=1, want=27345, limit=112 [ 410.704209] attempt to access beyond end of device [ 410.709171] loop4: rw=1, want=30505, limit=112 [ 411.190229] attempt to access beyond end of device [ 411.195218] loop1: rw=1048577, want=34537, limit=112 [ 411.500556] attempt to access beyond end of device [ 411.505687] loop0: rw=1, want=130, limit=112 [ 411.510266] buffer_io_error: 54 callbacks suppressed [ 411.510277] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 411.551187] attempt to access beyond end of device [ 411.556166] loop0: rw=1, want=131, limit=112 [ 411.576705] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 411.584834] attempt to access beyond end of device [ 411.598952] loop0: rw=1, want=132, limit=112 [ 411.603675] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 411.621912] attempt to access beyond end of device [ 411.627081] loop0: rw=1, want=133, limit=112 [ 411.638844] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 411.647084] attempt to access beyond end of device [ 411.659504] loop0: rw=1, want=142, limit=112 [ 411.664220] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 411.679754] attempt to access beyond end of device [ 411.685188] loop0: rw=1, want=143, limit=112 [ 411.695971] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 411.706637] attempt to access beyond end of device [ 411.717745] loop0: rw=1, want=144, limit=112 [ 411.723910] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 411.737945] attempt to access beyond end of device [ 411.744652] loop0: rw=1, want=145, limit=112 [ 411.749242] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 411.772639] attempt to access beyond end of device [ 411.777732] loop0: rw=1, want=4241, limit=112 [ 411.800015] attempt to access beyond end of device [ 411.805157] loop0: rw=1, want=8337, limit=112 [ 411.827200] attempt to access beyond end of device [ 411.840359] loop0: rw=1, want=12433, limit=112 [ 411.862524] attempt to access beyond end of device [ 411.867616] loop0: rw=1, want=16529, limit=112 [ 411.896415] attempt to access beyond end of device [ 411.902807] loop0: rw=1, want=20625, limit=112 [ 411.925100] attempt to access beyond end of device [ 411.936176] loop0: rw=1, want=24721, limit=112 [ 411.958449] attempt to access beyond end of device [ 411.965037] loop0: rw=1, want=28817, limit=112 [ 411.987019] attempt to access beyond end of device [ 411.998955] loop0: rw=1, want=32889, limit=112 11:09:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 11:09:40 executing program 3: r0 = getuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000740)='.\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000900)=0xe8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f0000000600)=[{&(0x7f0000000080)="05173cfb2e001fce60e88cb4a45a6efaf9af801880ff3c5b6216a1589aaf100394b7e92593fa635e00565f3ac21c26e87c7bf771958572879c9bf7b3fca3c93eb3b4fdc6a845ecc4c3e9b9d05923c75ef6ad1c0a5803ba9cb0d7cad2e4a2fe896c118b542c5eea8d", 0x68, 0x5}, {&(0x7f00000001c0)="5486189fdff2be2ef95024af064ad901995c0165074bfa4c8be7289a498ffbe4db1b00caa2ff45b846f1633ee216b64f6085bcd45d1ccf7f88e97e20ebf7be3069eada4607e21a6c6a0895a8737688124edc8479f43716442cfb0370ae2e3e8ce300254195fce460888c76c914d69ebb067fe3fbc39de561b4908429e044ce27ae5c58c6a845deb18dabfb703b1ede7b4f39d6", 0x93, 0xd5}, {&(0x7f00000002c0)="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", 0xfb, 0x8}, {&(0x7f00000003c0)="9d8176da5250697bb0729aba3ef4d74266e2c274c805167f6ca5907083d547d4ab5070bcb4f79acbae61873b8444802e236f6a88e64b9a65f0b5f8a8a7ce3cc4cae06371954cb7832cbede4908222919a4a48db4ced0908dcc44ebe88624b8d65e4d905c2a9c8e65723913b6a4682508043204905f95cc767e8882656cbb92f01f799d633e798a4aba99f65b1085a778430e880f290589abd769e327059777c93bec9babb45e6110c43e9cafce", 0xad, 0x10001}, {&(0x7f0000000480)="cd6f86be9ff77e603ba74b033883a3f2dd1672a6abb1c7502e53bb86ea841e6ca0058c8cc64ab5bf9b70baa0f8e20e41ab1eb870b3ebcac36af689a0ee03b706c917f2b87f59c78f53023a6e5267968d8e5cd2e975def5db8573bfec5efb54478880c0dd6e9d2bed2316ce4ae2e7b65d01fae0f432073a98ace58fb2cf53b87794", 0x81, 0xfffffffffffffffb}, {&(0x7f0000000540)="4e55d2cbc34f8e9079177d61f418e3ed1a40191a3a2bfd41d949fb7304443517a96170c32cc6884c886185d51273122d7b12c5044ce6cfb3b820fe2e0b1f9b46fb6b907e4a949077e2eeff966bbe9e53e1f4d48fd75045da5448610469054370e300e0a15d71b5b2ff36d763533b8187cb60e7961eb91a943fc26441ac3b27f78e1fed0866ee389d", 0x88, 0xfffffffffffff800}], 0x8, &(0x7f0000000940)={[{@quiet='quiet'}, {@uid={'uid', 0x3d, r0}}, {@gid={'gid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}, {@umask={'umask', 0x3d, 0x1ff}}, {@uid={'uid', 0x3d, r3}}, {@codepage={'codepage', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}], [{@fsmagic={'fsmagic', 0x3d, 0x7f}}, {@measure='measure'}, {@fsname={'fsname', 0x3d, '/\x86^}'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@audit='audit'}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1200, 0x297ef) 11:09:40 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:40 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 412.176251] attempt to access beyond end of device [ 412.236741] loop4: rw=1, want=130, limit=112 [ 412.249545] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 412.262614] FAT-fs (loop5): bogus number of reserved sectors [ 412.281594] attempt to access beyond end of device 11:09:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1300, 0x297ef) [ 412.287426] FAT-fs (loop5): Can't find a valid FAT filesystem [ 412.302070] loop4: rw=1, want=131, limit=112 [ 412.317075] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 412.348517] attempt to access beyond end of device [ 412.368814] loop4: rw=1, want=132, limit=112 [ 412.387670] attempt to access beyond end of device [ 412.396946] loop4: rw=1, want=133, limit=112 [ 412.409658] attempt to access beyond end of device [ 412.414740] loop4: rw=1, want=142, limit=112 [ 412.422953] attempt to access beyond end of device [ 412.439612] loop4: rw=1, want=143, limit=112 [ 412.448072] attempt to access beyond end of device [ 412.460888] loop4: rw=1, want=144, limit=112 11:09:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x402402, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x12c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x118, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4079}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000001c0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xffffffffbfffffff, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) [ 412.472294] attempt to access beyond end of device [ 412.484348] loop4: rw=1, want=145, limit=112 [ 412.528705] attempt to access beyond end of device [ 412.554656] loop4: rw=1, want=4241, limit=112 [ 412.586595] attempt to access beyond end of device 11:09:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) accept4$x25(r2, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x44080, 0x0) [ 412.615666] FAT-fs (loop5): bogus number of reserved sectors [ 412.636197] FAT-fs (loop5): Can't find a valid FAT filesystem [ 412.644806] loop4: rw=1, want=7129, limit=112 11:09:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1400, 0x297ef) [ 412.675574] attempt to access beyond end of device [ 412.698565] loop4: rw=1, want=7158, limit=112 [ 412.716322] attempt to access beyond end of device [ 412.732390] loop4: rw=1, want=7159, limit=112 [ 412.756897] attempt to access beyond end of device [ 412.774572] loop4: rw=1, want=7160, limit=112 [ 412.797983] attempt to access beyond end of device [ 412.815934] loop4: rw=1, want=7161, limit=112 [ 412.820929] attempt to access beyond end of device [ 412.826233] loop4: rw=1, want=7182, limit=112 [ 412.831245] attempt to access beyond end of device [ 412.836465] loop4: rw=1, want=7183, limit=112 [ 412.841636] attempt to access beyond end of device [ 412.846887] loop4: rw=1, want=7184, limit=112 [ 412.873702] attempt to access beyond end of device [ 412.885961] loop4: rw=1, want=7185, limit=112 [ 412.895150] attempt to access beyond end of device [ 412.900505] loop4: rw=1, want=7234, limit=112 [ 412.910775] attempt to access beyond end of device [ 412.935669] loop4: rw=1, want=7235, limit=112 [ 412.951043] attempt to access beyond end of device [ 412.967593] loop4: rw=1, want=7236, limit=112 [ 412.982300] attempt to access beyond end of device [ 413.001048] loop4: rw=1, want=7237, limit=112 [ 413.005730] attempt to access beyond end of device [ 413.017936] loop4: rw=1, want=7246, limit=112 [ 413.042276] attempt to access beyond end of device [ 413.053059] loop4: rw=1, want=7247, limit=112 [ 413.062399] attempt to access beyond end of device [ 413.072135] loop4: rw=1, want=7248, limit=112 [ 413.082578] attempt to access beyond end of device [ 413.099440] loop4: rw=1, want=7249, limit=112 [ 413.124147] attempt to access beyond end of device [ 413.132837] loop4: rw=1, want=11345, limit=112 [ 413.151277] attempt to access beyond end of device [ 413.156408] loop4: rw=1, want=15441, limit=112 [ 413.208536] attempt to access beyond end of device [ 413.218239] loop4: rw=1, want=19537, limit=112 [ 413.287228] attempt to access beyond end of device [ 413.302580] loop4: rw=1, want=23633, limit=112 [ 413.320393] attempt to access beyond end of device [ 413.325479] loop4: rw=1, want=25961, limit=112 [ 413.692274] attempt to access beyond end of device [ 413.697244] loop0: rw=1, want=130, limit=112 [ 413.715474] attempt to access beyond end of device [ 413.724634] loop0: rw=1, want=131, limit=112 [ 413.729094] attempt to access beyond end of device [ 413.736152] loop0: rw=1, want=132, limit=112 [ 413.740793] attempt to access beyond end of device [ 413.746057] loop0: rw=1, want=133, limit=112 [ 413.754522] attempt to access beyond end of device [ 413.764255] loop0: rw=1, want=142, limit=112 [ 413.768920] attempt to access beyond end of device [ 413.776027] loop0: rw=1, want=143, limit=112 [ 413.781325] attempt to access beyond end of device [ 413.786539] loop0: rw=1, want=144, limit=112 [ 413.792319] attempt to access beyond end of device [ 413.799058] loop0: rw=1, want=145, limit=112 [ 413.811766] attempt to access beyond end of device [ 413.816818] loop0: rw=1, want=4241, limit=112 [ 413.831568] attempt to access beyond end of device [ 413.836613] loop0: rw=1, want=8337, limit=112 [ 413.857367] attempt to access beyond end of device [ 413.862427] loop0: rw=1, want=12433, limit=112 [ 413.877242] attempt to access beyond end of device [ 413.882343] loop0: rw=1, want=16529, limit=112 [ 413.896916] attempt to access beyond end of device [ 413.901999] loop0: rw=1, want=20625, limit=112 [ 413.916721] attempt to access beyond end of device [ 413.921833] loop0: rw=1, want=24721, limit=112 [ 413.936395] attempt to access beyond end of device [ 413.941638] loop0: rw=1, want=28817, limit=112 [ 413.953864] attempt to access beyond end of device [ 413.958919] loop0: rw=1, want=31385, limit=112 11:09:42 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x0, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:42 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x100001, 0x40000000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1500, 0x297ef) 11:09:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 11:09:42 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:42 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 414.388438] FAT-fs (loop5): bogus number of reserved sectors [ 414.398732] FAT-fs (loop5): Can't find a valid FAT filesystem 11:09:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x6, 0x57}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x42040) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:09:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) 11:09:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1600, 0x297ef) 11:09:42 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='children\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(r0, 0x7, &(0x7f0000000040)=0xffff) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 414.732339] FAT-fs (loop5): bogus number of reserved sectors [ 414.744092] FAT-fs (loop5): Can't find a valid FAT filesystem 11:09:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0) write$selinux_attr(r2, &(0x7f0000000140)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r4 = semget(0x1, 0x3, 0x3fd) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000080)=""/30) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0xc8, 0x8e}) write$P9_RATTACH(r3, &(0x7f0000000180)={0x14, 0x69, 0x2, {0x80, 0x4, 0x2}}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) [ 415.155163] FAT-fs (loop5): bogus number of reserved sectors [ 415.182075] FAT-fs (loop5): Can't find a valid FAT filesystem [ 415.282199] attempt to access beyond end of device [ 415.287550] loop0: rw=1, want=130, limit=112 [ 415.302556] attempt to access beyond end of device [ 415.320652] loop0: rw=1, want=131, limit=112 [ 415.337822] attempt to access beyond end of device [ 415.355461] loop0: rw=1, want=132, limit=112 [ 415.370753] attempt to access beyond end of device [ 415.386212] loop0: rw=1, want=133, limit=112 [ 415.404966] attempt to access beyond end of device [ 415.426627] loop0: rw=1, want=142, limit=112 [ 415.441306] attempt to access beyond end of device [ 415.446490] loop0: rw=1, want=143, limit=112 [ 415.457453] attempt to access beyond end of device [ 415.464350] loop0: rw=1, want=144, limit=112 [ 415.469227] attempt to access beyond end of device [ 415.482223] loop0: rw=1, want=145, limit=112 [ 415.499178] attempt to access beyond end of device [ 415.508007] loop0: rw=1, want=4241, limit=112 [ 415.522648] attempt to access beyond end of device [ 415.527856] loop0: rw=1, want=4433, limit=112 11:09:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x0, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1700, 0x297ef) 11:09:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000040)={0x0, 0x9}) 11:09:43 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:43 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 415.798547] attempt to access beyond end of device [ 415.838671] loop4: rw=1, want=130, limit=112 [ 415.858444] attempt to access beyond end of device 11:09:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) 11:09:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40000010000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x20, 0x9, 0x4, 0x50c, 0x8, 0xff, 0x3, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x52d71ad2, 0x20, 0x6, 0x1, 0x5}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000300)=r3, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000380)={0x1, r2}) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x2) [ 415.890745] loop4: rw=1, want=131, limit=112 [ 415.948383] attempt to access beyond end of device [ 415.999647] loop4: rw=1, want=132, limit=112 [ 416.044011] attempt to access beyond end of device [ 416.081703] loop4: rw=1, want=133, limit=112 11:09:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1800, 0x297ef) [ 416.116275] attempt to access beyond end of device 11:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 416.164237] FAT-fs (loop5): bogus number of reserved sectors [ 416.197474] loop4: rw=1, want=142, limit=112 [ 416.223224] FAT-fs (loop5): Can't find a valid FAT filesystem [ 416.258830] attempt to access beyond end of device [ 416.309461] net_ratelimit: 26 callbacks suppressed [ 416.309470] protocol 88fb is buggy, dev hsr_slave_0 [ 416.319725] protocol 88fb is buggy, dev hsr_slave_1 [ 416.324863] protocol 88fb is buggy, dev hsr_slave_0 [ 416.329992] protocol 88fb is buggy, dev hsr_slave_1 [ 416.335145] protocol 88fb is buggy, dev hsr_slave_0 [ 416.340442] protocol 88fb is buggy, dev hsr_slave_1 [ 416.345580] protocol 88fb is buggy, dev hsr_slave_0 [ 416.350690] protocol 88fb is buggy, dev hsr_slave_1 [ 416.366488] loop4: rw=1, want=143, limit=112 [ 416.411090] attempt to access beyond end of device 11:09:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) [ 416.468322] loop4: rw=1, want=144, limit=112 [ 416.511796] attempt to access beyond end of device 11:09:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x40000) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0x0, 0x1f, 0xf, 0xf, 0xa, 0x80000001, 0x0, 0xed}) [ 416.576079] loop4: rw=1, want=145, limit=112 [ 416.614373] buffer_io_error: 45 callbacks suppressed [ 416.614383] Buffer I/O error on dev loop4, logical block 144, lost async page write 11:09:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1900, 0x297ef) [ 416.690786] attempt to access beyond end of device [ 416.696191] loop4: rw=1, want=4241, limit=112 [ 416.705331] attempt to access beyond end of device [ 416.711648] loop4: rw=1, want=5273, limit=112 [ 416.717083] attempt to access beyond end of device [ 416.722162] loop4: rw=1, want=5302, limit=112 [ 416.726839] Buffer I/O error on dev loop4, logical block 5301, lost async page write [ 416.729528] FAT-fs (loop5): bogus number of reserved sectors [ 416.744033] attempt to access beyond end of device [ 416.749095] loop4: rw=1, want=5303, limit=112 [ 416.767979] Buffer I/O error on dev loop4, logical block 5302, lost async page write [ 416.782458] attempt to access beyond end of device [ 416.787417] loop0: rw=1, want=130, limit=112 [ 416.798219] FAT-fs (loop5): Can't find a valid FAT filesystem [ 416.799524] protocol 88fb is buggy, dev hsr_slave_0 [ 416.808563] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 416.809235] protocol 88fb is buggy, dev hsr_slave_1 [ 416.818186] attempt to access beyond end of device [ 416.832264] attempt to access beyond end of device [ 416.838139] loop4: rw=1, want=5304, limit=112 [ 416.843402] loop0: rw=1, want=131, limit=112 [ 416.845326] Buffer I/O error on dev loop4, logical block 5303, lost async page write [ 416.856050] attempt to access beyond end of device [ 416.861227] loop4: rw=1, want=5305, limit=112 [ 416.865802] Buffer I/O error on dev loop4, logical block 5304, lost async page write [ 416.873880] attempt to access beyond end of device [ 416.878831] loop4: rw=1, want=5326, limit=112 [ 416.883406] Buffer I/O error on dev loop4, logical block 5325, lost async page write [ 416.883658] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 416.891362] attempt to access beyond end of device [ 416.891406] loop4: rw=1, want=5327, limit=112 [ 416.891422] Buffer I/O error on dev loop4, logical block 5326, lost async page write [ 416.917506] attempt to access beyond end of device [ 416.924356] loop4: rw=1, want=5328, limit=112 [ 416.926843] attempt to access beyond end of device [ 416.928888] Buffer I/O error on dev loop4, logical block 5327, lost async page write [ 416.945242] loop0: rw=1, want=132, limit=112 [ 416.947366] attempt to access beyond end of device [ 416.950295] attempt to access beyond end of device [ 416.959551] loop4: rw=1, want=5329, limit=112 [ 416.964305] attempt to access beyond end of device [ 416.969258] loop4: rw=1, want=5378, limit=112 [ 416.979335] loop0: rw=1, want=133, limit=112 [ 416.982073] attempt to access beyond end of device [ 416.994824] loop4: rw=1, want=5379, limit=112 [ 417.000241] attempt to access beyond end of device [ 417.000445] attempt to access beyond end of device [ 417.005200] loop0: rw=1, want=142, limit=112 [ 417.014760] loop4: rw=1, want=5380, limit=112 [ 417.019303] attempt to access beyond end of device [ 417.020052] attempt to access beyond end of device [ 417.025316] loop4: rw=1, want=5381, limit=112 [ 417.029961] loop0: rw=1, want=143, limit=112 [ 417.038197] attempt to access beyond end of device [ 417.038361] attempt to access beyond end of device [ 417.043675] loop0: rw=1, want=144, limit=112 [ 417.049915] loop4: rw=1, want=5390, limit=112 [ 417.053010] attempt to access beyond end of device [ 417.057165] attempt to access beyond end of device [ 417.062652] loop0: rw=1, want=145, limit=112 [ 417.069412] loop4: rw=1, want=5391, limit=112 [ 417.076133] attempt to access beyond end of device [ 417.077544] attempt to access beyond end of device [ 417.086413] loop4: rw=1, want=5392, limit=112 [ 417.086946] loop0: rw=1, want=4241, limit=112 [ 417.091099] attempt to access beyond end of device [ 417.104624] attempt to access beyond end of device [ 417.106396] loop4: rw=1, want=5393, limit=112 [ 417.109937] loop0: rw=1, want=8337, limit=112 [ 417.125462] attempt to access beyond end of device [ 417.127561] attempt to access beyond end of device [ 417.130452] loop4: rw=1, want=9489, limit=112 [ 417.138364] attempt to access beyond end of device [ 417.140304] loop0: rw=1, want=12433, limit=112 [ 417.149388] loop4: rw=1, want=13585, limit=112 [ 417.158229] attempt to access beyond end of device [ 417.163480] loop0: rw=1, want=16529, limit=112 [ 417.163581] attempt to access beyond end of device [ 417.176461] attempt to access beyond end of device [ 417.179457] loop4: rw=1, want=17681, limit=112 [ 417.181454] loop0: rw=1, want=20625, limit=112 [ 417.194162] attempt to access beyond end of device [ 417.199151] loop4: rw=1, want=21777, limit=112 [ 417.199209] attempt to access beyond end of device [ 417.212263] loop0: rw=1, want=24721, limit=112 [ 417.215827] attempt to access beyond end of device [ 417.226196] attempt to access beyond end of device [ 417.227605] loop4: rw=1, want=24817, limit=112 [ 417.231505] loop0: rw=1, want=28817, limit=112 [ 417.248820] attempt to access beyond end of device [ 417.253864] loop0: rw=1, want=32833, limit=112 11:09:46 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x0, @rand_addr=0xf941}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:46 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:46 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 11:09:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) 11:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x7, 0x20f) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x3, 0x800}, {0x1, 0x9, 0x1000}, {0x7, 0x8, 0x800}], 0x3, &(0x7f0000000040)={0x77359400}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) 11:09:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1a00, 0x297ef) [ 418.440816] attempt to access beyond end of device [ 418.446068] loop4: rw=1, want=130, limit=112 [ 418.473507] FAT-fs (loop5): bogus number of reserved sectors [ 418.479265] attempt to access beyond end of device [ 418.494811] loop4: rw=1, want=131, limit=112 [ 418.501918] attempt to access beyond end of device [ 418.507557] loop4: rw=1, want=132, limit=112 [ 418.518639] FAT-fs (loop5): Can't find a valid FAT filesystem [ 418.522066] attempt to access beyond end of device 11:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1b00, 0x297ef) [ 418.542640] loop4: rw=1, want=133, limit=112 [ 418.557896] attempt to access beyond end of device [ 418.569308] loop4: rw=1, want=142, limit=112 [ 418.593372] attempt to access beyond end of device [ 418.608549] loop4: rw=1, want=143, limit=112 [ 418.618822] attempt to access beyond end of device [ 418.628459] loop4: rw=1, want=144, limit=112 [ 418.637295] attempt to access beyond end of device [ 418.647236] loop4: rw=1, want=145, limit=112 11:09:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) 11:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x800, 0xb, 0x0, 0x5, 0x5, 0xffffffffffffffa1, 0x7f, r3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 418.673163] attempt to access beyond end of device [ 418.692898] loop4: rw=1, want=3673, limit=112 [ 418.707326] attempt to access beyond end of device [ 418.721350] loop4: rw=1, want=3702, limit=112 [ 418.726024] attempt to access beyond end of device [ 418.731294] loop4: rw=1, want=3703, limit=112 [ 418.736221] attempt to access beyond end of device [ 418.741535] loop4: rw=1, want=3704, limit=112 [ 418.746320] attempt to access beyond end of device [ 418.760570] loop4: rw=1, want=3705, limit=112 11:09:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1c00, 0x297ef) [ 418.780949] attempt to access beyond end of device [ 418.788778] FAT-fs (loop5): bogus number of reserved sectors [ 418.801943] loop4: rw=1, want=3726, limit=112 [ 418.813944] FAT-fs (loop5): Can't find a valid FAT filesystem [ 418.820951] attempt to access beyond end of device 11:09:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x1ff, 0xb8, 0x0, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 418.838067] loop4: rw=1, want=3727, limit=112 [ 418.846591] attempt to access beyond end of device [ 418.855181] loop4: rw=1, want=3728, limit=112 [ 418.863544] attempt to access beyond end of device [ 418.872319] loop4: rw=1, want=3729, limit=112 [ 418.901084] attempt to access beyond end of device [ 418.910638] loop4: rw=1, want=3778, limit=112 [ 418.940045] attempt to access beyond end of device [ 418.953948] loop4: rw=1, want=3779, limit=112 [ 418.963299] attempt to access beyond end of device [ 418.983617] loop4: rw=1, want=3780, limit=112 [ 419.015058] attempt to access beyond end of device [ 419.024477] loop4: rw=1, want=3781, limit=112 [ 419.029263] attempt to access beyond end of device [ 419.046451] loop4: rw=1, want=3790, limit=112 [ 419.052008] attempt to access beyond end of device [ 419.057278] loop4: rw=1, want=3791, limit=112 [ 419.068396] attempt to access beyond end of device [ 419.073849] loop4: rw=1, want=3792, limit=112 [ 419.078555] attempt to access beyond end of device [ 419.089896] loop4: rw=1, want=3793, limit=112 [ 419.107255] attempt to access beyond end of device [ 419.113620] loop4: rw=1, want=7889, limit=112 [ 419.135101] attempt to access beyond end of device [ 419.145263] loop4: rw=1, want=11985, limit=112 [ 419.166549] attempt to access beyond end of device [ 419.172708] loop4: rw=1, want=16081, limit=112 [ 419.194328] attempt to access beyond end of device [ 419.203984] loop4: rw=1, want=20177, limit=112 [ 419.218181] attempt to access beyond end of device [ 419.228186] loop4: rw=1, want=24273, limit=112 [ 419.247161] attempt to access beyond end of device [ 419.252382] loop4: rw=1, want=28369, limit=112 [ 419.260714] attempt to access beyond end of device [ 419.265327] attempt to access beyond end of device [ 419.265668] loop0: rw=1, want=130, limit=112 [ 419.270717] loop4: rw=1, want=32465, limit=112 [ 419.282171] attempt to access beyond end of device [ 419.285516] attempt to access beyond end of device [ 419.287145] loop0: rw=1, want=131, limit=112 [ 419.292200] loop4: rw=1, want=32993, limit=112 [ 419.330657] attempt to access beyond end of device [ 419.335629] loop0: rw=1, want=132, limit=112 [ 419.345231] attempt to access beyond end of device [ 419.351751] loop0: rw=1, want=133, limit=112 [ 419.356211] attempt to access beyond end of device [ 419.367031] loop0: rw=1, want=142, limit=112 [ 419.377351] attempt to access beyond end of device [ 419.387535] loop0: rw=1, want=143, limit=112 [ 419.393353] attempt to access beyond end of device [ 419.398305] loop0: rw=1, want=144, limit=112 [ 419.408000] attempt to access beyond end of device [ 419.418772] loop0: rw=1, want=145, limit=112 [ 419.435181] attempt to access beyond end of device [ 419.445188] loop0: rw=1, want=4241, limit=112 [ 419.464557] attempt to access beyond end of device [ 419.470569] loop0: rw=1, want=8337, limit=112 [ 419.492694] attempt to access beyond end of device [ 419.497650] loop0: rw=1, want=11617, limit=112 11:09:48 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x4, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x290) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) 11:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) futimesat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2000, 0x297ef) 11:09:48 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:48 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 420.535307] attempt to access beyond end of device [ 420.541101] loop4: rw=1, want=130, limit=112 [ 420.546257] attempt to access beyond end of device [ 420.551566] loop4: rw=1, want=131, limit=112 [ 420.556917] attempt to access beyond end of device [ 420.569110] loop4: rw=1, want=132, limit=112 [ 420.575612] FAT-fs (loop5): invalid media value (0x00) [ 420.583657] attempt to access beyond end of device [ 420.629680] FAT-fs (loop5): Can't find a valid FAT filesystem [ 420.662853] loop4: rw=1, want=133, limit=112 [ 420.703260] attempt to access beyond end of device 11:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x4a002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000440)={0x14, 0x88, 0xfa00, {r2, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}}, 0x90) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000200)={r5, 0x800}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x893, 0x9, 0x1, 0x1, 0xa}, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x80000000, 0x206, 0x0, 0x7f, 0x9, 0x2, 0xfffffffffffffff9, r7}, 0x20) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000002c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x200, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 420.725204] loop4: rw=1, want=142, limit=112 [ 420.741740] attempt to access beyond end of device [ 420.807820] loop4: rw=1, want=143, limit=112 11:09:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) 11:09:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8008, 0x297ef) [ 420.841592] attempt to access beyond end of device [ 420.882593] loop4: rw=1, want=144, limit=112 [ 420.918457] attempt to access beyond end of device 11:09:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x101004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1ff, 0x8000, 0xfffffffffffffff7}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="01040000000000000400ff7f33e0872f040001000000bd0c04b18e7f112d6352ad86eb5c75e9bde1ba9e39d0c155ca20127909fac5bc6573156a4f8a5e96f5aabac114af65fd9657cbca0d74a4a41ef21a636ee4143b5e6ae93ce3e98626db8b28456c57ecf6d2f1a7"], 0x1a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 420.951077] loop4: rw=1, want=145, limit=112 [ 421.011942] attempt to access beyond end of device [ 421.029076] FAT-fs (loop5): invalid media value (0x00) [ 421.053378] loop4: rw=1, want=2841, limit=112 [ 421.068943] FAT-fs (loop5): Can't find a valid FAT filesystem [ 421.100094] attempt to access beyond end of device [ 421.132956] loop4: rw=1, want=2870, limit=112 [ 421.162109] attempt to access beyond end of device 11:09:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() r4 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000000240)=[r2, r3, r4, r5, r6]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000300)={@empty, r7}, 0x14) [ 421.188345] loop4: rw=1, want=2871, limit=112 [ 421.215712] attempt to access beyond end of device 11:09:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8e0b, 0x297ef) [ 421.243011] loop4: rw=1, want=2872, limit=112 [ 421.270077] attempt to access beyond end of device [ 421.297015] loop4: rw=1, want=2873, limit=112 [ 421.321386] attempt to access beyond end of device [ 421.359318] attempt to access beyond end of device [ 421.364566] loop0: rw=1, want=130, limit=112 [ 421.369003] attempt to access beyond end of device [ 421.392223] loop4: rw=1, want=2894, limit=112 [ 421.394080] loop0: rw=1, want=131, limit=112 [ 421.415244] attempt to access beyond end of device [ 421.428409] attempt to access beyond end of device [ 421.435250] loop0: rw=1, want=132, limit=112 [ 421.443948] loop4: rw=1, want=2895, limit=112 [ 421.448560] attempt to access beyond end of device [ 421.453682] attempt to access beyond end of device [ 421.458710] loop0: rw=1, want=133, limit=112 [ 421.464752] loop4: rw=1, want=2896, limit=112 [ 421.469428] attempt to access beyond end of device [ 421.479069] attempt to access beyond end of device [ 421.484131] loop4: rw=1, want=2897, limit=112 [ 421.488702] attempt to access beyond end of device [ 421.496326] loop0: rw=1, want=142, limit=112 [ 421.500862] attempt to access beyond end of device [ 421.505831] loop0: rw=1, want=143, limit=112 [ 421.510560] loop4: rw=1, want=2946, limit=112 [ 421.515134] attempt to access beyond end of device [ 421.519154] attempt to access beyond end of device [ 421.520164] loop4: rw=1, want=2947, limit=112 [ 421.520199] attempt to access beyond end of device [ 421.526280] loop0: rw=1, want=144, limit=112 [ 421.530133] loop4: rw=1, want=2948, limit=112 [ 421.540548] attempt to access beyond end of device [ 421.543780] attempt to access beyond end of device [ 421.548637] loop0: rw=1, want=145, limit=112 [ 421.553588] loop4: rw=1, want=2949, limit=112 [ 421.553625] attempt to access beyond end of device [ 421.553639] loop4: rw=1, want=2958, limit=112 [ 421.571590] attempt to access beyond end of device [ 421.572068] attempt to access beyond end of device [ 421.576936] loop0: rw=1, want=4241, limit=112 [ 421.581900] loop4: rw=1, want=2959, limit=112 [ 421.581935] attempt to access beyond end of device [ 421.581946] loop4: rw=1, want=2960, limit=112 [ 421.581973] attempt to access beyond end of device [ 421.604272] attempt to access beyond end of device [ 421.606168] loop4: rw=1, want=2961, limit=112 [ 421.613404] loop0: rw=1, want=8337, limit=112 [ 421.620655] attempt to access beyond end of device [ 421.625608] loop4: rw=1, want=7057, limit=112 [ 421.634158] attempt to access beyond end of device [ 421.638575] attempt to access beyond end of device [ 421.639100] loop0: rw=1, want=12433, limit=112 [ 421.644387] loop4: rw=1, want=11153, limit=112 [ 421.662044] attempt to access beyond end of device [ 421.662685] attempt to access beyond end of device [ 421.666983] loop4: rw=1, want=15249, limit=112 [ 421.677577] loop0: rw=1, want=16529, limit=112 [ 421.685847] attempt to access beyond end of device [ 421.691151] loop4: rw=1, want=19345, limit=112 [ 421.696344] attempt to access beyond end of device [ 421.701349] loop0: rw=1, want=20625, limit=112 [ 421.704139] attempt to access beyond end of device [ 421.711213] loop4: rw=1, want=23441, limit=112 [ 421.720126] attempt to access beyond end of device [ 421.724488] attempt to access beyond end of device [ 421.725072] loop0: rw=1, want=24721, limit=112 [ 421.731133] loop4: rw=1, want=27537, limit=112 [ 421.748186] attempt to access beyond end of device [ 421.748291] attempt to access beyond end of device [ 421.758099] loop4: rw=1, want=31633, limit=112 [ 421.758506] loop0: rw=1, want=28817, limit=112 [ 421.767280] attempt to access beyond end of device [ 421.772581] loop4: rw=1, want=32993, limit=112 [ 421.781636] attempt to access beyond end of device [ 421.786583] loop0: rw=1, want=32009, limit=112 11:09:50 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 11:09:50 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf0ff, 0x297ef) 11:09:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) 11:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:50 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 422.549498] net_ratelimit: 26 callbacks suppressed [ 422.549507] protocol 88fb is buggy, dev hsr_slave_0 [ 422.559581] protocol 88fb is buggy, dev hsr_slave_1 [ 422.564705] protocol 88fb is buggy, dev hsr_slave_0 [ 422.569796] protocol 88fb is buggy, dev hsr_slave_1 [ 422.574915] protocol 88fb is buggy, dev hsr_slave_0 [ 422.580018] protocol 88fb is buggy, dev hsr_slave_1 [ 422.585141] protocol 88fb is buggy, dev hsr_slave_0 [ 422.590245] protocol 88fb is buggy, dev hsr_slave_1 11:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7f, @mcast1, 0x2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0xbd, @remote, 0x8}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0xfffffffffffffffc, @rand_addr="4cb2591bcd6595d6896cef723b3abfc7", 0x3}], 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "d867e9d1a12931a003c0793c67751f222a3a251a2c33abc1387c498359ec7f604c43ee261078d7935f2e1c3b283ff7e1eb2dc3b86e44602c0760"}, 0x4f) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000000244b0000000002009c00e2ffffff0000000000000000a6a25f55065c5ea7e1fc29f83f4a735ff582ebe67c0288eb45acee357d02bc72a406006b90e3e243fab6732000df822dc58b3c351fd55929745387d7ee8929133c3f2dfeccbab1c300fddd6b5ae5eed822e99f"]) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x6, 0x3ff, 0x9, 0x0, 0x950}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) dup3(r0, r3, 0x80000) [ 422.701254] FAT-fs (loop5): invalid media value (0x00) 11:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0xfffefffffffffffe, 0x108000800001, 0x7007, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40400, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) [ 422.731785] FAT-fs (loop5): Can't find a valid FAT filesystem 11:09:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf6ff, 0x297ef) 11:09:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) 11:09:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x103000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8bc05351b2ce034647f73711d6f0615f0641caa235fd5e65a1a8f0ec0ef4e8db00000000000000000000000000000000000000000000000000"], 0x39) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000002c0)={{0x2, 0x0, 0x101, 0x1, 0x29}, 0xfffffffffffffffb, 0x7fffffff, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x0, 0x7fffffff, 0x7}) [ 422.975044] FAT-fs (loop5): invalid media value (0x00) [ 423.007917] FAT-fs (loop5): Can't find a valid FAT filesystem [ 423.029501] protocol 88fb is buggy, dev hsr_slave_0 [ 423.034707] protocol 88fb is buggy, dev hsr_slave_1 11:09:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xff0f, 0x297ef) 11:09:51 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:51 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0x2, 0x0, 0x80000000, 0x7f}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0x3, 0x3, 0x100000001, 0x8]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 11:09:51 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) 11:09:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xfff0, 0x297ef) [ 423.708706] FAT-fs (loop5): invalid media value (0x00) [ 423.751692] FAT-fs (loop5): Can't find a valid FAT filesystem 11:09:51 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$getown(r0, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="f3680a00b82f008ed80f005ceb260febeef08383fa990cba4100b8dc00eff3a7b8e2008ee0ba410066b80010000066ef3c18", 0x32}], 0x1, 0x40, &(0x7f00000000c0), 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0x20, 0x0, [], {0x0, @reserved}}) 11:09:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xfff6, 0x297ef) 11:09:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) [ 423.988607] attempt to access beyond end of device [ 423.998874] loop4: rw=1, want=130, limit=112 [ 424.021599] buffer_io_error: 79 callbacks suppressed [ 424.021609] Buffer I/O error on dev loop4, logical block 129, lost async page write 11:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000080)=""/234) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x12710, 0x19, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 424.109827] attempt to access beyond end of device [ 424.158496] loop4: rw=1, want=131, limit=112 [ 424.183657] Buffer I/O error on dev loop4, logical block 130, lost async page write 11:09:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x20000, 0x297ef) [ 424.230549] FAT-fs (loop5): invalid media value (0x00) [ 424.253582] attempt to access beyond end of device [ 424.272061] FAT-fs (loop5): Can't find a valid FAT filesystem [ 424.317665] loop4: rw=1, want=132, limit=112 [ 424.345743] Buffer I/O error on dev loop4, logical block 131, lost async page write 11:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 424.409092] attempt to access beyond end of device [ 424.447060] loop4: rw=1, want=133, limit=112 [ 424.474012] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 424.524864] attempt to access beyond end of device 11:09:52 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 424.554764] loop4: rw=1, want=142, limit=112 [ 424.583955] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 424.630651] attempt to access beyond end of device [ 424.656197] loop4: rw=1, want=143, limit=112 [ 424.678976] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 424.701587] attempt to access beyond end of device [ 424.707451] loop4: rw=1, want=144, limit=112 [ 424.718212] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 424.735625] attempt to access beyond end of device [ 424.742647] loop4: rw=1, want=145, limit=112 [ 424.747295] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 424.774873] attempt to access beyond end of device [ 424.783751] loop4: rw=1, want=4241, limit=112 [ 424.804330] attempt to access beyond end of device [ 424.813277] loop4: rw=1, want=6745, limit=112 [ 424.827708] attempt to access beyond end of device [ 424.832800] loop4: rw=1, want=6774, limit=112 [ 424.837444] Buffer I/O error on dev loop4, logical block 6773, lost async page write [ 424.846963] attempt to access beyond end of device [ 424.852059] loop4: rw=1, want=6775, limit=112 [ 424.856721] Buffer I/O error on dev loop4, logical block 6774, lost async page write [ 424.864899] attempt to access beyond end of device [ 424.873314] loop4: rw=1, want=6776, limit=112 [ 424.877955] attempt to access beyond end of device [ 424.883027] loop4: rw=1, want=6777, limit=112 [ 424.887655] attempt to access beyond end of device [ 424.892718] loop4: rw=1, want=6798, limit=112 [ 424.897326] attempt to access beyond end of device [ 424.902427] loop4: rw=1, want=6799, limit=112 [ 424.907032] attempt to access beyond end of device [ 424.912927] loop4: rw=1, want=6800, limit=112 [ 424.917551] attempt to access beyond end of device [ 424.922625] loop4: rw=1, want=6801, limit=112 [ 424.927265] attempt to access beyond end of device [ 424.932330] loop4: rw=1, want=6850, limit=112 11:09:52 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x20180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0xfffffffffffffffd, 0x3, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x20000000, 0x1000, &(0x7f0000001000/0x1000)=nil}) 11:09:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x40000, 0x297ef) [ 424.936954] attempt to access beyond end of device [ 424.942029] loop4: rw=1, want=6851, limit=112 [ 424.946651] attempt to access beyond end of device [ 424.951847] loop4: rw=1, want=6852, limit=112 [ 424.956460] attempt to access beyond end of device [ 424.963575] loop4: rw=1, want=6853, limit=112 [ 424.968302] attempt to access beyond end of device [ 424.981901] attempt to access beyond end of device 11:09:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) [ 424.986873] loop0: rw=1, want=130, limit=112 [ 424.989986] loop4: rw=1, want=6862, limit=112 [ 424.999518] attempt to access beyond end of device [ 425.004465] loop4: rw=1, want=6863, limit=112 [ 425.008674] attempt to access beyond end of device [ 425.008995] attempt to access beyond end of device [ 425.051037] loop0: rw=1, want=131, limit=112 [ 425.076186] attempt to access beyond end of device [ 425.077068] loop4: rw=1, want=6864, limit=112 [ 425.086232] loop0: rw=1, want=132, limit=112 [ 425.095554] attempt to access beyond end of device [ 425.101717] attempt to access beyond end of device [ 425.116186] loop0: rw=1, want=133, limit=112 [ 425.127040] attempt to access beyond end of device [ 425.130018] loop4: rw=1, want=6865, limit=112 [ 425.134611] loop0: rw=1, want=142, limit=112 [ 425.145991] attempt to access beyond end of device [ 425.155344] loop0: rw=1, want=143, limit=112 [ 425.160139] attempt to access beyond end of device [ 425.165079] loop4: rw=1, want=10961, limit=112 [ 425.172422] attempt to access beyond end of device [ 425.205680] loop0: rw=1, want=144, limit=112 [ 425.222647] FAT-fs (loop5): invalid media value (0x00) [ 425.229207] attempt to access beyond end of device [ 425.236261] attempt to access beyond end of device [ 425.249090] loop4: rw=1, want=15057, limit=112 [ 425.253181] loop0: rw=1, want=145, limit=112 [ 425.258454] FAT-fs (loop5): Can't find a valid FAT filesystem [ 425.293259] attempt to access beyond end of device [ 425.294393] attempt to access beyond end of device [ 425.298330] loop0: rw=1, want=4241, limit=112 [ 425.321375] loop4: rw=1, want=19153, limit=112 [ 425.326419] attempt to access beyond end of device [ 425.345651] loop0: rw=1, want=8337, limit=112 [ 425.354216] attempt to access beyond end of device [ 425.359167] loop4: rw=1, want=21361, limit=112 [ 425.367067] attempt to access beyond end of device [ 425.384285] loop0: rw=1, want=12433, limit=112 [ 425.426941] attempt to access beyond end of device [ 425.437913] loop0: rw=1, want=16529, limit=112 [ 425.471807] attempt to access beyond end of device [ 425.483732] loop0: rw=1, want=20625, limit=112 [ 425.537336] attempt to access beyond end of device [ 425.569214] loop0: rw=1, want=24721, limit=112 [ 425.603834] attempt to access beyond end of device [ 425.619148] loop0: rw=1, want=28817, limit=112 [ 425.652594] attempt to access beyond end of device [ 425.657576] loop0: rw=1, want=31185, limit=112 11:09:54 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x0, 0x424140) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="202c45a716bc1bf30d45f157e29610f42878d62a61367632db884dad9a15cbc15d08d5ec50b0f2780cd4e0088972d59e1c888c564039ebcfc69937", 0x3b, r1}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x20000000000, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x60000, 0x297ef) 11:09:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) 11:09:54 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:09:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x8000) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0xcebfd13315b2baaf) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x8000, 0x4) [ 426.750964] FAT-fs (loop5): invalid media value (0x00) 11:09:54 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 426.808103] FAT-fs (loop5): Can't find a valid FAT filesystem [ 426.872472] attempt to access beyond end of device [ 426.877445] loop0: rw=1, want=130, limit=112 [ 426.907193] attempt to access beyond end of device [ 426.925873] loop0: rw=1, want=131, limit=112 11:09:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x80000, 0x297ef) 11:09:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000000)) 11:09:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) [ 426.948909] attempt to access beyond end of device [ 426.966618] loop0: rw=1, want=132, limit=112 [ 426.977952] attempt to access beyond end of device [ 426.988688] loop0: rw=1, want=133, limit=112 [ 427.011126] attempt to access beyond end of device [ 427.037552] loop0: rw=1, want=142, limit=112 11:09:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x900000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose='loose'}, {@cache_mmap='cache=mmap'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) [ 427.099312] FAT-fs (loop5): invalid media value (0x00) [ 427.105805] attempt to access beyond end of device [ 427.123694] FAT-fs (loop5): Can't find a valid FAT filesystem [ 427.135027] loop0: rw=1, want=143, limit=112 [ 427.160695] attempt to access beyond end of device [ 427.186158] loop0: rw=1, want=144, limit=112 [ 427.204652] attempt to access beyond end of device [ 427.216574] loop0: rw=1, want=145, limit=112 11:09:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xa0000, 0x297ef) [ 427.283745] attempt to access beyond end of device [ 427.304851] loop0: rw=1, want=4241, limit=112 [ 427.402992] attempt to access beyond end of device [ 427.423027] loop0: rw=1, want=8337, limit=112 [ 427.485015] attempt to access beyond end of device [ 427.496244] loop0: rw=1, want=12433, limit=112 [ 427.532284] attempt to access beyond end of device [ 427.547599] loop0: rw=1, want=16529, limit=112 [ 427.573401] attempt to access beyond end of device [ 427.578431] loop0: rw=1, want=20625, limit=112 [ 427.593709] attempt to access beyond end of device [ 427.598754] loop0: rw=1, want=24721, limit=112 [ 427.613559] attempt to access beyond end of device [ 427.618594] loop0: rw=1, want=28409, limit=112 11:09:56 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x42000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000001c0)=""/166, &(0x7f00000000c0)=0xa6) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'team_slave_0\x00', 0x4002}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:09:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc0000, 0x297ef) 11:09:56 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 428.173222] attempt to access beyond end of device [ 428.189051] loop4: rw=1, want=130, limit=112 [ 428.215213] attempt to access beyond end of device [ 428.248506] loop4: rw=1, want=131, limit=112 [ 428.274370] attempt to access beyond end of device [ 428.316751] loop4: rw=1, want=132, limit=112 11:09:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 428.348990] attempt to access beyond end of device [ 428.396147] loop4: rw=1, want=133, limit=112 [ 428.425929] attempt to access beyond end of device [ 428.489615] loop4: rw=1, want=142, limit=112 [ 428.516019] attempt to access beyond end of device [ 428.547859] loop4: rw=1, want=143, limit=112 [ 428.569704] attempt to access beyond end of device [ 428.594296] loop4: rw=1, want=144, limit=112 [ 428.632632] attempt to access beyond end of device [ 428.656595] loop4: rw=1, want=145, limit=112 [ 428.680048] attempt to access beyond end of device [ 428.702689] loop4: rw=1, want=537, limit=112 [ 428.719805] attempt to access beyond end of device [ 428.736823] loop4: rw=1, want=566, limit=112 [ 428.752318] attempt to access beyond end of device [ 428.769210] loop4: rw=1, want=567, limit=112 [ 428.778952] attempt to access beyond end of device [ 428.789457] net_ratelimit: 26 callbacks suppressed [ 428.789466] protocol 88fb is buggy, dev hsr_slave_0 [ 428.799546] protocol 88fb is buggy, dev hsr_slave_1 [ 428.804665] protocol 88fb is buggy, dev hsr_slave_0 [ 428.809773] protocol 88fb is buggy, dev hsr_slave_1 [ 428.814860] protocol 88fb is buggy, dev hsr_slave_0 [ 428.820005] protocol 88fb is buggy, dev hsr_slave_1 [ 428.825142] protocol 88fb is buggy, dev hsr_slave_0 [ 428.830247] protocol 88fb is buggy, dev hsr_slave_1 [ 428.845661] loop4: rw=1, want=568, limit=112 [ 428.858830] attempt to access beyond end of device [ 428.876555] loop4: rw=1, want=569, limit=112 [ 428.888549] attempt to access beyond end of device [ 428.916438] loop4: rw=1, want=590, limit=112 [ 428.927943] attempt to access beyond end of device [ 428.944357] loop4: rw=1, want=591, limit=112 [ 428.962628] attempt to access beyond end of device [ 428.967710] loop4: rw=1, want=592, limit=112 [ 428.976944] attempt to access beyond end of device [ 428.984602] loop4: rw=1, want=593, limit=112 [ 428.989211] attempt to access beyond end of device [ 428.998586] loop4: rw=1, want=642, limit=112 [ 429.005516] attempt to access beyond end of device [ 429.014959] loop4: rw=1, want=643, limit=112 [ 429.021823] attempt to access beyond end of device [ 429.026857] loop4: rw=1, want=644, limit=112 [ 429.035686] buffer_io_error: 48 callbacks suppressed [ 429.035696] Buffer I/O error on dev loop4, logical block 643, lost async page write [ 429.048925] attempt to access beyond end of device [ 429.054397] loop4: rw=1, want=645, limit=112 [ 429.058820] Buffer I/O error on dev loop4, logical block 644, lost async page write 11:09:57 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xe0000, 0x297ef) 11:09:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = semget(0x0, 0x3, 0x1a8) semctl$SEM_STAT(r3, 0x7, 0x12, &(0x7f0000000000)=""/177) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='bond_slave_0\x00') 11:09:57 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:09:57 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 429.066710] attempt to access beyond end of device [ 429.073671] loop4: rw=1, want=654, limit=112 [ 429.078110] Buffer I/O error on dev loop4, logical block 653, lost async page write [ 429.086010] attempt to access beyond end of device [ 429.091063] loop4: rw=1, want=655, limit=112 [ 429.098716] attempt to access beyond end of device [ 429.104006] loop0: rw=1, want=130, limit=112 [ 429.108431] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 429.130732] Buffer I/O error on dev loop4, logical block 654, lost async page write [ 429.139233] attempt to access beyond end of device [ 429.144592] attempt to access beyond end of device [ 429.149843] loop4: rw=1, want=656, limit=112 [ 429.154262] Buffer I/O error on dev loop4, logical block 655, lost async page write [ 429.162450] loop0: rw=1, want=131, limit=112 [ 429.166870] Buffer I/O error on dev loop0, logical block 130, lost async page write 11:09:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x2aa4, 0xfffffffffffffffc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x84, "cbaf466ba3edde76de0d5aa1b7cc2ecfceaa6a4c287f6894aa7b73ed58c375bccbcc1f853035614d73cc5824f8308ac5142aaf25982de7e374602f94d7e63bb6b017c9b6e89003376bf44ad3f02ca1b65e4a8f7306aad23779670c2bb1ce6d09708527834ac7815472220faf039ec28791866427f199fdd3e555f31bb8fde13d3f748450"}, &(0x7f0000000040)=0x8c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r2, 0x2}, 0x8) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x100, 0x24000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0xbf3) [ 429.185909] attempt to access beyond end of device [ 429.187824] attempt to access beyond end of device [ 429.202103] loop0: rw=1, want=132, limit=112 [ 429.206540] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 429.213734] loop4: rw=1, want=657, limit=112 [ 429.218887] Buffer I/O error on dev loop4, logical block 656, lost async page write [ 429.224134] attempt to access beyond end of device [ 429.238627] loop0: rw=1, want=133, limit=112 [ 429.246660] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 429.269467] protocol 88fb is buggy, dev hsr_slave_0 [ 429.274590] protocol 88fb is buggy, dev hsr_slave_1 [ 429.280347] attempt to access beyond end of device [ 429.286497] loop0: rw=1, want=142, limit=112 [ 429.295527] attempt to access beyond end of device [ 429.295814] attempt to access beyond end of device [ 429.309818] loop0: rw=1, want=143, limit=112 [ 429.319646] attempt to access beyond end of device [ 429.329167] loop0: rw=1, want=144, limit=112 [ 429.332124] loop4: rw=1, want=4753, limit=112 [ 429.337195] attempt to access beyond end of device [ 429.347863] loop0: rw=1, want=145, limit=112 [ 429.364930] attempt to access beyond end of device [ 429.368193] attempt to access beyond end of device [ 429.373668] loop4: rw=1, want=8849, limit=112 [ 429.377300] loop0: rw=1, want=4241, limit=112 [ 429.397938] attempt to access beyond end of device [ 429.402251] attempt to access beyond end of device [ 429.407939] loop4: rw=1, want=12945, limit=112 [ 429.411724] loop0: rw=1, want=8337, limit=112 [ 429.418668] attempt to access beyond end of device [ 429.426771] loop4: rw=1, want=13337, limit=112 [ 429.427664] attempt to access beyond end of device [ 429.437779] loop0: rw=1, want=12433, limit=112 [ 429.466553] attempt to access beyond end of device [ 429.479426] loop0: rw=1, want=16529, limit=112 [ 429.495524] attempt to access beyond end of device [ 429.500552] loop0: rw=1, want=20625, limit=112 [ 429.516685] attempt to access beyond end of device [ 429.521693] loop0: rw=1, want=24721, limit=112 [ 429.534935] attempt to access beyond end of device [ 429.539920] loop0: rw=1, want=28817, limit=112 [ 429.553604] attempt to access beyond end of device [ 429.558546] loop0: rw=1, want=32889, limit=112 11:09:58 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:09:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:09:58 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10000, 0x408000) open_by_handle_at(r0, &(0x7f0000000040)={0x81, 0xab, "58d0882880672c8dbe4a3e377e35882e2bbb4d4cfa9f5e61a106ed4870d07a3b6395b7032923068b7fff61b8882886f2b45a26ee351ea318ec07a4945387cfe88aa3ed51a0a537cd6575d38211e560ce040d2207ed28d94917eadcc4a5ac9f2aafb213adeef8b960e2382341cc759a936aa9ad981be6d0113a"}, 0xc040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:09:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x100000, 0x297ef) 11:09:58 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 430.531071] attempt to access beyond end of device [ 430.555442] loop4: rw=1, want=130, limit=112 [ 430.561548] attempt to access beyond end of device [ 430.571755] loop4: rw=1, want=131, limit=112 [ 430.582356] attempt to access beyond end of device [ 430.590793] loop4: rw=1, want=132, limit=112 [ 430.599826] attempt to access beyond end of device 11:09:58 executing program 3: timer_create(0x0, 0x0, &(0x7f0000044000)) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_delete(0x0) [ 430.610313] loop4: rw=1, want=133, limit=112 [ 430.618238] attempt to access beyond end of device [ 430.638493] loop4: rw=1, want=142, limit=112 [ 430.646500] attempt to access beyond end of device [ 430.655025] loop4: rw=1, want=143, limit=112 [ 430.665414] attempt to access beyond end of device [ 430.679767] loop4: rw=1, want=144, limit=112 [ 430.702186] attempt to access beyond end of device [ 430.711798] loop4: rw=1, want=145, limit=112 [ 430.735489] attempt to access beyond end of device [ 430.746192] loop4: rw=1, want=4241, limit=112 [ 430.768270] attempt to access beyond end of device [ 430.785076] loop4: rw=1, want=6105, limit=112 [ 430.790999] attempt to access beyond end of device [ 430.795949] loop4: rw=1, want=6134, limit=112 [ 430.811872] attempt to access beyond end of device [ 430.821364] loop4: rw=1, want=6135, limit=112 [ 430.829310] attempt to access beyond end of device [ 430.837760] loop4: rw=1, want=6136, limit=112 [ 430.848402] attempt to access beyond end of device [ 430.856604] loop4: rw=1, want=6137, limit=112 [ 430.861248] attempt to access beyond end of device [ 430.866322] loop4: rw=1, want=6158, limit=112 [ 430.872033] attempt to access beyond end of device [ 430.889719] loop4: rw=1, want=6159, limit=112 [ 430.894339] attempt to access beyond end of device [ 430.900649] loop4: rw=1, want=6160, limit=112 [ 430.908752] attempt to access beyond end of device [ 430.917881] loop4: rw=1, want=6161, limit=112 [ 430.923294] attempt to access beyond end of device [ 430.928309] loop4: rw=1, want=6210, limit=112 [ 430.933034] attempt to access beyond end of device [ 430.938061] loop4: rw=1, want=6211, limit=112 [ 430.942709] attempt to access beyond end of device [ 430.950027] loop4: rw=1, want=6212, limit=112 [ 430.960301] attempt to access beyond end of device [ 430.983174] loop4: rw=1, want=6213, limit=112 [ 430.987712] attempt to access beyond end of device [ 430.992853] loop4: rw=1, want=6222, limit=112 [ 430.997420] attempt to access beyond end of device [ 431.003338] loop4: rw=1, want=6223, limit=112 [ 431.007887] attempt to access beyond end of device [ 431.012919] loop4: rw=1, want=6224, limit=112 [ 431.017476] attempt to access beyond end of device [ 431.022631] loop4: rw=1, want=6225, limit=112 11:09:59 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:09:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:09:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1fffff, 0x297ef) [ 431.033087] attempt to access beyond end of device [ 431.038050] loop4: rw=1, want=10321, limit=112 [ 431.051026] attempt to access beyond end of device [ 431.055978] loop4: rw=1, want=14417, limit=112 [ 431.069263] attempt to access beyond end of device [ 431.074272] loop4: rw=1, want=18513, limit=112 11:09:59 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 11:09:59 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 431.095241] attempt to access beyond end of device [ 431.100623] loop4: rw=1, want=22609, limit=112 [ 431.121112] attempt to access beyond end of device [ 431.123738] attempt to access beyond end of device [ 431.126071] loop0: rw=1, want=130, limit=112 [ 431.126109] attempt to access beyond end of device [ 431.136463] loop4: rw=1, want=23689, limit=112 11:09:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xdf, &(0x7f0000000240)=0x3, 0x4) clock_gettime(0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000040)={0x2, 0x7, 0x7, 0x10, 0x0, 0x1000, 0xa}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8937, 0x0) [ 431.171953] loop0: rw=1, want=131, limit=112 [ 431.178789] attempt to access beyond end of device [ 431.195269] loop0: rw=1, want=132, limit=112 [ 431.208963] attempt to access beyond end of device [ 431.251975] loop0: rw=1, want=133, limit=112 [ 431.263234] attempt to access beyond end of device [ 431.274301] loop0: rw=1, want=142, limit=112 [ 431.278939] attempt to access beyond end of device [ 431.284311] loop0: rw=1, want=143, limit=112 [ 431.288832] attempt to access beyond end of device [ 431.294259] loop0: rw=1, want=144, limit=112 [ 431.298766] attempt to access beyond end of device [ 431.313441] loop0: rw=1, want=145, limit=112 [ 431.357915] attempt to access beyond end of device [ 431.378082] loop0: rw=1, want=4241, limit=112 [ 431.427616] attempt to access beyond end of device [ 431.444695] loop0: rw=1, want=8337, limit=112 [ 431.498685] attempt to access beyond end of device [ 431.527635] loop0: rw=1, want=12433, limit=112 [ 431.568201] attempt to access beyond end of device [ 431.593754] loop0: rw=1, want=13769, limit=112 11:10:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:00 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1000000, 0x297ef) 11:10:00 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c56", 0x10}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x5fe1, 0x0) 11:10:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 432.804349] attempt to access beyond end of device [ 432.809820] loop4: rw=1, want=130, limit=112 [ 432.824208] attempt to access beyond end of device [ 432.856516] loop4: rw=1, want=131, limit=112 [ 432.877651] attempt to access beyond end of device [ 432.901423] loop4: rw=1, want=132, limit=112 [ 432.916118] attempt to access beyond end of device [ 432.924833] loop4: rw=1, want=133, limit=112 [ 432.947982] attempt to access beyond end of device 11:10:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) 11:10:01 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 432.974612] loop4: rw=1, want=142, limit=112 [ 432.993150] attempt to access beyond end of device [ 433.014314] loop4: rw=1, want=143, limit=112 11:10:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2000000, 0x297ef) [ 433.034202] attempt to access beyond end of device [ 433.051978] loop4: rw=1, want=144, limit=112 [ 433.058239] attempt to access beyond end of device [ 433.072214] loop4: rw=1, want=145, limit=112 [ 433.146796] attempt to access beyond end of device 11:10:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2928220, 0x297ef) [ 433.167534] loop4: rw=1, want=4241, limit=112 [ 433.189709] attempt to access beyond end of device [ 433.207298] loop4: rw=1, want=4953, limit=112 [ 433.238040] attempt to access beyond end of device [ 433.261704] loop4: rw=1, want=4982, limit=112 [ 433.272203] attempt to access beyond end of device [ 433.283333] loop4: rw=1, want=4983, limit=112 [ 433.293981] attempt to access beyond end of device [ 433.324228] loop4: rw=1, want=4984, limit=112 [ 433.336910] attempt to access beyond end of device [ 433.352538] loop4: rw=1, want=4985, limit=112 [ 433.368890] attempt to access beyond end of device 11:10:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3000000, 0x297ef) [ 433.386645] loop4: rw=1, want=5006, limit=112 [ 433.402060] attempt to access beyond end of device [ 433.420196] loop4: rw=1, want=5007, limit=112 [ 433.434189] attempt to access beyond end of device [ 433.447310] loop4: rw=1, want=5008, limit=112 [ 433.458139] attempt to access beyond end of device [ 433.468206] loop4: rw=1, want=5009, limit=112 [ 433.482535] attempt to access beyond end of device [ 433.497055] loop4: rw=1, want=5058, limit=112 [ 433.514977] attempt to access beyond end of device [ 433.532059] loop4: rw=1, want=5059, limit=112 [ 433.549944] attempt to access beyond end of device [ 433.565548] loop4: rw=1, want=5060, limit=112 [ 433.570668] attempt to access beyond end of device [ 433.575882] loop4: rw=1, want=5061, limit=112 [ 433.581108] attempt to access beyond end of device [ 433.591006] loop4: rw=1, want=5070, limit=112 11:10:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x4000000, 0x297ef) [ 433.595718] attempt to access beyond end of device [ 433.611472] loop4: rw=1, want=5071, limit=112 [ 433.616213] attempt to access beyond end of device [ 433.622645] loop4: rw=1, want=5072, limit=112 [ 433.632767] attempt to access beyond end of device [ 433.639134] loop4: rw=1, want=5073, limit=112 11:10:01 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 433.651737] attempt to access beyond end of device [ 433.671017] loop4: rw=1, want=9169, limit=112 11:10:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) [ 433.701132] attempt to access beyond end of device [ 433.713804] loop4: rw=1, want=13265, limit=112 [ 433.762821] attempt to access beyond end of device [ 433.778353] loop4: rw=1, want=17361, limit=112 [ 433.832943] attempt to access beyond end of device [ 433.866409] loop4: rw=1, want=21457, limit=112 11:10:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x5000000, 0x297ef) [ 433.935751] attempt to access beyond end of device [ 433.969531] loop4: rw=1, want=25553, limit=112 [ 434.010434] attempt to access beyond end of device [ 434.015396] loop4: rw=1, want=26569, limit=112 [ 435.029458] net_ratelimit: 26 callbacks suppressed [ 435.029468] protocol 88fb is buggy, dev hsr_slave_0 [ 435.039597] protocol 88fb is buggy, dev hsr_slave_1 [ 435.044746] protocol 88fb is buggy, dev hsr_slave_0 [ 435.049842] protocol 88fb is buggy, dev hsr_slave_1 [ 435.054947] protocol 88fb is buggy, dev hsr_slave_0 [ 435.060055] protocol 88fb is buggy, dev hsr_slave_1 [ 435.065169] protocol 88fb is buggy, dev hsr_slave_0 [ 435.070269] protocol 88fb is buggy, dev hsr_slave_1 11:10:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 11:10:03 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) 11:10:03 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x0, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:03 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6000000, 0x297ef) 11:10:03 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000040)=0x40, 0x18a) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 435.371933] attempt to access beyond end of device [ 435.394497] loop4: rw=1, want=130, limit=112 [ 435.409010] buffer_io_error: 60 callbacks suppressed [ 435.409020] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 435.427715] attempt to access beyond end of device [ 435.434511] loop4: rw=1, want=131, limit=112 [ 435.439196] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 435.447975] attempt to access beyond end of device [ 435.458847] loop4: rw=1, want=132, limit=112 11:10:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 435.491867] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 435.509472] protocol 88fb is buggy, dev hsr_slave_0 [ 435.514594] protocol 88fb is buggy, dev hsr_slave_1 [ 435.520210] attempt to access beyond end of device [ 435.527040] loop4: rw=1, want=133, limit=112 [ 435.532680] Buffer I/O error on dev loop4, logical block 132, lost async page write 11:10:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x7000000, 0x297ef) [ 435.548439] attempt to access beyond end of device [ 435.569468] loop4: rw=1, want=142, limit=112 [ 435.573936] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 435.594550] attempt to access beyond end of device [ 435.604237] loop4: rw=1, want=143, limit=112 11:10:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 435.613956] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 435.626892] attempt to access beyond end of device [ 435.632867] loop4: rw=1, want=144, limit=112 [ 435.637465] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 435.645537] attempt to access beyond end of device [ 435.650660] loop4: rw=1, want=145, limit=112 [ 435.655231] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 435.667247] attempt to access beyond end of device [ 435.672405] loop4: rw=1, want=2521, limit=112 [ 435.678792] attempt to access beyond end of device [ 435.683908] loop4: rw=1, want=2550, limit=112 [ 435.695591] Buffer I/O error on dev loop4, logical block 2549, lost async page write [ 435.704093] attempt to access beyond end of device [ 435.714975] loop4: rw=1, want=2551, limit=112 11:10:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 435.721937] Buffer I/O error on dev loop4, logical block 2550, lost async page write [ 435.736576] attempt to access beyond end of device [ 435.759599] loop4: rw=1, want=2552, limit=112 11:10:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8000000, 0x297ef) [ 435.776548] attempt to access beyond end of device [ 435.785314] loop4: rw=1, want=2553, limit=112 [ 435.802214] attempt to access beyond end of device [ 435.808177] loop4: rw=1, want=2574, limit=112 [ 435.817305] attempt to access beyond end of device 11:10:03 executing program 3 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 435.826423] loop4: rw=1, want=2575, limit=112 [ 435.837448] attempt to access beyond end of device [ 435.846539] loop4: rw=1, want=2576, limit=112 [ 435.855165] attempt to access beyond end of device [ 435.864943] loop4: rw=1, want=2577, limit=112 [ 435.875092] attempt to access beyond end of device [ 435.884179] loop4: rw=1, want=2626, limit=112 [ 435.891905] attempt to access beyond end of device [ 435.896855] loop4: rw=1, want=2627, limit=112 [ 435.914235] attempt to access beyond end of device [ 435.928764] loop4: rw=1, want=2628, limit=112 [ 435.946067] attempt to access beyond end of device [ 435.956515] loop4: rw=1, want=2629, limit=112 [ 435.967959] attempt to access beyond end of device [ 435.977192] loop4: rw=1, want=2638, limit=112 [ 435.982324] attempt to access beyond end of device [ 435.987443] loop4: rw=1, want=2639, limit=112 [ 435.992280] attempt to access beyond end of device [ 435.997353] loop4: rw=1, want=2640, limit=112 [ 436.002338] attempt to access beyond end of device [ 436.007429] loop4: rw=1, want=2641, limit=112 [ 436.019239] attempt to access beyond end of device [ 436.024674] loop4: rw=1, want=6737, limit=112 [ 436.039326] attempt to access beyond end of device [ 436.044625] loop4: rw=1, want=10833, limit=112 [ 436.059789] attempt to access beyond end of device [ 436.064871] loop4: rw=1, want=14929, limit=112 [ 436.080864] attempt to access beyond end of device [ 436.085948] loop4: rw=1, want=19025, limit=112 [ 436.100532] attempt to access beyond end of device [ 436.105619] loop4: rw=1, want=23121, limit=112 [ 436.120675] attempt to access beyond end of device [ 436.125751] loop4: rw=1, want=27217, limit=112 [ 436.140886] attempt to access beyond end of device [ 436.145966] loop4: rw=1, want=31313, limit=112 [ 436.156726] attempt to access beyond end of device [ 436.162795] loop4: rw=1, want=32993, limit=112 11:10:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8800000, 0x297ef) 11:10:05 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x0, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:05 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:05 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) [ 437.351894] attempt to access beyond end of device [ 437.356877] loop4: rw=1, want=130, limit=112 [ 437.370614] attempt to access beyond end of device [ 437.387211] loop4: rw=1, want=131, limit=112 [ 437.407166] attempt to access beyond end of device [ 437.413198] loop4: rw=1, want=132, limit=112 [ 437.417808] attempt to access beyond end of device [ 437.423169] loop4: rw=1, want=133, limit=112 [ 437.427764] attempt to access beyond end of device [ 437.433631] loop4: rw=1, want=142, limit=112 [ 437.438244] attempt to access beyond end of device [ 437.443779] loop4: rw=1, want=143, limit=112 [ 437.448541] attempt to access beyond end of device 11:10:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x02', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9000000, 0x297ef) [ 437.453952] loop4: rw=1, want=144, limit=112 [ 437.458716] attempt to access beyond end of device [ 437.485594] loop4: rw=1, want=145, limit=112 [ 437.519889] attempt to access beyond end of device [ 437.534249] loop4: rw=1, want=2777, limit=112 [ 437.548229] attempt to access beyond end of device [ 437.558306] loop4: rw=1, want=2806, limit=112 11:10:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x03', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 437.566549] attempt to access beyond end of device [ 437.575782] loop4: rw=1, want=2807, limit=112 [ 437.587630] attempt to access beyond end of device [ 437.618488] loop4: rw=1, want=2808, limit=112 [ 437.634727] attempt to access beyond end of device [ 437.645902] loop4: rw=1, want=2809, limit=112 [ 437.653964] attempt to access beyond end of device [ 437.659106] loop4: rw=1, want=2830, limit=112 [ 437.668308] attempt to access beyond end of device 11:10:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xa000000, 0x297ef) 11:10:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x04', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 437.694818] loop4: rw=1, want=2831, limit=112 [ 437.707392] attempt to access beyond end of device [ 437.729482] loop4: rw=1, want=2832, limit=112 [ 437.749439] attempt to access beyond end of device [ 437.768078] loop4: rw=1, want=2833, limit=112 [ 437.774790] attempt to access beyond end of device [ 437.784981] loop4: rw=1, want=2882, limit=112 [ 437.792215] attempt to access beyond end of device 11:10:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x05', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 437.797899] loop4: rw=1, want=2883, limit=112 [ 437.808578] attempt to access beyond end of device [ 437.833764] loop4: rw=1, want=2884, limit=112 [ 437.852985] attempt to access beyond end of device [ 437.864222] loop4: rw=1, want=2885, limit=112 [ 437.875002] attempt to access beyond end of device [ 437.886113] loop4: rw=1, want=2894, limit=112 [ 437.897021] attempt to access beyond end of device 11:10:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\b', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 437.908072] loop4: rw=1, want=2895, limit=112 [ 437.918654] attempt to access beyond end of device [ 437.936092] loop4: rw=1, want=2896, limit=112 [ 437.958312] attempt to access beyond end of device [ 437.980393] loop4: rw=1, want=2897, limit=112 [ 438.006787] attempt to access beyond end of device [ 438.015648] loop4: rw=1, want=6993, limit=112 [ 438.045589] attempt to access beyond end of device [ 438.052186] loop4: rw=1, want=11089, limit=112 [ 438.087498] attempt to access beyond end of device [ 438.092681] loop4: rw=1, want=15185, limit=112 [ 438.114717] attempt to access beyond end of device [ 438.126578] loop4: rw=1, want=19281, limit=112 [ 438.148453] attempt to access beyond end of device [ 438.156135] loop4: rw=1, want=23377, limit=112 [ 438.179282] attempt to access beyond end of device [ 438.224059] loop4: rw=1, want=27473, limit=112 [ 438.256530] attempt to access beyond end of device [ 438.261668] loop4: rw=1, want=31569, limit=112 [ 438.270855] attempt to access beyond end of device [ 438.275825] loop4: rw=1, want=32993, limit=112 [ 438.332400] attempt to access beyond end of device [ 438.337348] loop0: rw=1, want=130, limit=112 [ 438.345720] attempt to access beyond end of device [ 438.351034] loop0: rw=1, want=131, limit=112 [ 438.355515] attempt to access beyond end of device [ 438.361104] loop0: rw=1, want=132, limit=112 [ 438.365556] attempt to access beyond end of device [ 438.370799] loop0: rw=1, want=133, limit=112 [ 438.375242] attempt to access beyond end of device [ 438.380527] loop0: rw=1, want=142, limit=112 [ 438.384965] attempt to access beyond end of device [ 438.390300] loop0: rw=1, want=143, limit=112 [ 438.394751] attempt to access beyond end of device [ 438.402194] loop0: rw=1, want=144, limit=112 [ 438.406627] attempt to access beyond end of device [ 438.411873] loop0: rw=1, want=145, limit=112 [ 438.422245] attempt to access beyond end of device [ 438.427191] loop0: rw=1, want=4241, limit=112 [ 438.440677] attempt to access beyond end of device [ 438.445635] loop0: rw=1, want=8337, limit=112 [ 438.458220] attempt to access beyond end of device [ 438.467236] loop0: rw=1, want=12433, limit=112 [ 438.476106] attempt to access beyond end of device [ 438.484586] loop0: rw=1, want=13513, limit=112 11:10:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x10', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb000000, 0x297ef) 11:10:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:07 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:07 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x0, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:07 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 439.531290] attempt to access beyond end of device [ 439.536258] loop4: rw=1, want=130, limit=112 [ 439.548524] attempt to access beyond end of device [ 439.554235] loop4: rw=1, want=131, limit=112 [ 439.558988] attempt to access beyond end of device [ 439.573190] loop4: rw=1, want=132, limit=112 11:10:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 439.578103] attempt to access beyond end of device [ 439.595135] loop4: rw=1, want=133, limit=112 [ 439.615547] attempt to access beyond end of device 11:10:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xe0', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 439.637190] loop4: rw=1, want=142, limit=112 [ 439.648387] attempt to access beyond end of device [ 439.664321] loop4: rw=1, want=143, limit=112 [ 439.695433] attempt to access beyond end of device 11:10:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc000000, 0x297ef) 11:10:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 439.719886] loop4: rw=1, want=144, limit=112 [ 439.724337] attempt to access beyond end of device [ 439.729276] loop4: rw=1, want=145, limit=112 11:10:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 439.777034] attempt to access beyond end of device [ 439.809532] loop4: rw=1, want=2585, limit=112 [ 439.815914] attempt to access beyond end of device 11:10:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3fc, 0x0) [ 439.852011] loop4: rw=1, want=2614, limit=112 [ 439.856544] attempt to access beyond end of device [ 439.886288] loop4: rw=1, want=2615, limit=112 11:10:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 439.899470] attempt to access beyond end of device [ 439.917950] loop4: rw=1, want=2616, limit=112 [ 439.929502] attempt to access beyond end of device 11:10:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3fc, 0x0) [ 439.952422] loop4: rw=1, want=2617, limit=112 [ 439.963909] attempt to access beyond end of device [ 439.968888] loop4: rw=1, want=2638, limit=112 11:10:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xd000000, 0x297ef) [ 440.016924] attempt to access beyond end of device [ 440.034251] loop4: rw=1, want=2639, limit=112 [ 440.045319] attempt to access beyond end of device [ 440.061339] loop4: rw=1, want=2640, limit=112 [ 440.075804] attempt to access beyond end of device [ 440.086584] loop4: rw=1, want=2641, limit=112 [ 440.095919] attempt to access beyond end of device [ 440.118140] loop4: rw=1, want=2690, limit=112 [ 440.127489] attempt to access beyond end of device [ 440.139444] loop4: rw=1, want=2691, limit=112 [ 440.144010] attempt to access beyond end of device [ 440.148949] loop4: rw=1, want=2692, limit=112 [ 440.167101] attempt to access beyond end of device [ 440.180461] loop4: rw=1, want=2693, limit=112 [ 440.184993] attempt to access beyond end of device [ 440.199443] loop4: rw=1, want=2702, limit=112 [ 440.208254] attempt to access beyond end of device [ 440.227206] loop4: rw=1, want=2703, limit=112 [ 440.235846] attempt to access beyond end of device [ 440.244867] loop4: rw=1, want=2704, limit=112 [ 440.253675] attempt to access beyond end of device [ 440.258777] loop4: rw=1, want=2705, limit=112 [ 440.278695] attempt to access beyond end of device [ 440.287359] loop4: rw=1, want=6801, limit=112 11:10:08 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 440.323923] attempt to access beyond end of device [ 440.338875] loop4: rw=1, want=10897, limit=112 [ 440.382657] attempt to access beyond end of device [ 440.387607] loop4: rw=1, want=14993, limit=112 [ 440.420671] attempt to access beyond end of device [ 440.425621] loop4: rw=1, want=19089, limit=112 [ 440.440330] attempt to access beyond end of device [ 440.445274] loop4: rw=1, want=23185, limit=112 [ 440.456093] attempt to access beyond end of device [ 440.461126] loop4: rw=1, want=27281, limit=112 [ 440.470490] attempt to access beyond end of device [ 440.479934] loop4: rw=1, want=31377, limit=112 [ 440.489184] attempt to access beyond end of device [ 440.495289] loop4: rw=1, want=32993, limit=112 [ 441.269493] net_ratelimit: 26 callbacks suppressed [ 441.269503] protocol 88fb is buggy, dev hsr_slave_0 [ 441.279632] protocol 88fb is buggy, dev hsr_slave_1 [ 441.284797] protocol 88fb is buggy, dev hsr_slave_0 [ 441.289986] protocol 88fb is buggy, dev hsr_slave_1 [ 441.295120] protocol 88fb is buggy, dev hsr_slave_0 [ 441.300250] protocol 88fb is buggy, dev hsr_slave_1 [ 441.305414] protocol 88fb is buggy, dev hsr_slave_0 [ 441.310546] protocol 88fb is buggy, dev hsr_slave_1 [ 441.749459] protocol 88fb is buggy, dev hsr_slave_0 [ 441.754594] protocol 88fb is buggy, dev hsr_slave_1 11:10:09 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3fc, 0x0) 11:10:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xe000000, 0x297ef) 11:10:09 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:09 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 441.855936] attempt to access beyond end of device [ 441.881928] loop4: rw=1, want=130, limit=112 11:10:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) 11:10:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\b', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 441.905768] buffer_io_error: 70 callbacks suppressed [ 441.905778] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 441.936903] attempt to access beyond end of device [ 441.969436] loop4: rw=1, want=131, limit=112 11:10:10 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 441.996992] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 442.031823] attempt to access beyond end of device [ 442.046567] loop4: rw=1, want=132, limit=112 [ 442.060149] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 442.085022] attempt to access beyond end of device [ 442.106215] loop4: rw=1, want=133, limit=112 [ 442.121398] Buffer I/O error on dev loop4, logical block 132, lost async page write 11:10:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf000000, 0x297ef) 11:10:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) [ 442.162391] attempt to access beyond end of device [ 442.167352] loop4: rw=1, want=142, limit=112 [ 442.210697] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 442.260991] attempt to access beyond end of device [ 442.284350] loop4: rw=1, want=143, limit=112 [ 442.303522] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 442.349501] attempt to access beyond end of device [ 442.354475] loop4: rw=1, want=144, limit=112 [ 442.358897] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 442.417349] attempt to access beyond end of device [ 442.436363] loop4: rw=1, want=145, limit=112 [ 442.447524] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 442.466533] attempt to access beyond end of device [ 442.474934] loop4: rw=1, want=2905, limit=112 [ 442.480229] attempt to access beyond end of device [ 442.485174] loop1: rw=1048577, want=60357, limit=112 [ 442.492776] attempt to access beyond end of device [ 442.497724] loop4: rw=1, want=2934, limit=112 [ 442.502859] Buffer I/O error on dev loop4, logical block 2933, lost async page write [ 442.514308] attempt to access beyond end of device [ 442.519261] loop4: rw=1, want=2935, limit=112 [ 442.527286] Buffer I/O error on dev loop4, logical block 2934, lost async page write [ 442.538695] attempt to access beyond end of device [ 442.547299] loop4: rw=1, want=2936, limit=112 [ 442.555736] attempt to access beyond end of device [ 442.564341] loop4: rw=1, want=2937, limit=112 [ 442.568880] attempt to access beyond end of device [ 442.577598] loop4: rw=1, want=2958, limit=112 [ 442.585950] attempt to access beyond end of device [ 442.594513] loop4: rw=1, want=2959, limit=112 [ 442.599052] attempt to access beyond end of device [ 442.607687] loop4: rw=1, want=2960, limit=112 [ 442.616051] attempt to access beyond end of device [ 442.624709] loop4: rw=1, want=2961, limit=112 [ 442.629274] attempt to access beyond end of device [ 442.637773] loop4: rw=1, want=3010, limit=112 [ 442.649200] attempt to access beyond end of device [ 442.657820] loop4: rw=1, want=3011, limit=112 [ 442.666027] attempt to access beyond end of device [ 442.674365] loop4: rw=1, want=3012, limit=112 [ 442.678904] attempt to access beyond end of device [ 442.687233] loop4: rw=1, want=3013, limit=112 [ 442.695101] attempt to access beyond end of device [ 442.703391] loop4: rw=1, want=3022, limit=112 [ 442.707928] attempt to access beyond end of device [ 442.715954] loop4: rw=1, want=3023, limit=112 [ 442.726505] attempt to access beyond end of device [ 442.734611] loop4: rw=1, want=3024, limit=112 [ 442.739182] attempt to access beyond end of device [ 442.745891] loop4: rw=1, want=3025, limit=112 [ 442.754283] attempt to access beyond end of device [ 442.759203] loop4: rw=1, want=7121, limit=112 [ 442.768285] attempt to access beyond end of device [ 442.773603] loop4: rw=1, want=11217, limit=112 [ 442.786599] attempt to access beyond end of device [ 442.791829] loop4: rw=1, want=15313, limit=112 [ 442.805029] attempt to access beyond end of device [ 442.810869] loop4: rw=1, want=19409, limit=112 [ 442.824011] attempt to access beyond end of device [ 442.828955] loop4: rw=1, want=23505, limit=112 [ 442.842074] attempt to access beyond end of device [ 442.847019] loop4: rw=1, want=27601, limit=112 [ 442.860054] attempt to access beyond end of device [ 442.865007] loop4: rw=1, want=31697, limit=112 [ 442.874168] attempt to access beyond end of device [ 442.879116] loop4: rw=1, want=32993, limit=112 11:10:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffff, 0x297ef) 11:10:12 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) 11:10:12 executing program 2: socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 444.038386] attempt to access beyond end of device [ 444.043480] loop4: rw=1, want=130, limit=112 [ 444.067162] attempt to access beyond end of device 11:10:12 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) [ 444.087083] loop4: rw=1, want=131, limit=112 [ 444.100600] attempt to access beyond end of device [ 444.112582] loop4: rw=1, want=132, limit=112 [ 444.117492] attempt to access beyond end of device [ 444.122906] loop4: rw=1, want=133, limit=112 [ 444.127597] attempt to access beyond end of device [ 444.132976] loop4: rw=1, want=142, limit=112 [ 444.160417] attempt to access beyond end of device 11:10:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 444.192062] loop4: rw=1, want=143, limit=112 [ 444.211901] attempt to access beyond end of device [ 444.234020] loop4: rw=1, want=144, limit=112 [ 444.254048] attempt to access beyond end of device 11:10:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x10000000, 0x297ef) [ 444.277328] loop4: rw=1, want=145, limit=112 11:10:12 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) 11:10:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 444.321024] attempt to access beyond end of device [ 444.340265] loop4: rw=1, want=3545, limit=112 [ 444.373985] attempt to access beyond end of device [ 444.378954] loop4: rw=1, want=3574, limit=112 [ 444.416313] attempt to access beyond end of device [ 444.426594] loop4: rw=1, want=3575, limit=112 [ 444.452705] attempt to access beyond end of device 11:10:12 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) [ 444.469161] loop4: rw=1, want=3576, limit=112 [ 444.496465] attempt to access beyond end of device [ 444.514084] loop4: rw=1, want=3577, limit=112 [ 444.531238] attempt to access beyond end of device [ 444.555486] loop4: rw=1, want=3598, limit=112 [ 444.586400] attempt to access beyond end of device [ 444.602887] loop4: rw=1, want=3599, limit=112 [ 444.614801] attempt to access beyond end of device [ 444.634640] loop4: rw=1, want=3600, limit=112 [ 444.639180] attempt to access beyond end of device [ 444.662837] loop4: rw=1, want=3601, limit=112 [ 444.667421] attempt to access beyond end of device [ 444.699456] loop4: rw=1, want=3650, limit=112 [ 444.709714] attempt to access beyond end of device [ 444.714660] loop4: rw=1, want=3651, limit=112 [ 444.719195] attempt to access beyond end of device [ 444.739451] loop4: rw=1, want=3652, limit=112 [ 444.750443] attempt to access beyond end of device [ 444.755396] loop4: rw=1, want=3653, limit=112 [ 444.769475] attempt to access beyond end of device [ 444.779449] loop4: rw=1, want=3662, limit=112 [ 444.789734] attempt to access beyond end of device [ 444.794676] loop4: rw=1, want=3663, limit=112 [ 444.799198] attempt to access beyond end of device [ 444.819018] loop4: rw=1, want=3664, limit=112 [ 444.823605] attempt to access beyond end of device [ 444.828556] loop4: rw=1, want=3665, limit=112 [ 444.853586] attempt to access beyond end of device [ 444.858554] loop4: rw=1, want=7761, limit=112 [ 444.888759] attempt to access beyond end of device [ 444.909582] loop4: rw=1, want=11857, limit=112 [ 444.930219] attempt to access beyond end of device [ 444.939442] loop4: rw=1, want=15953, limit=112 [ 444.964063] attempt to access beyond end of device [ 444.969082] loop4: rw=1, want=20049, limit=112 [ 444.977244] attempt to access beyond end of device [ 444.982673] loop0: rw=1, want=130, limit=112 [ 444.987120] attempt to access beyond end of device [ 444.988298] attempt to access beyond end of device [ 444.992473] loop0: rw=1, want=131, limit=112 [ 444.998251] loop4: rw=1, want=24145, limit=112 [ 445.001941] attempt to access beyond end of device [ 445.011485] loop0: rw=1, want=132, limit=112 [ 445.015957] attempt to access beyond end of device [ 445.017558] attempt to access beyond end of device [ 445.021332] loop0: rw=1, want=133, limit=112 [ 445.030751] attempt to access beyond end of device [ 445.032188] loop4: rw=1, want=28241, limit=112 [ 445.035689] loop0: rw=1, want=142, limit=112 [ 445.045544] attempt to access beyond end of device [ 445.050832] loop0: rw=1, want=143, limit=112 [ 445.051889] attempt to access beyond end of device [ 445.055294] attempt to access beyond end of device [ 445.065470] loop4: rw=1, want=32337, limit=112 [ 445.066061] loop0: rw=1, want=144, limit=112 [ 445.073501] attempt to access beyond end of device [ 445.075043] attempt to access beyond end of device [ 445.084550] loop0: rw=1, want=145, limit=112 [ 445.084776] loop4: rw=1, want=32993, limit=112 [ 445.095676] attempt to access beyond end of device [ 445.100711] loop0: rw=1, want=4241, limit=112 [ 445.114266] attempt to access beyond end of device [ 445.119209] loop0: rw=1, want=8337, limit=112 [ 445.129601] attempt to access beyond end of device [ 445.134551] loop0: rw=1, want=9137, limit=112 11:10:14 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x11000000, 0x297ef) 11:10:14 executing program 2: socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:14 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 446.246032] attempt to access beyond end of device [ 446.259645] loop4: rw=1, want=130, limit=112 [ 446.272424] attempt to access beyond end of device [ 446.290491] loop4: rw=1, want=131, limit=112 11:10:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 446.309483] attempt to access beyond end of device [ 446.331726] loop4: rw=1, want=132, limit=112 11:10:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 446.357681] attempt to access beyond end of device [ 446.388632] loop4: rw=1, want=133, limit=112 11:10:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x12000000, 0x297ef) [ 446.415134] attempt to access beyond end of device [ 446.444887] loop4: rw=1, want=142, limit=112 [ 446.458830] attempt to access beyond end of device [ 446.478469] loop4: rw=1, want=143, limit=112 [ 446.501001] attempt to access beyond end of device 11:10:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 446.522398] loop4: rw=1, want=144, limit=112 [ 446.540919] attempt to access beyond end of device [ 446.558699] loop4: rw=1, want=145, limit=112 [ 446.591721] attempt to access beyond end of device [ 446.625255] loop4: rw=1, want=2649, limit=112 [ 446.640922] attempt to access beyond end of device [ 446.664380] loop4: rw=1, want=2678, limit=112 11:10:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) [ 446.682756] attempt to access beyond end of device [ 446.713999] loop4: rw=1, want=2679, limit=112 [ 446.729646] attempt to access beyond end of device [ 446.751644] loop4: rw=1, want=2680, limit=112 [ 446.775358] attempt to access beyond end of device [ 446.790631] loop4: rw=1, want=2681, limit=112 [ 446.804967] attempt to access beyond end of device [ 446.812657] loop4: rw=1, want=2702, limit=112 [ 446.817415] attempt to access beyond end of device [ 446.828208] loop4: rw=1, want=2703, limit=112 [ 446.835791] attempt to access beyond end of device [ 446.846379] loop4: rw=1, want=2704, limit=112 [ 446.853664] attempt to access beyond end of device [ 446.858775] loop4: rw=1, want=2705, limit=112 [ 446.868536] attempt to access beyond end of device [ 446.881960] loop4: rw=1, want=2754, limit=112 [ 446.892284] attempt to access beyond end of device [ 446.897559] loop4: rw=1, want=2755, limit=112 [ 446.907389] attempt to access beyond end of device [ 446.915229] loop4: rw=1, want=2756, limit=112 [ 446.924967] buffer_io_error: 64 callbacks suppressed [ 446.924978] Buffer I/O error on dev loop4, logical block 2755, lost async page write [ 446.945756] attempt to access beyond end of device [ 446.951230] loop4: rw=1, want=2757, limit=112 [ 446.955941] Buffer I/O error on dev loop4, logical block 2756, lost async page write [ 446.971007] attempt to access beyond end of device [ 446.976114] loop4: rw=1, want=2766, limit=112 [ 446.985500] Buffer I/O error on dev loop4, logical block 2765, lost async page write [ 446.996176] attempt to access beyond end of device [ 447.006025] loop4: rw=1, want=2767, limit=112 [ 447.013495] Buffer I/O error on dev loop4, logical block 2766, lost async page write [ 447.026297] attempt to access beyond end of device [ 447.033985] loop4: rw=1, want=2768, limit=112 [ 447.038670] Buffer I/O error on dev loop4, logical block 2767, lost async page write [ 447.054588] attempt to access beyond end of device [ 447.062274] loop4: rw=1, want=2769, limit=112 [ 447.066978] Buffer I/O error on dev loop4, logical block 2768, lost async page write [ 447.125578] attempt to access beyond end of device [ 447.141736] loop4: rw=1, want=6865, limit=112 [ 447.155341] attempt to access beyond end of device [ 447.160463] loop4: rw=1, want=10961, limit=112 [ 447.174275] attempt to access beyond end of device [ 447.179294] loop4: rw=1, want=15057, limit=112 [ 447.190630] attempt to access beyond end of device [ 447.195562] loop4: rw=1, want=19153, limit=112 [ 447.205453] attempt to access beyond end of device [ 447.211333] loop4: rw=1, want=23249, limit=112 [ 447.221289] attempt to access beyond end of device [ 447.226223] loop4: rw=1, want=27345, limit=112 [ 447.239581] attempt to access beyond end of device [ 447.244525] loop4: rw=1, want=31441, limit=112 [ 447.254214] attempt to access beyond end of device [ 447.259163] loop4: rw=1, want=32993, limit=112 [ 447.509459] net_ratelimit: 26 callbacks suppressed [ 447.509465] protocol 88fb is buggy, dev hsr_slave_0 [ 447.519528] protocol 88fb is buggy, dev hsr_slave_1 [ 447.524641] protocol 88fb is buggy, dev hsr_slave_0 [ 447.529713] protocol 88fb is buggy, dev hsr_slave_1 [ 447.534764] protocol 88fb is buggy, dev hsr_slave_0 [ 447.539930] protocol 88fb is buggy, dev hsr_slave_1 [ 447.544999] protocol 88fb is buggy, dev hsr_slave_0 [ 447.550095] protocol 88fb is buggy, dev hsr_slave_1 [ 447.989500] protocol 88fb is buggy, dev hsr_slave_0 [ 447.994724] protocol 88fb is buggy, dev hsr_slave_1 11:10:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:16 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x0, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x13000000, 0x297ef) 11:10:16 executing program 2: socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:16 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) [ 448.443915] attempt to access beyond end of device [ 448.466668] loop4: rw=1, want=130, limit=112 [ 448.489541] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 448.513604] attempt to access beyond end of device [ 448.518680] loop4: rw=1, want=131, limit=112 [ 448.523396] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 448.531465] attempt to access beyond end of device [ 448.536640] loop4: rw=1, want=132, limit=112 [ 448.554223] Buffer I/O error on dev loop4, logical block 131, lost async page write 11:10:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x14000000, 0x297ef) [ 448.582024] attempt to access beyond end of device [ 448.626924] loop4: rw=1, want=133, limit=112 [ 448.650653] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 448.662003] attempt to access beyond end of device [ 448.680322] loop4: rw=1, want=142, limit=112 [ 448.689446] attempt to access beyond end of device 11:10:16 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 448.700705] loop4: rw=1, want=143, limit=112 [ 448.713465] attempt to access beyond end of device [ 448.725997] loop4: rw=1, want=144, limit=112 [ 448.735232] attempt to access beyond end of device [ 448.746015] loop4: rw=1, want=145, limit=112 11:10:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x15000000, 0x297ef) [ 448.794309] attempt to access beyond end of device [ 448.799751] loop4: rw=1, want=4241, limit=112 [ 448.820606] attempt to access beyond end of device [ 448.832466] loop4: rw=1, want=4377, limit=112 [ 448.871433] attempt to access beyond end of device [ 448.882431] loop4: rw=1, want=4406, limit=112 [ 448.900710] attempt to access beyond end of device [ 448.917268] loop4: rw=1, want=4407, limit=112 [ 448.936786] attempt to access beyond end of device 11:10:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 448.961195] loop4: rw=1, want=4408, limit=112 [ 448.969202] attempt to access beyond end of device [ 448.990901] loop4: rw=1, want=4409, limit=112 [ 448.998885] attempt to access beyond end of device [ 449.013238] loop4: rw=1, want=4430, limit=112 [ 449.018190] attempt to access beyond end of device [ 449.028672] loop4: rw=1, want=4431, limit=112 [ 449.039221] attempt to access beyond end of device [ 449.054922] loop4: rw=1, want=4432, limit=112 11:10:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x16000000, 0x297ef) [ 449.062755] attempt to access beyond end of device [ 449.068139] loop4: rw=1, want=4433, limit=112 [ 449.078321] attempt to access beyond end of device [ 449.086639] loop4: rw=1, want=4482, limit=112 [ 449.112219] attempt to access beyond end of device [ 449.138799] loop4: rw=1, want=4483, limit=112 [ 449.164284] attempt to access beyond end of device [ 449.188998] loop4: rw=1, want=4484, limit=112 [ 449.205854] attempt to access beyond end of device [ 449.217337] loop4: rw=1, want=4485, limit=112 [ 449.225233] attempt to access beyond end of device [ 449.235774] loop4: rw=1, want=4494, limit=112 [ 449.243863] attempt to access beyond end of device [ 449.249263] loop4: rw=1, want=4495, limit=112 [ 449.266315] attempt to access beyond end of device [ 449.275317] loop4: rw=1, want=4496, limit=112 [ 449.285599] attempt to access beyond end of device [ 449.306375] loop4: rw=1, want=4497, limit=112 [ 449.346410] attempt to access beyond end of device [ 449.392961] loop4: rw=1, want=8593, limit=112 [ 449.413704] attempt to access beyond end of device [ 449.418660] loop4: rw=1, want=12689, limit=112 [ 449.432790] attempt to access beyond end of device [ 449.437739] loop4: rw=1, want=16785, limit=112 [ 449.453003] attempt to access beyond end of device [ 449.457962] loop4: rw=1, want=20881, limit=112 [ 449.471452] attempt to access beyond end of device [ 449.476425] loop4: rw=1, want=24977, limit=112 [ 449.489949] attempt to access beyond end of device [ 449.494896] loop4: rw=1, want=29073, limit=112 [ 449.508384] attempt to access beyond end of device [ 449.513413] loop4: rw=1, want=32993, limit=112 11:10:18 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x0, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:18 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) 11:10:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x17000000, 0x297ef) 11:10:18 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:18 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 450.732740] attempt to access beyond end of device [ 450.737718] loop4: rw=1, want=130, limit=112 [ 450.760299] attempt to access beyond end of device [ 450.765430] loop4: rw=1, want=131, limit=112 [ 450.771339] attempt to access beyond end of device [ 450.783906] loop4: rw=1, want=132, limit=112 [ 450.790600] attempt to access beyond end of device [ 450.818530] loop4: rw=1, want=133, limit=112 11:10:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x18000000, 0x297ef) 11:10:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 450.850777] attempt to access beyond end of device [ 450.872176] loop4: rw=1, want=142, limit=112 [ 450.898756] attempt to access beyond end of device [ 450.924314] loop4: rw=1, want=143, limit=112 [ 450.947307] attempt to access beyond end of device 11:10:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xfc', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 450.967948] loop4: rw=1, want=144, limit=112 [ 450.986819] attempt to access beyond end of device [ 451.007746] loop4: rw=1, want=145, limit=112 [ 451.051523] attempt to access beyond end of device [ 451.077325] loop4: rw=1, want=3097, limit=112 11:10:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x19000000, 0x297ef) [ 451.109530] attempt to access beyond end of device [ 451.127785] loop4: rw=1, want=3126, limit=112 [ 451.143733] attempt to access beyond end of device [ 451.159540] loop4: rw=1, want=3127, limit=112 11:10:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xfe', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 451.183960] attempt to access beyond end of device [ 451.203304] loop4: rw=1, want=3128, limit=112 [ 451.219628] attempt to access beyond end of device [ 451.233955] loop4: rw=1, want=3129, limit=112 [ 451.246884] attempt to access beyond end of device [ 451.264098] loop4: rw=1, want=3150, limit=112 [ 451.282074] attempt to access beyond end of device [ 451.297776] loop4: rw=1, want=3151, limit=112 [ 451.314368] attempt to access beyond end of device [ 451.340069] loop4: rw=1, want=3152, limit=112 11:10:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 451.363863] attempt to access beyond end of device [ 451.386774] loop4: rw=1, want=3153, limit=112 [ 451.406548] attempt to access beyond end of device [ 451.427654] loop4: rw=1, want=3202, limit=112 [ 451.447448] attempt to access beyond end of device [ 451.470087] loop4: rw=1, want=3203, limit=112 [ 451.479053] attempt to access beyond end of device [ 451.498747] loop4: rw=1, want=3204, limit=112 [ 451.507625] attempt to access beyond end of device [ 451.516866] loop4: rw=1, want=3205, limit=112 [ 451.525268] attempt to access beyond end of device [ 451.534495] loop4: rw=1, want=3214, limit=112 [ 451.539176] attempt to access beyond end of device [ 451.548041] loop4: rw=1, want=3215, limit=112 [ 451.599470] attempt to access beyond end of device [ 451.604424] loop4: rw=1, want=3216, limit=112 [ 451.608953] attempt to access beyond end of device [ 451.639542] loop4: rw=1, want=3217, limit=112 [ 451.661277] attempt to access beyond end of device [ 451.666225] loop4: rw=1, want=7313, limit=112 [ 451.680274] attempt to access beyond end of device [ 451.685216] loop4: rw=1, want=11409, limit=112 [ 451.698512] attempt to access beyond end of device [ 451.703856] loop4: rw=1, want=15505, limit=112 [ 451.717209] attempt to access beyond end of device [ 451.722261] loop4: rw=1, want=19601, limit=112 [ 451.735549] attempt to access beyond end of device [ 451.740630] loop4: rw=1, want=23697, limit=112 [ 451.754050] attempt to access beyond end of device [ 451.759043] loop4: rw=1, want=27793, limit=112 [ 451.772493] attempt to access beyond end of device [ 451.777438] loop4: rw=1, want=31889, limit=112 [ 451.786750] attempt to access beyond end of device [ 451.792511] loop4: rw=1, want=32993, limit=112 11:10:20 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x0, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1a000000, 0x297ef) 11:10:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:20 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:20 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:20 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 452.895052] attempt to access beyond end of device [ 452.925299] loop4: rw=1, want=130, limit=112 [ 452.935697] buffer_io_error: 44 callbacks suppressed [ 452.935707] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 452.957941] attempt to access beyond end of device [ 452.965469] loop4: rw=1, want=131, limit=112 [ 452.970135] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 452.978343] attempt to access beyond end of device [ 452.983545] loop4: rw=1, want=132, limit=112 [ 452.988481] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 452.997338] attempt to access beyond end of device [ 453.002622] loop4: rw=1, want=133, limit=112 [ 453.007265] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 453.037330] attempt to access beyond end of device 11:10:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 453.061972] loop4: rw=1, want=142, limit=112 [ 453.077776] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 453.104601] attempt to access beyond end of device [ 453.121261] loop4: rw=1, want=143, limit=112 [ 453.141238] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 453.163009] attempt to access beyond end of device 11:10:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1b000000, 0x297ef) [ 453.183782] loop4: rw=1, want=144, limit=112 [ 453.188216] Buffer I/O error on dev loop4, logical block 143, lost async page write 11:10:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 453.231287] attempt to access beyond end of device [ 453.249421] loop4: rw=1, want=145, limit=112 [ 453.253852] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 453.294660] attempt to access beyond end of device [ 453.334224] loop4: rw=1, want=4241, limit=112 [ 453.353105] attempt to access beyond end of device [ 453.358058] loop4: rw=1, want=4313, limit=112 11:10:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 453.389827] attempt to access beyond end of device [ 453.394838] loop4: rw=1, want=4342, limit=112 [ 453.419419] Buffer I/O error on dev loop4, logical block 4341, lost async page write 11:10:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1c000000, 0x297ef) [ 453.456903] attempt to access beyond end of device [ 453.480779] loop4: rw=1, want=4343, limit=112 [ 453.502406] Buffer I/O error on dev loop4, logical block 4342, lost async page write [ 453.531778] attempt to access beyond end of device [ 453.547147] loop4: rw=1, want=4344, limit=112 11:10:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 453.572932] attempt to access beyond end of device [ 453.577880] loop4: rw=1, want=4345, limit=112 [ 453.605094] attempt to access beyond end of device [ 453.621717] loop4: rw=1, want=4366, limit=112 [ 453.636636] attempt to access beyond end of device [ 453.652113] loop4: rw=1, want=4367, limit=112 [ 453.665460] attempt to access beyond end of device [ 453.681771] loop4: rw=1, want=4368, limit=112 [ 453.697336] attempt to access beyond end of device [ 453.713048] loop4: rw=1, want=4369, limit=112 [ 453.726804] attempt to access beyond end of device [ 453.744673] loop4: rw=1, want=4418, limit=112 [ 453.749442] net_ratelimit: 26 callbacks suppressed [ 453.749451] protocol 88fb is buggy, dev hsr_slave_0 [ 453.757610] attempt to access beyond end of device [ 453.759536] protocol 88fb is buggy, dev hsr_slave_1 [ 453.764427] loop4: rw=1, want=4419, limit=112 [ 453.769538] protocol 88fb is buggy, dev hsr_slave_0 [ 453.778994] protocol 88fb is buggy, dev hsr_slave_1 [ 453.784149] protocol 88fb is buggy, dev hsr_slave_0 [ 453.789207] protocol 88fb is buggy, dev hsr_slave_1 [ 453.789555] attempt to access beyond end of device [ 453.794361] protocol 88fb is buggy, dev hsr_slave_0 [ 453.799175] loop4: rw=1, want=4420, limit=112 [ 453.804242] protocol 88fb is buggy, dev hsr_slave_1 [ 453.814408] attempt to access beyond end of device [ 453.823890] loop4: rw=1, want=4421, limit=112 [ 453.835967] attempt to access beyond end of device [ 453.841009] loop4: rw=1, want=4430, limit=112 [ 453.845562] attempt to access beyond end of device [ 453.880533] loop4: rw=1, want=4431, limit=112 [ 453.899123] attempt to access beyond end of device [ 453.910606] loop4: rw=1, want=4432, limit=112 [ 453.925515] attempt to access beyond end of device [ 453.946903] loop4: rw=1, want=4433, limit=112 [ 453.971583] attempt to access beyond end of device [ 453.976527] loop4: rw=1, want=8529, limit=112 [ 454.054042] attempt to access beyond end of device [ 454.058996] loop4: rw=1, want=12625, limit=112 [ 454.074090] attempt to access beyond end of device [ 454.079045] loop4: rw=1, want=16721, limit=112 [ 454.093610] attempt to access beyond end of device [ 454.098558] loop4: rw=1, want=20817, limit=112 [ 454.112522] attempt to access beyond end of device [ 454.117480] loop4: rw=1, want=24913, limit=112 [ 454.127994] attempt to access beyond end of device [ 454.133035] loop4: rw=1, want=29009, limit=112 [ 454.144000] attempt to access beyond end of device [ 454.148935] loop4: rw=1, want=32993, limit=112 [ 454.154368] attempt to access beyond end of device [ 454.160893] loop1: rw=1048577, want=5749, limit=112 [ 454.229496] protocol 88fb is buggy, dev hsr_slave_0 [ 454.234589] protocol 88fb is buggy, dev hsr_slave_1 11:10:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:23 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x20000000, 0x297ef) 11:10:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:23 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 455.221271] attempt to access beyond end of device [ 455.249861] loop4: rw=1, want=130, limit=112 [ 455.256881] attempt to access beyond end of device [ 455.265729] loop4: rw=1, want=131, limit=112 [ 455.271990] attempt to access beyond end of device [ 455.282696] loop4: rw=1, want=132, limit=112 [ 455.287398] attempt to access beyond end of device [ 455.292711] loop4: rw=1, want=133, limit=112 [ 455.297308] attempt to access beyond end of device [ 455.302825] loop4: rw=1, want=142, limit=112 [ 455.307437] attempt to access beyond end of device [ 455.312685] loop4: rw=1, want=143, limit=112 [ 455.317555] attempt to access beyond end of device [ 455.332963] loop4: rw=1, want=144, limit=112 11:10:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x20829202, 0x297ef) 11:10:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 455.354102] attempt to access beyond end of device [ 455.361765] loop4: rw=1, want=145, limit=112 [ 455.373074] attempt to access beyond end of device [ 455.386325] loop4: rw=1, want=3353, limit=112 [ 455.395642] attempt to access beyond end of device [ 455.418789] loop4: rw=1, want=3382, limit=112 [ 455.426819] attempt to access beyond end of device [ 455.439267] loop4: rw=1, want=3383, limit=112 [ 455.478299] attempt to access beyond end of device 11:10:23 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 455.501398] loop4: rw=1, want=3384, limit=112 [ 455.518845] attempt to access beyond end of device [ 455.525346] loop4: rw=1, want=3385, limit=112 [ 455.535170] attempt to access beyond end of device [ 455.544258] loop4: rw=1, want=3406, limit=112 11:10:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8e0b0000, 0x297ef) [ 455.559066] attempt to access beyond end of device [ 455.585476] loop4: rw=1, want=3407, limit=112 [ 455.598711] attempt to access beyond end of device [ 455.619516] loop4: rw=1, want=3408, limit=112 [ 455.633898] attempt to access beyond end of device [ 455.644659] loop4: rw=1, want=3409, limit=112 [ 455.658811] attempt to access beyond end of device [ 455.667990] loop4: rw=1, want=3458, limit=112 [ 455.673772] attempt to access beyond end of device 11:10:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 455.700836] loop4: rw=1, want=3459, limit=112 [ 455.719068] attempt to access beyond end of device [ 455.740903] loop4: rw=1, want=3460, limit=112 [ 455.765183] attempt to access beyond end of device [ 455.772608] loop4: rw=1, want=3461, limit=112 [ 455.777357] attempt to access beyond end of device [ 455.786699] loop4: rw=1, want=3470, limit=112 [ 455.793497] attempt to access beyond end of device [ 455.826170] loop4: rw=1, want=3471, limit=112 [ 455.839181] attempt to access beyond end of device [ 455.856176] loop4: rw=1, want=3472, limit=112 [ 455.871092] attempt to access beyond end of device [ 455.887538] loop4: rw=1, want=3473, limit=112 [ 455.905430] attempt to access beyond end of device [ 455.913969] loop4: rw=1, want=7569, limit=112 [ 455.936374] attempt to access beyond end of device [ 455.945303] loop4: rw=1, want=11665, limit=112 [ 455.966056] attempt to access beyond end of device [ 455.974150] loop4: rw=1, want=15761, limit=112 [ 455.996061] attempt to access beyond end of device [ 456.004126] loop4: rw=1, want=19857, limit=112 [ 456.024093] attempt to access beyond end of device [ 456.029181] loop4: rw=1, want=23953, limit=112 [ 456.052535] attempt to access beyond end of device [ 456.064548] loop4: rw=1, want=28049, limit=112 [ 456.103538] attempt to access beyond end of device [ 456.110219] loop4: rw=1, want=32145, limit=112 [ 456.122369] attempt to access beyond end of device [ 456.127319] loop4: rw=1, want=32993, limit=112 11:10:25 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:25 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:25 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf0ffffff, 0x297ef) 11:10:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 457.261636] attempt to access beyond end of device [ 457.266623] loop4: rw=1, want=130, limit=112 [ 457.298107] attempt to access beyond end of device 11:10:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf6ff0000, 0x297ef) [ 457.312597] loop4: rw=1, want=131, limit=112 [ 457.323447] attempt to access beyond end of device [ 457.328731] loop4: rw=1, want=132, limit=112 [ 457.334877] attempt to access beyond end of device [ 457.340275] loop4: rw=1, want=133, limit=112 [ 457.350129] attempt to access beyond end of device [ 457.355221] loop4: rw=1, want=142, limit=112 11:10:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 457.365429] attempt to access beyond end of device [ 457.376275] loop4: rw=1, want=143, limit=112 [ 457.395817] attempt to access beyond end of device [ 457.403770] loop4: rw=1, want=144, limit=112 [ 457.409929] attempt to access beyond end of device [ 457.415195] loop4: rw=1, want=145, limit=112 [ 457.428224] attempt to access beyond end of device [ 457.434482] loop4: rw=1, want=4241, limit=112 [ 457.448780] attempt to access beyond end of device 11:10:25 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 457.470521] loop4: rw=1, want=7513, limit=112 [ 457.485622] attempt to access beyond end of device [ 457.496318] loop4: rw=1, want=7542, limit=112 [ 457.518672] attempt to access beyond end of device [ 457.529620] loop4: rw=1, want=7543, limit=112 [ 457.547028] attempt to access beyond end of device [ 457.563993] loop4: rw=1, want=7544, limit=112 11:10:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 457.579917] attempt to access beyond end of device [ 457.596791] loop4: rw=1, want=7545, limit=112 [ 457.608484] FAT-fs (loop0): bogus number of reserved sectors [ 457.613442] attempt to access beyond end of device [ 457.614407] FAT-fs (loop0): Can't find a valid FAT filesystem [ 457.623416] loop4: rw=1, want=7566, limit=112 [ 457.649974] attempt to access beyond end of device [ 457.665330] loop4: rw=1, want=7567, limit=112 [ 457.673616] attempt to access beyond end of device [ 457.678743] loop4: rw=1, want=7568, limit=112 [ 457.687150] attempt to access beyond end of device [ 457.695789] loop4: rw=1, want=7569, limit=112 [ 457.704111] attempt to access beyond end of device [ 457.709307] loop4: rw=1, want=7618, limit=112 [ 457.717717] attempt to access beyond end of device [ 457.726400] loop4: rw=1, want=7619, limit=112 [ 457.734784] attempt to access beyond end of device [ 457.743663] loop4: rw=1, want=7620, limit=112 [ 457.748375] attempt to access beyond end of device 11:10:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xff0f0000, 0x297ef) [ 457.795989] loop4: rw=1, want=7621, limit=112 [ 457.845327] attempt to access beyond end of device [ 457.898900] loop4: rw=1, want=7630, limit=112 [ 457.945098] buffer_io_error: 58 callbacks suppressed [ 457.945110] Buffer I/O error on dev loop4, logical block 7629, lost async page write [ 457.999733] attempt to access beyond end of device 11:10:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 458.047665] loop4: rw=1, want=7631, limit=112 [ 458.069714] Buffer I/O error on dev loop4, logical block 7630, lost async page write [ 458.111910] attempt to access beyond end of device [ 458.116859] loop4: rw=1, want=7632, limit=112 [ 458.134160] Buffer I/O error on dev loop4, logical block 7631, lost async page write [ 458.147696] attempt to access beyond end of device [ 458.167770] loop4: rw=1, want=7633, limit=112 [ 458.174261] Buffer I/O error on dev loop4, logical block 7632, lost async page write [ 458.215718] attempt to access beyond end of device [ 458.220759] loop4: rw=1, want=11729, limit=112 [ 458.233832] attempt to access beyond end of device [ 458.238789] loop4: rw=1, want=15825, limit=112 [ 458.252963] attempt to access beyond end of device [ 458.257997] loop4: rw=1, want=19921, limit=112 [ 458.292002] attempt to access beyond end of device [ 458.296941] loop4: rw=1, want=24017, limit=112 [ 458.335225] attempt to access beyond end of device [ 458.343864] loop4: rw=1, want=28113, limit=112 [ 458.353470] attempt to access beyond end of device [ 458.358399] loop4: rw=1, want=32209, limit=112 [ 458.366244] attempt to access beyond end of device [ 458.371570] loop4: rw=1, want=32993, limit=112 11:10:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x2, [{{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x190) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000), 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:27 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:27 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xffff1f00, 0x297ef) 11:10:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 459.429257] attempt to access beyond end of device [ 459.445908] syz-executor.5 (15562): /proc/15560/oom_adj is deprecated, please use /proc/15560/oom_score_adj instead. [ 459.457101] loop4: rw=1, want=130, limit=112 [ 459.461916] Buffer I/O error on dev loop4, logical block 129, lost async page write 11:10:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000), 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 459.494109] attempt to access beyond end of device [ 459.502022] loop4: rw=1, want=131, limit=112 [ 459.507854] Buffer I/O error on dev loop4, logical block 130, lost async page write 11:10:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 459.556813] FAT-fs (loop0): bogus number of reserved sectors [ 459.563580] FAT-fs (loop0): Can't find a valid FAT filesystem [ 459.582822] attempt to access beyond end of device 11:10:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000), 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 459.638201] loop4: rw=1, want=132, limit=112 [ 459.665612] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 459.701566] attempt to access beyond end of device [ 459.711121] loop4: rw=1, want=133, limit=112 11:10:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xffffff0f, 0x297ef) [ 459.719204] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 459.735425] attempt to access beyond end of device [ 459.744246] loop4: rw=1, want=142, limit=112 11:10:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 459.780451] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 459.809726] attempt to access beyond end of device [ 459.828329] loop4: rw=1, want=143, limit=112 11:10:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 459.851328] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 459.900751] attempt to access beyond end of device [ 459.935721] loop4: rw=1, want=144, limit=112 [ 459.957379] attempt to access beyond end of device [ 459.985534] loop4: rw=1, want=145, limit=112 [ 459.989462] net_ratelimit: 26 callbacks suppressed [ 459.989470] protocol 88fb is buggy, dev hsr_slave_0 [ 460.000037] protocol 88fb is buggy, dev hsr_slave_1 [ 460.005193] protocol 88fb is buggy, dev hsr_slave_0 [ 460.006084] attempt to access beyond end of device [ 460.010348] protocol 88fb is buggy, dev hsr_slave_1 [ 460.020407] protocol 88fb is buggy, dev hsr_slave_0 [ 460.021233] loop4: rw=1, want=2393, limit=112 [ 460.025472] protocol 88fb is buggy, dev hsr_slave_1 [ 460.025574] protocol 88fb is buggy, dev hsr_slave_0 [ 460.040178] protocol 88fb is buggy, dev hsr_slave_1 [ 460.045079] attempt to access beyond end of device [ 460.063081] loop4: rw=1, want=2422, limit=112 [ 460.084840] attempt to access beyond end of device [ 460.105751] loop4: rw=1, want=2423, limit=112 [ 460.112014] attempt to access beyond end of device [ 460.117385] loop4: rw=1, want=2424, limit=112 [ 460.128258] attempt to access beyond end of device [ 460.145633] loop4: rw=1, want=2425, limit=112 [ 460.150561] attempt to access beyond end of device [ 460.155846] loop4: rw=1, want=2446, limit=112 [ 460.168076] attempt to access beyond end of device [ 460.173442] loop4: rw=1, want=2447, limit=112 [ 460.178297] attempt to access beyond end of device [ 460.190442] loop4: rw=1, want=2448, limit=112 [ 460.195240] attempt to access beyond end of device [ 460.206392] loop4: rw=1, want=2449, limit=112 [ 460.212712] attempt to access beyond end of device [ 460.217935] loop4: rw=1, want=2498, limit=112 [ 460.228694] attempt to access beyond end of device [ 460.235157] loop4: rw=1, want=2499, limit=112 [ 460.245870] attempt to access beyond end of device [ 460.252145] loop4: rw=1, want=2500, limit=112 [ 460.256762] attempt to access beyond end of device [ 460.267863] loop4: rw=1, want=2501, limit=112 [ 460.273888] attempt to access beyond end of device [ 460.278933] loop4: rw=1, want=2510, limit=112 [ 460.289013] attempt to access beyond end of device [ 460.295208] loop4: rw=1, want=2511, limit=112 [ 460.304619] attempt to access beyond end of device [ 460.312815] loop4: rw=1, want=2512, limit=112 [ 460.317425] attempt to access beyond end of device [ 460.327669] loop4: rw=1, want=2513, limit=112 [ 460.384646] attempt to access beyond end of device [ 460.394449] loop4: rw=1, want=6609, limit=112 [ 460.417476] attempt to access beyond end of device [ 460.427721] loop4: rw=1, want=10705, limit=112 [ 460.446582] attempt to access beyond end of device [ 460.452581] loop4: rw=1, want=14801, limit=112 [ 460.469484] protocol 88fb is buggy, dev hsr_slave_0 [ 460.472676] attempt to access beyond end of device [ 460.474589] protocol 88fb is buggy, dev hsr_slave_1 [ 460.484188] loop4: rw=1, want=18897, limit=112 [ 460.501864] attempt to access beyond end of device [ 460.506812] loop4: rw=1, want=22993, limit=112 [ 460.519519] attempt to access beyond end of device [ 460.524468] loop4: rw=1, want=27089, limit=112 [ 460.535696] attempt to access beyond end of device [ 460.540734] loop4: rw=1, want=31185, limit=112 [ 460.547863] attempt to access beyond end of device [ 460.552957] loop4: rw=1, want=32993, limit=112 11:10:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x0, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffff0, 0x297ef) 11:10:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:29 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:29 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 461.649638] attempt to access beyond end of device [ 461.654637] loop4: rw=1, want=130, limit=112 [ 461.670158] attempt to access beyond end of device [ 461.682985] loop4: rw=1, want=131, limit=112 [ 461.691031] attempt to access beyond end of device 11:10:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 461.696344] loop4: rw=1, want=132, limit=112 [ 461.701216] attempt to access beyond end of device [ 461.706367] loop4: rw=1, want=133, limit=112 [ 461.711100] attempt to access beyond end of device [ 461.716230] loop4: rw=1, want=142, limit=112 [ 461.735281] attempt to access beyond end of device 11:10:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x7f', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 461.751122] FAT-fs (loop0): bogus number of reserved sectors [ 461.756954] FAT-fs (loop0): Can't find a valid FAT filesystem [ 461.780344] loop4: rw=1, want=143, limit=112 11:10:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x800800000000, 0x297ef) [ 461.812659] attempt to access beyond end of device [ 461.850240] loop4: rw=1, want=144, limit=112 [ 461.875334] attempt to access beyond end of device [ 461.899037] loop4: rw=1, want=145, limit=112 11:10:29 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3fc, 0x0) [ 461.933871] attempt to access beyond end of device [ 461.945993] loop4: rw=1, want=2777, limit=112 [ 461.954774] attempt to access beyond end of device [ 461.965429] loop4: rw=1, want=2806, limit=112 11:10:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\xff', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 461.988115] attempt to access beyond end of device [ 462.014110] loop4: rw=1, want=2807, limit=112 [ 462.040776] attempt to access beyond end of device [ 462.058063] loop4: rw=1, want=2808, limit=112 [ 462.075476] attempt to access beyond end of device 11:10:30 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3fc, 0x0) [ 462.088386] loop4: rw=1, want=2809, limit=112 [ 462.106948] attempt to access beyond end of device [ 462.132522] loop4: rw=1, want=2830, limit=112 [ 462.146405] attempt to access beyond end of device [ 462.167689] loop4: rw=1, want=2831, limit=112 [ 462.183539] attempt to access beyond end of device [ 462.203473] loop4: rw=1, want=2832, limit=112 [ 462.217235] attempt to access beyond end of device [ 462.231985] loop4: rw=1, want=2833, limit=112 [ 462.253630] attempt to access beyond end of device [ 462.267007] loop4: rw=1, want=2882, limit=112 [ 462.282459] attempt to access beyond end of device [ 462.287430] loop4: rw=1, want=2883, limit=112 [ 462.297000] attempt to access beyond end of device [ 462.306103] loop4: rw=1, want=2884, limit=112 [ 462.314886] attempt to access beyond end of device [ 462.324360] loop4: rw=1, want=2885, limit=112 [ 462.329089] attempt to access beyond end of device [ 462.338345] loop4: rw=1, want=2894, limit=112 [ 462.346720] attempt to access beyond end of device [ 462.355808] loop4: rw=1, want=2895, limit=112 [ 462.364348] attempt to access beyond end of device [ 462.373315] loop4: rw=1, want=2896, limit=112 [ 462.378016] attempt to access beyond end of device [ 462.387017] loop4: rw=1, want=2897, limit=112 [ 462.414235] attempt to access beyond end of device [ 462.419340] loop4: rw=1, want=6993, limit=112 [ 462.474738] attempt to access beyond end of device [ 462.525190] loop4: rw=1, want=11089, limit=112 [ 462.552704] attempt to access beyond end of device [ 462.557653] loop4: rw=1, want=15185, limit=112 [ 462.585035] attempt to access beyond end of device [ 462.590081] loop4: rw=1, want=19281, limit=112 [ 462.600996] attempt to access beyond end of device [ 462.605944] loop4: rw=1, want=23377, limit=112 [ 462.620234] attempt to access beyond end of device [ 462.625184] loop4: rw=1, want=27473, limit=112 [ 462.638287] attempt to access beyond end of device [ 462.643335] loop4: rw=1, want=31569, limit=112 [ 462.652953] attempt to access beyond end of device [ 462.657905] loop4: rw=1, want=32993, limit=112 11:10:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x0, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2000000000000, 0x297ef) 11:10:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x16, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:31 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3fc, 0x0) 11:10:31 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:31 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 463.787030] attempt to access beyond end of device [ 463.795698] loop4: rw=1, want=130, limit=112 [ 463.814508] buffer_io_error: 42 callbacks suppressed [ 463.814519] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 463.828214] attempt to access beyond end of device 11:10:31 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3fc, 0x0) [ 463.833658] loop4: rw=1, want=131, limit=112 [ 463.838484] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 463.860002] attempt to access beyond end of device [ 463.867562] loop4: rw=1, want=132, limit=112 11:10:31 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 463.884437] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 463.910577] FAT-fs (loop0): bogus number of reserved sectors [ 463.916411] FAT-fs (loop0): Can't find a valid FAT filesystem 11:10:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 463.968564] attempt to access beyond end of device 11:10:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3fc, 0x0) 11:10:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x4000000000000, 0x297ef) [ 464.029965] loop4: rw=1, want=133, limit=112 [ 464.034413] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 464.055478] attempt to access beyond end of device [ 464.075236] loop4: rw=1, want=142, limit=112 [ 464.099702] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 464.107901] attempt to access beyond end of device 11:10:32 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 464.140747] loop4: rw=1, want=143, limit=112 [ 464.154727] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 464.184620] attempt to access beyond end of device [ 464.219869] loop4: rw=1, want=144, limit=112 [ 464.224313] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 464.242741] attempt to access beyond end of device [ 464.247861] loop4: rw=1, want=145, limit=112 [ 464.260316] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 464.295777] attempt to access beyond end of device [ 464.320858] loop4: rw=1, want=3225, limit=112 [ 464.337117] attempt to access beyond end of device [ 464.343810] loop4: rw=1, want=3254, limit=112 [ 464.348329] Buffer I/O error on dev loop4, logical block 3253, lost async page write [ 464.363654] attempt to access beyond end of device [ 464.368599] loop4: rw=1, want=3255, limit=112 [ 464.373755] Buffer I/O error on dev loop4, logical block 3254, lost async page write [ 464.386565] attempt to access beyond end of device [ 464.392677] loop4: rw=1, want=3256, limit=112 [ 464.397220] attempt to access beyond end of device [ 464.409080] loop4: rw=1, want=3257, limit=112 [ 464.414053] attempt to access beyond end of device [ 464.419001] loop4: rw=1, want=3278, limit=112 [ 464.430650] attempt to access beyond end of device [ 464.435600] loop4: rw=1, want=3279, limit=112 [ 464.446210] attempt to access beyond end of device [ 464.452721] loop4: rw=1, want=3280, limit=112 [ 464.457265] attempt to access beyond end of device [ 464.468170] loop4: rw=1, want=3281, limit=112 [ 464.476562] attempt to access beyond end of device [ 464.487691] loop4: rw=1, want=3330, limit=112 [ 464.493683] attempt to access beyond end of device [ 464.498630] loop4: rw=1, want=3331, limit=112 [ 464.509037] attempt to access beyond end of device [ 464.515465] loop4: rw=1, want=3332, limit=112 [ 464.526182] attempt to access beyond end of device [ 464.532603] loop4: rw=1, want=3333, limit=112 [ 464.537173] attempt to access beyond end of device [ 464.548228] loop4: rw=1, want=3342, limit=112 [ 464.557690] attempt to access beyond end of device [ 464.569418] loop4: rw=1, want=3343, limit=112 [ 464.573963] attempt to access beyond end of device [ 464.578926] loop4: rw=1, want=3344, limit=112 [ 464.590331] attempt to access beyond end of device [ 464.595276] loop4: rw=1, want=3345, limit=112 [ 464.612805] attempt to access beyond end of device [ 464.617755] loop4: rw=1, want=7441, limit=112 [ 464.631707] attempt to access beyond end of device [ 464.636650] loop4: rw=1, want=11537, limit=112 [ 464.647557] attempt to access beyond end of device [ 464.652589] loop4: rw=1, want=15633, limit=112 [ 464.666671] attempt to access beyond end of device [ 464.671760] loop4: rw=1, want=19729, limit=112 [ 464.684925] attempt to access beyond end of device [ 464.690018] loop4: rw=1, want=23825, limit=112 [ 464.703071] attempt to access beyond end of device [ 464.708013] loop4: rw=1, want=27921, limit=112 [ 464.721427] attempt to access beyond end of device [ 464.726372] loop4: rw=1, want=32017, limit=112 [ 464.735539] attempt to access beyond end of device [ 464.740817] loop4: rw=1, want=32993, limit=112 11:10:33 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x0, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:33 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:33 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3fc, 0x0) 11:10:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6000000000000, 0x297ef) [ 465.858655] attempt to access beyond end of device [ 465.883259] loop4: rw=1, want=130, limit=112 [ 465.897354] attempt to access beyond end of device [ 465.915523] loop4: rw=1, want=131, limit=112 [ 465.920590] attempt to access beyond end of device [ 465.925926] FAT-fs (loop0): bogus number of reserved sectors 11:10:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:33 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 465.925935] loop4: rw=1, want=132, limit=112 [ 465.925969] attempt to access beyond end of device [ 465.931805] FAT-fs (loop0): Can't find a valid FAT filesystem [ 465.970942] loop4: rw=1, want=133, limit=112 [ 465.984296] attempt to access beyond end of device [ 466.016866] loop4: rw=1, want=142, limit=112 [ 466.029031] attempt to access beyond end of device [ 466.056125] loop4: rw=1, want=143, limit=112 [ 466.068952] attempt to access beyond end of device 11:10:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8000000000000, 0x297ef) [ 466.091319] loop4: rw=1, want=144, limit=112 [ 466.095768] attempt to access beyond end of device [ 466.117919] loop4: rw=1, want=145, limit=112 11:10:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 11:10:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe005, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 466.137849] attempt to access beyond end of device [ 466.188501] loop4: rw=1, want=2905, limit=112 11:10:34 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 466.210569] attempt to access beyond end of device [ 466.215524] loop4: rw=1, want=2934, limit=112 [ 466.229445] net_ratelimit: 26 callbacks suppressed [ 466.229453] protocol 88fb is buggy, dev hsr_slave_0 [ 466.239589] protocol 88fb is buggy, dev hsr_slave_1 [ 466.244724] protocol 88fb is buggy, dev hsr_slave_0 [ 466.249858] protocol 88fb is buggy, dev hsr_slave_1 [ 466.254993] protocol 88fb is buggy, dev hsr_slave_0 [ 466.260125] protocol 88fb is buggy, dev hsr_slave_1 [ 466.265286] protocol 88fb is buggy, dev hsr_slave_0 [ 466.270416] protocol 88fb is buggy, dev hsr_slave_1 [ 466.283931] attempt to access beyond end of device [ 466.288887] loop4: rw=1, want=2935, limit=112 [ 466.324047] attempt to access beyond end of device [ 466.335998] loop4: rw=1, want=2936, limit=112 [ 466.348865] attempt to access beyond end of device [ 466.357245] loop4: rw=1, want=2937, limit=112 [ 466.366851] attempt to access beyond end of device [ 466.374590] loop4: rw=1, want=2958, limit=112 [ 466.379213] attempt to access beyond end of device [ 466.388550] loop4: rw=1, want=2959, limit=112 [ 466.396657] attempt to access beyond end of device [ 466.406181] loop4: rw=1, want=2960, limit=112 [ 466.414724] attempt to access beyond end of device [ 466.432083] loop4: rw=1, want=2961, limit=112 [ 466.436736] attempt to access beyond end of device [ 466.444322] loop4: rw=1, want=3010, limit=112 [ 466.448994] attempt to access beyond end of device [ 466.462541] loop4: rw=1, want=3011, limit=112 [ 466.467225] attempt to access beyond end of device [ 466.478173] loop4: rw=1, want=3012, limit=112 [ 466.486201] attempt to access beyond end of device [ 466.494793] loop4: rw=1, want=3013, limit=112 [ 466.502887] attempt to access beyond end of device [ 466.507990] loop4: rw=1, want=3022, limit=112 [ 466.516181] attempt to access beyond end of device [ 466.525004] loop4: rw=1, want=3023, limit=112 [ 466.533212] attempt to access beyond end of device [ 466.538322] loop4: rw=1, want=3024, limit=112 [ 466.546524] attempt to access beyond end of device [ 466.557510] loop4: rw=1, want=3025, limit=112 [ 466.576172] attempt to access beyond end of device [ 466.584979] loop4: rw=1, want=7121, limit=112 [ 466.606794] attempt to access beyond end of device [ 466.615462] loop4: rw=1, want=11217, limit=112 [ 466.645339] attempt to access beyond end of device [ 466.654665] loop4: rw=1, want=15313, limit=112 [ 466.683424] attempt to access beyond end of device [ 466.688373] loop4: rw=1, want=19409, limit=112 [ 466.707807] attempt to access beyond end of device [ 466.719516] protocol 88fb is buggy, dev hsr_slave_0 [ 466.721109] loop4: rw=1, want=23505, limit=112 [ 466.724597] protocol 88fb is buggy, dev hsr_slave_1 [ 466.755356] attempt to access beyond end of device [ 466.762202] loop4: rw=1, want=27601, limit=112 [ 466.782968] attempt to access beyond end of device [ 466.787918] loop4: rw=1, want=31697, limit=112 [ 466.802686] attempt to access beyond end of device [ 466.807627] loop4: rw=1, want=32993, limit=112 11:10:35 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xa000000000000, 0x297ef) 11:10:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000240)) getpgid(0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 11:10:35 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:35 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe008, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 467.986475] attempt to access beyond end of device [ 468.006144] loop4: rw=1, want=130, limit=112 [ 468.011843] attempt to access beyond end of device [ 468.029306] loop4: rw=1, want=131, limit=112 [ 468.038862] attempt to access beyond end of device 11:10:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe010, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 468.069835] FAT-fs (loop0): bogus number of reserved sectors [ 468.075655] FAT-fs (loop0): Can't find a valid FAT filesystem [ 468.082308] loop4: rw=1, want=132, limit=112 [ 468.086760] attempt to access beyond end of device [ 468.092086] loop4: rw=1, want=133, limit=112 [ 468.096557] attempt to access beyond end of device [ 468.113863] loop4: rw=1, want=142, limit=112 11:10:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) 11:10:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc000000000000, 0x297ef) [ 468.118401] attempt to access beyond end of device [ 468.135563] loop4: rw=1, want=143, limit=112 [ 468.146791] attempt to access beyond end of device [ 468.164062] loop4: rw=1, want=144, limit=112 [ 468.179749] attempt to access beyond end of device [ 468.189840] loop4: rw=1, want=145, limit=112 [ 468.207012] attempt to access beyond end of device [ 468.225860] loop4: rw=1, want=2521, limit=112 [ 468.241601] attempt to access beyond end of device [ 468.257526] loop4: rw=1, want=2550, limit=112 11:10:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8800000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:36 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3823f2000001bc0d1f0084762307029b019787dfbd0128c1b8b2dbb75436b249463d7015aeded343c700000000175800ec0b15740a799b180c"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 468.276819] attempt to access beyond end of device [ 468.296281] loop4: rw=1, want=2551, limit=112 [ 468.311226] attempt to access beyond end of device [ 468.336967] loop4: rw=1, want=2552, limit=112 [ 468.358520] attempt to access beyond end of device [ 468.381044] loop4: rw=1, want=2553, limit=112 [ 468.396391] attempt to access beyond end of device [ 468.414347] loop4: rw=1, want=2574, limit=112 [ 468.426548] attempt to access beyond end of device 11:10:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 468.433882] loop4: rw=1, want=2575, limit=112 [ 468.438660] attempt to access beyond end of device [ 468.453955] loop4: rw=1, want=2576, limit=112 [ 468.472601] attempt to access beyond end of device [ 468.477776] loop4: rw=1, want=2577, limit=112 [ 468.487190] attempt to access beyond end of device [ 468.497431] loop4: rw=1, want=2626, limit=112 [ 468.530285] attempt to access beyond end of device [ 468.546899] loop4: rw=1, want=2627, limit=112 [ 468.562473] attempt to access beyond end of device [ 468.575791] loop4: rw=1, want=2628, limit=112 [ 468.583599] attempt to access beyond end of device [ 468.588716] loop4: rw=1, want=2629, limit=112 [ 468.597992] attempt to access beyond end of device [ 468.605585] loop4: rw=1, want=2638, limit=112 [ 468.615152] attempt to access beyond end of device [ 468.622736] loop4: rw=1, want=2639, limit=112 [ 468.627465] attempt to access beyond end of device [ 468.643051] loop4: rw=1, want=2640, limit=112 [ 468.652450] attempt to access beyond end of device [ 468.657974] loop4: rw=1, want=2641, limit=112 [ 468.676979] attempt to access beyond end of device [ 468.685819] loop4: rw=1, want=6737, limit=112 [ 468.705161] attempt to access beyond end of device [ 468.720470] loop4: rw=1, want=10833, limit=112 [ 468.744962] attempt to access beyond end of device [ 468.755057] loop4: rw=1, want=14929, limit=112 [ 468.772826] attempt to access beyond end of device [ 468.792412] loop4: rw=1, want=19025, limit=112 [ 468.843290] attempt to access beyond end of device [ 468.850535] loop4: rw=1, want=23121, limit=112 [ 468.874188] attempt to access beyond end of device [ 468.879180] loop4: rw=1, want=27217, limit=112 [ 468.892678] attempt to access beyond end of device [ 468.897623] loop4: rw=1, want=31313, limit=112 [ 468.907204] attempt to access beyond end of device [ 468.912221] loop4: rw=1, want=32993, limit=112 11:10:37 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffdb5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) 11:10:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x2, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:37 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:37 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xe000000000000, 0x297ef) [ 470.042668] attempt to access beyond end of device [ 470.047980] loop4: rw=1, want=130, limit=112 [ 470.053320] buffer_io_error: 62 callbacks suppressed [ 470.053331] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 470.067062] attempt to access beyond end of device [ 470.072388] loop4: rw=1, want=131, limit=112 [ 470.076994] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 470.105084] attempt to access beyond end of device [ 470.116041] loop4: rw=1, want=132, limit=112 [ 470.126516] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 470.143931] attempt to access beyond end of device [ 470.147610] FAT-fs (loop0): bogus number of reserved sectors 11:10:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x10000000000000, 0x297ef) [ 470.154984] FAT-fs (loop0): Can't find a valid FAT filesystem [ 470.160470] loop4: rw=1, want=133, limit=112 [ 470.183996] Buffer I/O error on dev loop4, logical block 132, lost async page write 11:10:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x3, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 470.225583] attempt to access beyond end of device [ 470.253458] loop4: rw=1, want=142, limit=112 [ 470.277484] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 470.286624] attempt to access beyond end of device [ 470.299225] loop4: rw=1, want=143, limit=112 [ 470.304231] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 470.321670] attempt to access beyond end of device 11:10:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x5, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 470.326780] loop4: rw=1, want=144, limit=112 [ 470.343325] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 470.367464] attempt to access beyond end of device 11:10:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x7, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 470.382060] loop4: rw=1, want=145, limit=112 [ 470.391719] attempt to access beyond end of device [ 470.396671] loop1: rw=1, want=16005, limit=112 [ 470.409210] Buffer I/O error on dev loop4, logical block 144, lost async page write 11:10:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x100000000000000, 0x297ef) [ 470.462035] attempt to access beyond end of device [ 470.478309] loop4: rw=1, want=3993, limit=112 [ 470.496303] attempt to access beyond end of device [ 470.504382] loop4: rw=1, want=4022, limit=112 [ 470.514347] Buffer I/O error on dev loop4, logical block 4021, lost async page write [ 470.525677] attempt to access beyond end of device [ 470.535607] loop4: rw=1, want=4023, limit=112 [ 470.543070] Buffer I/O error on dev loop4, logical block 4022, lost async page write [ 470.556180] attempt to access beyond end of device 11:10:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0xf, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 470.564113] loop4: rw=1, want=4024, limit=112 [ 470.568789] attempt to access beyond end of device [ 470.579070] loop4: rw=1, want=4025, limit=112 [ 470.586676] attempt to access beyond end of device [ 470.596594] loop4: rw=1, want=4046, limit=112 [ 470.604037] attempt to access beyond end of device [ 470.609117] loop4: rw=1, want=4047, limit=112 [ 470.618715] attempt to access beyond end of device [ 470.636806] loop4: rw=1, want=4048, limit=112 [ 470.643155] attempt to access beyond end of device [ 470.648228] loop4: rw=1, want=4049, limit=112 [ 470.657961] attempt to access beyond end of device [ 470.665719] loop4: rw=1, want=4098, limit=112 [ 470.675444] attempt to access beyond end of device [ 470.683260] loop4: rw=1, want=4099, limit=112 [ 470.687952] attempt to access beyond end of device [ 470.697846] loop4: rw=1, want=4100, limit=112 [ 470.705203] attempt to access beyond end of device [ 470.717375] loop4: rw=1, want=4101, limit=112 [ 470.724849] attempt to access beyond end of device [ 470.734985] loop4: rw=1, want=4110, limit=112 [ 470.742321] attempt to access beyond end of device [ 470.748518] loop4: rw=1, want=4111, limit=112 [ 470.758113] attempt to access beyond end of device [ 470.765774] loop4: rw=1, want=4112, limit=112 [ 470.775728] attempt to access beyond end of device [ 470.783504] loop4: rw=1, want=4113, limit=112 [ 470.795450] attempt to access beyond end of device [ 470.810799] loop4: rw=1, want=8209, limit=112 [ 470.826195] attempt to access beyond end of device [ 470.853083] loop4: rw=1, want=12305, limit=112 [ 470.878576] attempt to access beyond end of device [ 470.911777] loop4: rw=1, want=16401, limit=112 [ 470.943534] attempt to access beyond end of device [ 470.948504] loop4: rw=1, want=20497, limit=112 [ 470.962183] attempt to access beyond end of device [ 470.967179] loop4: rw=1, want=24593, limit=112 [ 470.981175] attempt to access beyond end of device [ 470.986120] loop4: rw=1, want=28689, limit=112 [ 470.999735] attempt to access beyond end of device [ 471.004679] loop4: rw=1, want=32785, limit=112 [ 471.013192] attempt to access beyond end of device [ 471.018143] loop4: rw=1, want=32993, limit=112 11:10:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x200000000000000, 0x297ef) 11:10:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x500, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:40 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x104) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x3ff, 0x0, 0x1ff, 0x5, 0xb, 0x1, 0x5, 0x9, 0x7, 0x99d4, 0x7, 0x2}) clone(0x2102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900010017d31b769fac4d98435669ffffa63ac81bb69bdd62"], 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 11:10:40 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:40 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 472.225733] attempt to access beyond end of device 11:10:40 executing program 5: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000140)="4204000073d1600000000000fff55b42b90516db4d699502c555cfe757489ca44b29d9fde6ea94211af8792dda0faee3f63c11adeda1a819f9954bab5b98aa1da7006d918df622688f717e72d5913ee486a17aaa", 0x54, 0x0, 0x0, 0x0) [ 472.249814] rpcbind: RPC call returned error 22 [ 472.261301] rpcbind: RPC call returned error 22 [ 472.265047] loop4: rw=1, want=130, limit=112 [ 472.290196] attempt to access beyond end of device [ 472.325394] loop4: rw=1, want=131, limit=112 [ 472.336461] attempt to access beyond end of device [ 472.345508] loop4: rw=1, want=132, limit=112 [ 472.354443] FAT-fs (loop0): bogus number of reserved sectors [ 472.360385] FAT-fs (loop0): Can't find a valid FAT filesystem 11:10:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x300000000000000, 0x297ef) 11:10:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1329ce, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 472.408221] attempt to access beyond end of device [ 472.413389] loop4: rw=1, want=133, limit=112 [ 472.417854] attempt to access beyond end of device [ 472.469455] net_ratelimit: 26 callbacks suppressed [ 472.469466] protocol 88fb is buggy, dev hsr_slave_0 [ 472.479640] protocol 88fb is buggy, dev hsr_slave_1 [ 472.484859] protocol 88fb is buggy, dev hsr_slave_0 [ 472.490026] protocol 88fb is buggy, dev hsr_slave_1 [ 472.495245] protocol 88fb is buggy, dev hsr_slave_0 [ 472.500375] protocol 88fb is buggy, dev hsr_slave_1 [ 472.505549] protocol 88fb is buggy, dev hsr_slave_0 [ 472.510738] protocol 88fb is buggy, dev hsr_slave_1 [ 472.523001] loop4: rw=1, want=142, limit=112 [ 472.527466] attempt to access beyond end of device [ 472.546237] loop4: rw=1, want=143, limit=112 [ 472.558080] attempt to access beyond end of device 11:10:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x400000000000000, 0x297ef) [ 472.573694] loop4: rw=1, want=144, limit=112 [ 472.592665] attempt to access beyond end of device [ 472.611206] loop4: rw=1, want=145, limit=112 [ 472.649076] attempt to access beyond end of device 11:10:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0xffffff1f, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 472.672344] loop4: rw=1, want=3481, limit=112 11:10:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x0, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 472.694600] attempt to access beyond end of device [ 472.740636] loop4: rw=1, want=3510, limit=112 [ 472.745268] attempt to access beyond end of device [ 472.774786] loop4: rw=1, want=3511, limit=112 [ 472.794540] attempt to access beyond end of device [ 472.839678] loop4: rw=1, want=3512, limit=112 [ 472.844222] attempt to access beyond end of device [ 472.849176] loop4: rw=1, want=3513, limit=112 [ 472.887420] attempt to access beyond end of device [ 472.903992] loop4: rw=1, want=3534, limit=112 [ 472.908545] attempt to access beyond end of device [ 472.927565] loop4: rw=1, want=3535, limit=112 [ 472.941966] attempt to access beyond end of device [ 472.946923] loop4: rw=1, want=3536, limit=112 [ 472.949539] protocol 88fb is buggy, dev hsr_slave_0 [ 472.956555] protocol 88fb is buggy, dev hsr_slave_1 [ 472.964956] attempt to access beyond end of device [ 472.980106] loop4: rw=1, want=3537, limit=112 [ 472.984713] attempt to access beyond end of device [ 473.084959] loop4: rw=1, want=3586, limit=112 [ 473.109042] attempt to access beyond end of device [ 473.148390] loop4: rw=1, want=3587, limit=112 [ 473.168493] attempt to access beyond end of device [ 473.193457] loop4: rw=1, want=3588, limit=112 [ 473.215366] attempt to access beyond end of device [ 473.231927] loop4: rw=1, want=3589, limit=112 [ 473.246844] attempt to access beyond end of device [ 473.263434] loop4: rw=1, want=3598, limit=112 [ 473.284127] attempt to access beyond end of device [ 473.304087] loop4: rw=1, want=3599, limit=112 [ 473.341072] attempt to access beyond end of device [ 473.352854] loop4: rw=1, want=3600, limit=112 [ 473.357534] attempt to access beyond end of device [ 473.366383] loop4: rw=1, want=3601, limit=112 [ 473.385022] attempt to access beyond end of device [ 473.393662] loop4: rw=1, want=7697, limit=112 [ 473.408801] attempt to access beyond end of device [ 473.420459] loop4: rw=1, want=11793, limit=112 [ 473.443240] attempt to access beyond end of device [ 473.448321] loop4: rw=1, want=15889, limit=112 [ 473.476371] attempt to access beyond end of device [ 473.488319] loop4: rw=1, want=19985, limit=112 [ 473.526591] attempt to access beyond end of device [ 473.537512] loop4: rw=1, want=24081, limit=112 [ 473.561092] attempt to access beyond end of device [ 473.581843] loop4: rw=1, want=28177, limit=112 [ 473.614530] attempt to access beyond end of device [ 473.645110] loop4: rw=1, want=32273, limit=112 [ 473.654918] attempt to access beyond end of device [ 473.665186] loop4: rw=1, want=32993, limit=112 [ 473.886747] attempt to access beyond end of device [ 473.891770] loop5: rw=1, want=130, limit=112 [ 473.896222] attempt to access beyond end of device [ 473.906979] loop5: rw=1, want=131, limit=112 [ 473.914550] attempt to access beyond end of device [ 473.925375] loop5: rw=1, want=132, limit=112 [ 473.929970] attempt to access beyond end of device [ 473.934909] loop5: rw=1, want=133, limit=112 [ 473.939393] attempt to access beyond end of device [ 473.944338] loop5: rw=1, want=142, limit=112 [ 473.948771] attempt to access beyond end of device [ 473.959614] loop5: rw=1, want=143, limit=112 [ 473.964054] attempt to access beyond end of device [ 473.968995] loop5: rw=1, want=144, limit=112 [ 473.974101] attempt to access beyond end of device [ 473.979042] loop5: rw=1, want=145, limit=112 [ 473.986776] attempt to access beyond end of device [ 473.991784] loop5: rw=1, want=4241, limit=112 [ 473.998492] attempt to access beyond end of device [ 474.003555] loop5: rw=1, want=5657, limit=112 [ 474.008543] attempt to access beyond end of device [ 474.013511] loop5: rw=1, want=5686, limit=112 [ 474.018023] attempt to access beyond end of device [ 474.022997] loop5: rw=1, want=5687, limit=112 [ 474.027528] attempt to access beyond end of device [ 474.032505] loop5: rw=1, want=5688, limit=112 [ 474.037013] attempt to access beyond end of device [ 474.041996] loop5: rw=1, want=5689, limit=112 [ 474.046541] attempt to access beyond end of device [ 474.051525] loop5: rw=1, want=5710, limit=112 [ 474.056049] attempt to access beyond end of device [ 474.061037] loop5: rw=1, want=5711, limit=112 [ 474.065546] attempt to access beyond end of device [ 474.070565] loop5: rw=1, want=5712, limit=112 [ 474.075078] attempt to access beyond end of device [ 474.080068] loop5: rw=1, want=5713, limit=112 [ 474.084597] attempt to access beyond end of device [ 474.089595] loop5: rw=1, want=5762, limit=112 [ 474.094104] attempt to access beyond end of device [ 474.099014] loop5: rw=1, want=5763, limit=112 [ 474.103561] attempt to access beyond end of device [ 474.108488] loop5: rw=1, want=5764, limit=112 [ 474.113047] attempt to access beyond end of device [ 474.118010] loop5: rw=1, want=5765, limit=112 [ 474.122618] attempt to access beyond end of device [ 474.127555] loop5: rw=1, want=5774, limit=112 [ 474.132154] attempt to access beyond end of device [ 474.137084] loop5: rw=1, want=5775, limit=112 [ 474.142541] attempt to access beyond end of device [ 474.147510] loop5: rw=1, want=5776, limit=112 [ 474.174842] attempt to access beyond end of device [ 474.180146] loop5: rw=1, want=5777, limit=112 [ 474.185457] attempt to access beyond end of device [ 474.190940] loop5: rw=1, want=9873, limit=112 [ 474.204691] attempt to access beyond end of device [ 474.209794] loop5: rw=1, want=13969, limit=112 [ 474.223986] attempt to access beyond end of device [ 474.229022] loop5: rw=1, want=18065, limit=112 [ 474.243987] attempt to access beyond end of device [ 474.249023] loop5: rw=1, want=22161, limit=112 [ 474.264687] attempt to access beyond end of device [ 474.269837] loop5: rw=1, want=26257, limit=112 [ 474.294413] attempt to access beyond end of device [ 474.302802] loop5: rw=1, want=30353, limit=112 [ 474.338985] attempt to access beyond end of device [ 474.351130] loop5: rw=1, want=32993, limit=112 11:10:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x500000000000000, 0x297ef) 11:10:43 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:43 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:43 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000), 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 475.040887] attempt to access beyond end of device [ 475.058742] loop4: rw=1, want=130, limit=112 11:10:43 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x0, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 475.087728] buffer_io_error: 62 callbacks suppressed [ 475.087739] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 475.126675] attempt to access beyond end of device [ 475.154931] FAT-fs (loop0): bogus number of reserved sectors [ 475.161051] FAT-fs (loop0): Can't find a valid FAT filesystem [ 475.167654] loop4: rw=1, want=131, limit=112 [ 475.183109] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 475.226223] attempt to access beyond end of device [ 475.266304] loop4: rw=1, want=132, limit=112 [ 475.294504] Buffer I/O error on dev loop4, logical block 131, lost async page write 11:10:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x600000000000000, 0x297ef) [ 475.345013] attempt to access beyond end of device 11:10:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174020204010002000270f7f8", 0x16}], 0x0, 0x0) [ 475.406810] loop4: rw=1, want=133, limit=112 [ 475.430507] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 475.486509] attempt to access beyond end of device [ 475.518842] loop4: rw=1, want=142, limit=112 [ 475.544795] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 475.595045] attempt to access beyond end of device 11:10:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174030204010002000270f7f8", 0x16}], 0x0, 0x0) [ 475.629684] loop4: rw=1, want=143, limit=112 11:10:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x700000000000000, 0x297ef) [ 475.658959] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 475.707979] attempt to access beyond end of device [ 475.737713] loop4: rw=1, want=144, limit=112 [ 475.765026] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 475.818253] attempt to access beyond end of device 11:10:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174040204010002000270f7f8", 0x16}], 0x0, 0x0) [ 475.848207] loop4: rw=1, want=145, limit=112 [ 475.878395] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 476.012806] attempt to access beyond end of device [ 476.017782] loop4: rw=1, want=3993, limit=112 [ 476.098257] attempt to access beyond end of device [ 476.131186] loop4: rw=1, want=4022, limit=112 [ 476.135720] Buffer I/O error on dev loop4, logical block 4021, lost async page write [ 476.143726] attempt to access beyond end of device [ 476.148667] loop4: rw=1, want=4023, limit=112 [ 476.153248] Buffer I/O error on dev loop4, logical block 4022, lost async page write [ 476.161212] attempt to access beyond end of device [ 476.166166] loop4: rw=1, want=4024, limit=112 [ 476.170746] attempt to access beyond end of device [ 476.175685] loop4: rw=1, want=4025, limit=112 [ 476.180254] attempt to access beyond end of device [ 476.185229] loop4: rw=1, want=4046, limit=112 [ 476.187258] attempt to access beyond end of device [ 476.189827] attempt to access beyond end of device [ 476.195097] loop5: rw=1, want=130, limit=112 [ 476.199722] loop4: rw=1, want=4047, limit=112 [ 476.199757] attempt to access beyond end of device [ 476.199768] loop4: rw=1, want=4048, limit=112 [ 476.199795] attempt to access beyond end of device [ 476.199805] loop4: rw=1, want=4049, limit=112 [ 476.199859] attempt to access beyond end of device [ 476.218198] loop4: rw=1, want=4098, limit=112 [ 476.223549] attempt to access beyond end of device [ 476.227695] attempt to access beyond end of device [ 476.242122] loop4: rw=1, want=4099, limit=112 [ 476.251586] attempt to access beyond end of device [ 476.256525] loop4: rw=1, want=4100, limit=112 [ 476.260221] loop5: rw=1, want=131, limit=112 [ 476.261918] attempt to access beyond end of device [ 476.266320] attempt to access beyond end of device [ 476.270489] loop4: rw=1, want=4101, limit=112 [ 476.270529] attempt to access beyond end of device [ 476.285057] loop4: rw=1, want=4110, limit=112 [ 476.289652] attempt to access beyond end of device [ 476.294591] loop4: rw=1, want=4111, limit=112 [ 476.295350] loop5: rw=1, want=132, limit=112 [ 476.299098] attempt to access beyond end of device [ 476.308504] loop4: rw=1, want=4112, limit=112 [ 476.313940] attempt to access beyond end of device [ 476.316590] attempt to access beyond end of device [ 476.318892] loop4: rw=1, want=4113, limit=112 [ 476.324222] loop5: rw=1, want=133, limit=112 [ 476.333878] attempt to access beyond end of device [ 476.338715] attempt to access beyond end of device [ 476.338816] loop4: rw=1, want=8209, limit=112 [ 476.344124] loop5: rw=1, want=142, limit=112 [ 476.356817] attempt to access beyond end of device [ 476.358681] attempt to access beyond end of device [ 476.361801] loop4: rw=1, want=12305, limit=112 [ 476.369714] attempt to access beyond end of device [ 476.376251] loop4: rw=1, want=16401, limit=112 [ 476.377378] loop5: rw=1, want=143, limit=112 [ 476.386067] attempt to access beyond end of device [ 476.388747] attempt to access beyond end of device [ 476.396767] loop5: rw=1, want=144, limit=112 [ 476.396812] loop4: rw=1, want=20497, limit=112 [ 476.401547] attempt to access beyond end of device [ 476.413994] attempt to access beyond end of device [ 476.416612] loop5: rw=1, want=145, limit=112 [ 476.418934] loop4: rw=1, want=24593, limit=112 [ 476.427452] attempt to access beyond end of device [ 476.432886] attempt to access beyond end of device [ 476.437899] loop4: rw=1, want=26201, limit=112 [ 476.438788] loop5: rw=1, want=2969, limit=112 [ 476.449147] attempt to access beyond end of device [ 476.459986] loop5: rw=1, want=2998, limit=112 [ 476.464525] attempt to access beyond end of device [ 476.474152] loop5: rw=1, want=2999, limit=112 [ 476.478697] attempt to access beyond end of device [ 476.484830] loop5: rw=1, want=3000, limit=112 [ 476.494605] attempt to access beyond end of device [ 476.500554] loop5: rw=1, want=3001, limit=112 [ 476.505071] attempt to access beyond end of device [ 476.514969] loop5: rw=1, want=3022, limit=112 [ 476.520767] attempt to access beyond end of device [ 476.525713] loop5: rw=1, want=3023, limit=112 [ 476.535304] attempt to access beyond end of device [ 476.541432] loop5: rw=1, want=3024, limit=112 [ 476.545956] attempt to access beyond end of device [ 476.555458] loop5: rw=1, want=3025, limit=112 [ 476.561391] attempt to access beyond end of device [ 476.566332] loop5: rw=1, want=3074, limit=112 [ 476.576092] attempt to access beyond end of device [ 476.582314] loop5: rw=1, want=3075, limit=112 [ 476.586841] attempt to access beyond end of device [ 476.602371] loop5: rw=1, want=3076, limit=112 [ 476.606940] attempt to access beyond end of device [ 476.616348] loop5: rw=1, want=3077, limit=112 [ 476.622301] attempt to access beyond end of device [ 476.627280] loop5: rw=1, want=3086, limit=112 [ 476.637577] attempt to access beyond end of device [ 476.643532] loop5: rw=1, want=3087, limit=112 [ 476.648046] attempt to access beyond end of device [ 476.655319] loop5: rw=1, want=3088, limit=112 [ 476.660478] attempt to access beyond end of device [ 476.665396] loop5: rw=1, want=3089, limit=112 [ 476.675696] attempt to access beyond end of device [ 476.681416] loop5: rw=1, want=7185, limit=112 [ 476.704814] attempt to access beyond end of device [ 476.713769] loop5: rw=1, want=11281, limit=112 [ 476.734176] attempt to access beyond end of device [ 476.739208] loop5: rw=1, want=15377, limit=112 [ 476.753456] attempt to access beyond end of device [ 476.758482] loop5: rw=1, want=19473, limit=112 [ 476.772040] attempt to access beyond end of device [ 476.777062] loop5: rw=1, want=23569, limit=112 [ 476.789687] attempt to access beyond end of device [ 476.794724] loop5: rw=1, want=26809, limit=112 11:10:45 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:45 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x800000000000000, 0x297ef) 11:10:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174050204010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:45 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:45 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x0, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 477.422679] attempt to access beyond end of device [ 477.427656] loop4: rw=1, want=130, limit=112 [ 477.452999] attempt to access beyond end of device [ 477.482570] FAT-fs (loop0): bogus number of reserved sectors [ 477.488481] FAT-fs (loop0): Can't find a valid FAT filesystem [ 477.497598] loop4: rw=1, want=131, limit=112 [ 477.518432] attempt to access beyond end of device [ 477.541793] loop4: rw=1, want=132, limit=112 [ 477.565160] attempt to access beyond end of device [ 477.582986] loop4: rw=1, want=133, limit=112 [ 477.601476] attempt to access beyond end of device [ 477.626588] loop4: rw=1, want=142, limit=112 [ 477.659503] attempt to access beyond end of device [ 477.681938] loop4: rw=1, want=143, limit=112 [ 477.689090] attempt to access beyond end of device [ 477.740705] loop4: rw=1, want=144, limit=112 11:10:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x900000000000000, 0x297ef) 11:10:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174080204010002000270f7f8", 0x16}], 0x0, 0x0) [ 477.777131] attempt to access beyond end of device [ 477.810546] loop4: rw=1, want=145, limit=112 11:10:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174100204010002000270f7f8", 0x16}], 0x0, 0x0) [ 477.871611] attempt to access beyond end of device [ 477.899535] loop4: rw=1, want=4241, limit=112 [ 477.963199] attempt to access beyond end of device [ 477.993821] loop4: rw=1, want=6553, limit=112 11:10:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xa00000000000000, 0x297ef) [ 478.023703] attempt to access beyond end of device 11:10:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000704010002000270f7f8", 0x16}], 0x0, 0x0) [ 478.057307] loop4: rw=1, want=6582, limit=112 [ 478.081275] attempt to access beyond end of device [ 478.106612] loop4: rw=1, want=6583, limit=112 [ 478.132263] attempt to access beyond end of device [ 478.157419] loop4: rw=1, want=6584, limit=112 [ 478.182488] attempt to access beyond end of device [ 478.209484] loop4: rw=1, want=6585, limit=112 [ 478.258433] attempt to access beyond end of device 11:10:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174022304010002000270f7f8", 0x16}], 0x0, 0x0) [ 478.302724] loop4: rw=1, want=6606, limit=112 [ 478.329495] attempt to access beyond end of device 11:10:46 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:46 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xb00000000000000, 0x297ef) [ 478.356072] loop4: rw=1, want=6607, limit=112 [ 478.374263] attempt to access beyond end of device [ 478.379209] loop4: rw=1, want=6608, limit=112 [ 478.383792] attempt to access beyond end of device [ 478.388764] loop4: rw=1, want=6609, limit=112 [ 478.393541] attempt to access beyond end of device [ 478.398473] loop4: rw=1, want=6658, limit=112 [ 478.407616] attempt to access beyond end of device [ 478.412896] loop4: rw=1, want=6659, limit=112 [ 478.417508] attempt to access beyond end of device [ 478.423871] loop4: rw=1, want=6660, limit=112 [ 478.428483] attempt to access beyond end of device 11:10:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x14000000, 0x297ef) [ 478.460590] loop4: rw=1, want=6661, limit=112 [ 478.485273] attempt to access beyond end of device [ 478.485865] attempt to access beyond end of device [ 478.497442] loop5: rw=1, want=130, limit=112 [ 478.511860] attempt to access beyond end of device [ 478.517391] loop4: rw=1, want=6670, limit=112 [ 478.537342] attempt to access beyond end of device [ 478.545896] loop5: rw=1, want=131, limit=112 [ 478.554417] attempt to access beyond end of device [ 478.560601] loop4: rw=1, want=6671, limit=112 [ 478.564213] loop5: rw=1, want=132, limit=112 [ 478.575351] attempt to access beyond end of device [ 478.580695] attempt to access beyond end of device [ 478.581150] loop5: rw=1, want=133, limit=112 [ 478.597593] loop4: rw=1, want=6672, limit=112 [ 478.601755] attempt to access beyond end of device [ 478.604344] attempt to access beyond end of device [ 478.616154] loop4: rw=1, want=6673, limit=112 [ 478.621517] FAT-fs (loop0): bogus number of reserved sectors [ 478.627333] FAT-fs (loop0): Can't find a valid FAT filesystem [ 478.646973] attempt to access beyond end of device [ 478.660206] loop4: rw=1, want=10769, limit=112 [ 478.694240] attempt to access beyond end of device [ 478.708775] loop5: rw=1, want=142, limit=112 [ 478.713343] net_ratelimit: 26 callbacks suppressed [ 478.713352] protocol 88fb is buggy, dev hsr_slave_0 [ 478.713412] protocol 88fb is buggy, dev hsr_slave_1 [ 478.713523] protocol 88fb is buggy, dev hsr_slave_0 [ 478.713572] protocol 88fb is buggy, dev hsr_slave_1 [ 478.713666] protocol 88fb is buggy, dev hsr_slave_0 [ 478.713715] protocol 88fb is buggy, dev hsr_slave_1 [ 478.713828] protocol 88fb is buggy, dev hsr_slave_0 [ 478.713875] protocol 88fb is buggy, dev hsr_slave_1 [ 478.763023] loop4: rw=1, want=14865, limit=112 [ 478.815952] attempt to access beyond end of device [ 478.882323] loop4: rw=1, want=18961, limit=112 [ 478.956876] attempt to access beyond end of device [ 478.962480] attempt to access beyond end of device [ 478.967476] loop5: rw=1, want=143, limit=112 [ 478.972197] attempt to access beyond end of device [ 478.977152] loop5: rw=1, want=144, limit=112 [ 478.981669] attempt to access beyond end of device [ 478.986888] loop5: rw=1, want=145, limit=112 [ 478.997837] attempt to access beyond end of device [ 479.002972] loop4: rw=1, want=23057, limit=112 [ 479.003088] loop5: rw=1, want=4241, limit=112 [ 479.021637] attempt to access beyond end of device [ 479.026668] loop5: rw=1, want=8337, limit=112 [ 479.061390] attempt to access beyond end of device [ 479.063872] attempt to access beyond end of device [ 479.066372] loop4: rw=1, want=27153, limit=112 [ 479.076234] loop5: rw=1, want=9433, limit=112 [ 479.090844] attempt to access beyond end of device [ 479.095782] loop5: rw=1, want=9462, limit=112 [ 479.109409] attempt to access beyond end of device [ 479.127330] attempt to access beyond end of device [ 479.129417] loop5: rw=1, want=9463, limit=112 [ 479.136796] attempt to access beyond end of device [ 479.141824] loop5: rw=1, want=9464, limit=112 [ 479.146630] attempt to access beyond end of device [ 479.151667] loop5: rw=1, want=9465, limit=112 [ 479.164074] attempt to access beyond end of device [ 479.169026] loop5: rw=1, want=9486, limit=112 [ 479.188718] loop4: rw=1, want=31249, limit=112 [ 479.189495] attempt to access beyond end of device [ 479.198460] loop5: rw=1, want=9487, limit=112 [ 479.203151] protocol 88fb is buggy, dev hsr_slave_0 [ 479.203209] protocol 88fb is buggy, dev hsr_slave_1 [ 479.224542] attempt to access beyond end of device [ 479.239411] loop4: rw=1, want=32993, limit=112 [ 479.245714] attempt to access beyond end of device [ 479.264309] loop5: rw=1, want=9488, limit=112 [ 479.268854] attempt to access beyond end of device [ 479.288463] loop5: rw=1, want=9489, limit=112 [ 479.311399] attempt to access beyond end of device [ 479.316357] loop5: rw=1, want=9538, limit=112 [ 479.334338] attempt to access beyond end of device [ 479.339285] loop5: rw=1, want=9539, limit=112 [ 479.348850] attempt to access beyond end of device [ 479.369433] loop5: rw=1, want=9540, limit=112 [ 479.373972] attempt to access beyond end of device [ 479.378908] loop5: rw=1, want=9541, limit=112 [ 479.397784] attempt to access beyond end of device [ 479.407581] loop5: rw=1, want=9550, limit=112 [ 479.413213] attempt to access beyond end of device [ 479.418166] loop5: rw=1, want=9551, limit=112 [ 479.427598] attempt to access beyond end of device [ 479.433842] loop5: rw=1, want=9552, limit=112 [ 479.438372] attempt to access beyond end of device [ 479.448399] loop5: rw=1, want=9553, limit=112 [ 479.464500] attempt to access beyond end of device [ 479.470527] loop5: rw=1, want=13649, limit=112 [ 479.483348] attempt to access beyond end of device [ 479.488294] loop5: rw=1, want=17745, limit=112 [ 479.508199] attempt to access beyond end of device [ 479.519399] loop5: rw=1, want=21841, limit=112 [ 479.537242] attempt to access beyond end of device [ 479.542239] loop5: rw=1, want=25937, limit=112 [ 479.559942] attempt to access beyond end of device [ 479.564885] loop5: rw=1, want=29273, limit=112 11:10:48 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000704010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xc00000000000000, 0x297ef) 11:10:48 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:48 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:48 executing program 5 (fault-call:5 fault-nth:0): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 480.312686] attempt to access beyond end of device [ 480.317668] loop4: rw=1, want=130, limit=112 [ 480.322651] buffer_io_error: 86 callbacks suppressed [ 480.322662] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 480.337061] attempt to access beyond end of device [ 480.342887] loop4: rw=1, want=131, limit=112 [ 480.347909] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 480.355991] attempt to access beyond end of device [ 480.361199] loop4: rw=1, want=132, limit=112 [ 480.365789] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 480.374043] attempt to access beyond end of device 11:10:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 480.403346] FAT-fs (loop0): bogus number of reserved sectors [ 480.409222] FAT-fs (loop0): Can't find a valid FAT filesystem [ 480.431863] loop4: rw=1, want=133, limit=112 11:10:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000202010002000270f7f8", 0x16}], 0x0, 0x0) [ 480.468309] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 480.525519] attempt to access beyond end of device 11:10:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xd00000000000000, 0x297ef) [ 480.561505] loop4: rw=1, want=142, limit=112 11:10:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000205010002000270f7f8", 0x16}], 0x0, 0x0) 11:10:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x12, 0x0) [ 480.594744] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 480.636074] attempt to access beyond end of device [ 480.658888] loop4: rw=1, want=143, limit=112 [ 480.680616] Buffer I/O error on dev loop4, logical block 142, lost async page write 11:10:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000207010002000270f7f8", 0x16}], 0x0, 0x0) [ 480.725176] attempt to access beyond end of device [ 480.744987] loop4: rw=1, want=144, limit=112 [ 480.767135] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 480.820528] attempt to access beyond end of device [ 480.825747] loop4: rw=1, want=145, limit=112 [ 480.848930] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 480.881955] attempt to access beyond end of device [ 480.898340] loop4: rw=1, want=3225, limit=112 [ 480.918018] attempt to access beyond end of device [ 480.927815] loop4: rw=1, want=3254, limit=112 [ 480.943980] Buffer I/O error on dev loop4, logical block 3253, lost async page write [ 480.971175] attempt to access beyond end of device [ 480.984260] loop4: rw=1, want=3255, limit=112 [ 480.996810] Buffer I/O error on dev loop4, logical block 3254, lost async page write [ 481.019664] attempt to access beyond end of device [ 481.032243] loop4: rw=1, want=3256, limit=112 [ 481.041577] attempt to access beyond end of device [ 481.052423] loop4: rw=1, want=3257, limit=112 [ 481.061720] attempt to access beyond end of device [ 481.071428] loop4: rw=1, want=3278, limit=112 [ 481.080736] attempt to access beyond end of device [ 481.090439] loop4: rw=1, want=3279, limit=112 [ 481.098579] attempt to access beyond end of device [ 481.116323] loop4: rw=1, want=3280, limit=112 [ 481.125175] attempt to access beyond end of device [ 481.133623] loop4: rw=1, want=3281, limit=112 [ 481.142862] attempt to access beyond end of device [ 481.152459] loop4: rw=1, want=3330, limit=112 [ 481.160496] attempt to access beyond end of device [ 481.169686] loop4: rw=1, want=3331, limit=112 [ 481.186174] attempt to access beyond end of device [ 481.205161] loop4: rw=1, want=3332, limit=112 [ 481.214012] attempt to access beyond end of device [ 481.219035] loop4: rw=1, want=3333, limit=112 [ 481.224997] attempt to access beyond end of device [ 481.231591] loop4: rw=1, want=3342, limit=112 [ 481.236119] attempt to access beyond end of device [ 481.241166] loop4: rw=1, want=3343, limit=112 [ 481.245694] attempt to access beyond end of device [ 481.250695] loop4: rw=1, want=3344, limit=112 [ 481.255247] attempt to access beyond end of device [ 481.260277] loop4: rw=1, want=3345, limit=112 [ 481.270385] attempt to access beyond end of device [ 481.275328] loop4: rw=1, want=7441, limit=112 [ 481.288315] attempt to access beyond end of device [ 481.293328] loop4: rw=1, want=11537, limit=112 [ 481.306393] attempt to access beyond end of device [ 481.311389] loop4: rw=1, want=15633, limit=112 [ 481.324336] attempt to access beyond end of device [ 481.329295] loop4: rw=1, want=19729, limit=112 [ 481.343767] attempt to access beyond end of device [ 481.348711] loop4: rw=1, want=23825, limit=112 [ 481.361432] attempt to access beyond end of device [ 481.366364] loop4: rw=1, want=27921, limit=112 [ 481.375464] attempt to access beyond end of device [ 481.380436] loop4: rw=1, want=32017, limit=112 [ 481.386930] attempt to access beyond end of device [ 481.391942] loop4: rw=1, want=32993, limit=112 11:10:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xe00000000000000, 0x297ef) 11:10:50 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:50 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x9) 11:10:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204020002000270f7f8", 0x16}], 0x0, 0x0) 11:10:50 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:50 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 482.161716] attempt to access beyond end of device 11:10:50 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0xa) [ 482.188578] loop4: rw=1, want=130, limit=112 [ 482.208471] attempt to access beyond end of device [ 482.241642] loop4: rw=1, want=131, limit=112 [ 482.258968] attempt to access beyond end of device [ 482.272223] loop4: rw=1, want=132, limit=112 [ 482.276673] attempt to access beyond end of device [ 482.290995] FAT-fs (loop0): bogus number of reserved sectors [ 482.296805] FAT-fs (loop0): Can't find a valid FAT filesystem [ 482.303860] loop4: rw=1, want=133, limit=112 [ 482.308319] attempt to access beyond end of device [ 482.330534] loop4: rw=1, want=142, limit=112 [ 482.334997] attempt to access beyond end of device 11:10:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204030002000270f7f8", 0x16}], 0x0, 0x0) [ 482.358135] loop4: rw=1, want=143, limit=112 11:10:50 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x10) [ 482.378733] attempt to access beyond end of device [ 482.387433] loop4: rw=1, want=144, limit=112 [ 482.400991] attempt to access beyond end of device [ 482.420955] loop4: rw=1, want=145, limit=112 11:10:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf00000000000000, 0x297ef) [ 482.463611] attempt to access beyond end of device [ 482.489947] loop4: rw=1, want=4241, limit=112 [ 482.497843] attempt to access beyond end of device 11:10:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204050002000270f7f8", 0x16}], 0x0, 0x0) 11:10:50 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x900) [ 482.540001] loop4: rw=1, want=4569, limit=112 [ 482.544816] attempt to access beyond end of device [ 482.566303] loop4: rw=1, want=4598, limit=112 [ 482.572813] attempt to access beyond end of device [ 482.591857] loop4: rw=1, want=4599, limit=112 [ 482.605446] attempt to access beyond end of device [ 482.627153] loop4: rw=1, want=4600, limit=112 [ 482.648278] attempt to access beyond end of device 11:10:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204070002000270f7f8", 0x16}], 0x0, 0x0) [ 482.671521] loop4: rw=1, want=4601, limit=112 [ 482.695429] attempt to access beyond end of device [ 482.723551] loop4: rw=1, want=4622, limit=112 [ 482.728108] attempt to access beyond end of device [ 482.750363] loop4: rw=1, want=4623, limit=112 [ 482.764768] attempt to access beyond end of device [ 482.777803] loop4: rw=1, want=4624, limit=112 [ 482.816086] attempt to access beyond end of device [ 482.828376] loop4: rw=1, want=4625, limit=112 [ 482.842668] attempt to access beyond end of device [ 482.847613] loop4: rw=1, want=4674, limit=112 [ 482.864253] attempt to access beyond end of device [ 482.869202] loop4: rw=1, want=4675, limit=112 [ 482.877453] attempt to access beyond end of device [ 482.895812] loop4: rw=1, want=4676, limit=112 [ 482.905259] attempt to access beyond end of device [ 482.916380] loop4: rw=1, want=4677, limit=112 [ 482.925985] attempt to access beyond end of device [ 482.935965] loop4: rw=1, want=4686, limit=112 [ 482.945516] attempt to access beyond end of device [ 482.956563] loop4: rw=1, want=4687, limit=112 [ 482.966092] attempt to access beyond end of device [ 482.977322] loop4: rw=1, want=4688, limit=112 [ 482.986950] attempt to access beyond end of device [ 482.994015] loop4: rw=1, want=4689, limit=112 [ 483.026259] attempt to access beyond end of device [ 483.031397] loop4: rw=1, want=8785, limit=112 [ 483.046482] attempt to access beyond end of device [ 483.057010] loop4: rw=1, want=12881, limit=112 [ 483.080977] attempt to access beyond end of device [ 483.087352] loop4: rw=1, want=16977, limit=112 [ 483.101483] attempt to access beyond end of device [ 483.106465] loop4: rw=1, want=21073, limit=112 [ 483.120081] attempt to access beyond end of device [ 483.125022] loop4: rw=1, want=25169, limit=112 [ 483.145630] attempt to access beyond end of device [ 483.150777] loop4: rw=1, want=29265, limit=112 [ 483.159789] attempt to access beyond end of device [ 483.164714] loop4: rw=1, want=32993, limit=112 11:10:51 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1000000000000000, 0x297ef) 11:10:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0xa00) 11:10:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e6661740002040f0002000270f7f8", 0x16}], 0x0, 0x0) 11:10:51 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:51 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 483.927945] attempt to access beyond end of device [ 483.933185] loop4: rw=1, want=130, limit=112 [ 483.937793] attempt to access beyond end of device [ 483.943112] loop4: rw=1, want=131, limit=112 [ 483.947754] attempt to access beyond end of device [ 483.953228] loop4: rw=1, want=132, limit=112 [ 483.957876] attempt to access beyond end of device [ 483.970253] loop4: rw=1, want=133, limit=112 [ 483.979740] attempt to access beyond end of device [ 483.985956] loop4: rw=1, want=142, limit=112 [ 483.994258] attempt to access beyond end of device [ 484.005476] loop4: rw=1, want=143, limit=112 [ 484.012070] attempt to access beyond end of device [ 484.013913] FAT-fs (loop0): bogus number of reserved sectors [ 484.023192] FAT-fs (loop0): Can't find a valid FAT filesystem 11:10:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x9000000) [ 484.023373] loop4: rw=1, want=144, limit=112 11:10:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204000502000270f7f8", 0x16}], 0x0, 0x0) [ 484.102224] attempt to access beyond end of device 11:10:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1100000000000000, 0x297ef) [ 484.132367] loop4: rw=1, want=145, limit=112 11:10:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0xa000000) [ 484.183999] attempt to access beyond end of device 11:10:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010202000270f7f8", 0x16}], 0x0, 0x0) [ 484.214828] loop4: rw=1, want=4241, limit=112 [ 484.237165] attempt to access beyond end of device [ 484.256064] loop4: rw=1, want=4249, limit=112 [ 484.271307] attempt to access beyond end of device 11:10:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x10000000) [ 484.290368] loop4: rw=1, want=4278, limit=112 [ 484.308350] attempt to access beyond end of device [ 484.325734] loop4: rw=1, want=4279, limit=112 [ 484.341766] attempt to access beyond end of device [ 484.365471] loop4: rw=1, want=4280, limit=112 [ 484.384032] attempt to access beyond end of device [ 484.389005] loop4: rw=1, want=4281, limit=112 [ 484.417009] attempt to access beyond end of device [ 484.433799] loop4: rw=1, want=4302, limit=112 [ 484.448163] attempt to access beyond end of device [ 484.464014] loop4: rw=1, want=4303, limit=112 [ 484.475511] attempt to access beyond end of device [ 484.485271] loop4: rw=1, want=4304, limit=112 [ 484.501725] attempt to access beyond end of device [ 484.510742] loop4: rw=1, want=4305, limit=112 [ 484.515400] attempt to access beyond end of device [ 484.526281] loop4: rw=1, want=4354, limit=112 [ 484.536715] attempt to access beyond end of device [ 484.543076] loop4: rw=1, want=4355, limit=112 [ 484.547702] attempt to access beyond end of device [ 484.553082] loop4: rw=1, want=4356, limit=112 [ 484.557712] attempt to access beyond end of device [ 484.563133] loop4: rw=1, want=4357, limit=112 [ 484.567771] attempt to access beyond end of device [ 484.573101] loop4: rw=1, want=4366, limit=112 [ 484.577725] attempt to access beyond end of device [ 484.583281] loop4: rw=1, want=4367, limit=112 [ 484.587899] attempt to access beyond end of device [ 484.593252] loop4: rw=1, want=4368, limit=112 [ 484.597894] attempt to access beyond end of device [ 484.603268] loop4: rw=1, want=4369, limit=112 [ 484.614847] attempt to access beyond end of device [ 484.620080] loop4: rw=1, want=8465, limit=112 [ 484.634946] attempt to access beyond end of device [ 484.640048] loop4: rw=1, want=12561, limit=112 [ 484.655087] attempt to access beyond end of device [ 484.660195] loop4: rw=1, want=16657, limit=112 [ 484.674454] attempt to access beyond end of device [ 484.679514] loop4: rw=1, want=20753, limit=112 [ 484.694087] attempt to access beyond end of device [ 484.699113] loop4: rw=1, want=24849, limit=112 [ 484.714074] attempt to access beyond end of device [ 484.719095] loop4: rw=1, want=28945, limit=112 [ 484.733674] attempt to access beyond end of device [ 484.738705] loop4: rw=1, want=32993, limit=112 [ 484.949470] net_ratelimit: 26 callbacks suppressed [ 484.949489] protocol 88fb is buggy, dev hsr_slave_0 [ 484.959573] protocol 88fb is buggy, dev hsr_slave_1 [ 484.959693] protocol 88fb is buggy, dev hsr_slave_0 [ 484.969684] protocol 88fb is buggy, dev hsr_slave_1 [ 484.974813] protocol 88fb is buggy, dev hsr_slave_0 [ 484.979943] protocol 88fb is buggy, dev hsr_slave_1 [ 484.985069] protocol 88fb is buggy, dev hsr_slave_0 [ 484.990174] protocol 88fb is buggy, dev hsr_slave_1 [ 485.429544] protocol 88fb is buggy, dev hsr_slave_0 [ 485.434685] protocol 88fb is buggy, dev hsr_slave_1 11:10:53 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010302000270f7f8", 0x16}], 0x0, 0x0) 11:10:53 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1200000000000000, 0x297ef) 11:10:53 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x900000000000000) 11:10:53 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 485.644805] attempt to access beyond end of device [ 485.650980] loop4: rw=1, want=130, limit=112 [ 485.655551] buffer_io_error: 62 callbacks suppressed [ 485.655562] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 485.682962] attempt to access beyond end of device [ 485.688017] loop4: rw=1, want=131, limit=112 [ 485.698373] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 485.707459] attempt to access beyond end of device [ 485.713468] loop4: rw=1, want=132, limit=112 [ 485.718008] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 485.726361] attempt to access beyond end of device [ 485.733446] loop4: rw=1, want=133, limit=112 [ 485.738004] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 485.748165] attempt to access beyond end of device [ 485.753537] loop4: rw=1, want=142, limit=112 [ 485.762632] Buffer I/O error on dev loop4, logical block 141, lost async page write 11:10:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010402000270f7f8", 0x16}], 0x0, 0x0) 11:10:53 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0xa00000000000000) [ 485.792238] FAT-fs (loop0): bogus number of reserved sectors [ 485.800750] attempt to access beyond end of device [ 485.812675] loop4: rw=1, want=143, limit=112 [ 485.826663] FAT-fs (loop0): Can't find a valid FAT filesystem [ 485.861627] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 485.885271] attempt to access beyond end of device [ 485.893158] loop4: rw=1, want=144, limit=112 [ 485.906040] Buffer I/O error on dev loop4, logical block 143, lost async page write 11:10:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1300000000000000, 0x297ef) 11:10:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010502000270f7f8", 0x16}], 0x0, 0x0) [ 485.946061] attempt to access beyond end of device [ 485.959214] loop4: rw=1, want=145, limit=112 [ 485.976522] Buffer I/O error on dev loop4, logical block 144, lost async page write 11:10:54 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x1000000000000000) [ 486.041653] attempt to access beyond end of device [ 486.072385] loop4: rw=1, want=4121, limit=112 [ 486.103880] attempt to access beyond end of device [ 486.123118] loop4: rw=1, want=4150, limit=112 [ 486.128511] Buffer I/O error on dev loop4, logical block 4149, lost async page write [ 486.144660] attempt to access beyond end of device [ 486.152633] loop4: rw=1, want=4151, limit=112 [ 486.157388] Buffer I/O error on dev loop4, logical block 4150, lost async page write [ 486.174480] attempt to access beyond end of device [ 486.182333] loop4: rw=1, want=4152, limit=112 [ 486.187031] attempt to access beyond end of device [ 486.196978] loop4: rw=1, want=4153, limit=112 11:10:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1400000000000000, 0x297ef) [ 486.204541] attempt to access beyond end of device [ 486.232475] loop4: rw=1, want=4174, limit=112 [ 486.247634] attempt to access beyond end of device [ 486.269134] loop4: rw=1, want=4175, limit=112 [ 486.289718] attempt to access beyond end of device [ 486.307069] loop4: rw=1, want=4176, limit=112 [ 486.328632] attempt to access beyond end of device [ 486.338589] loop4: rw=1, want=4177, limit=112 [ 486.352473] attempt to access beyond end of device [ 486.357420] loop4: rw=1, want=4226, limit=112 [ 486.370174] attempt to access beyond end of device [ 486.375124] loop4: rw=1, want=4227, limit=112 [ 486.380496] attempt to access beyond end of device [ 486.385552] loop4: rw=1, want=4228, limit=112 [ 486.391241] attempt to access beyond end of device [ 486.396305] loop4: rw=1, want=4229, limit=112 [ 486.401221] attempt to access beyond end of device [ 486.406294] loop4: rw=1, want=4238, limit=112 [ 486.411238] attempt to access beyond end of device [ 486.416269] loop4: rw=1, want=4239, limit=112 [ 486.422755] attempt to access beyond end of device [ 486.427801] loop4: rw=1, want=4240, limit=112 [ 486.435787] attempt to access beyond end of device [ 486.444355] loop4: rw=1, want=4241, limit=112 [ 486.458867] attempt to access beyond end of device [ 486.467281] loop4: rw=1, want=8337, limit=112 [ 486.495755] attempt to access beyond end of device [ 486.500834] loop4: rw=1, want=12433, limit=112 [ 486.514698] attempt to access beyond end of device [ 486.519710] loop4: rw=1, want=16529, limit=112 [ 486.532871] attempt to access beyond end of device [ 486.537835] loop4: rw=1, want=20625, limit=112 [ 486.551010] attempt to access beyond end of device [ 486.555953] loop4: rw=1, want=24721, limit=112 [ 486.569083] attempt to access beyond end of device [ 486.574130] loop4: rw=1, want=28817, limit=112 [ 486.586415] attempt to access beyond end of device [ 486.591503] loop4: rw=1, want=32913, limit=112 [ 486.599004] attempt to access beyond end of device [ 486.604015] loop4: rw=1, want=32993, limit=112 11:10:55 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r1, &(0x7f0000000040)="890f0c673bf40a8261740599f55eec8f5fa3f193b3d21a47156ac86570e6bda242495837b9", 0x25, 0x40, 0x0, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:55 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010802000270f7f8", 0x16}], 0x0, 0x0) 11:10:55 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1500000000000000, 0x297ef) 11:10:55 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 487.418427] attempt to access beyond end of device [ 487.436265] loop4: rw=1, want=130, limit=112 [ 487.454120] attempt to access beyond end of device 11:10:55 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x8, "e1446e208e02"}, 0x8, 0x2) signalfd4(r1, &(0x7f0000000040)={0x9e1b}, 0x8, 0x0) [ 487.474390] loop4: rw=1, want=131, limit=112 [ 487.490299] attempt to access beyond end of device [ 487.499007] loop4: rw=1, want=132, limit=112 [ 487.517696] attempt to access beyond end of device [ 487.536801] FAT-fs (loop0): bogus number of reserved sectors [ 487.542751] FAT-fs (loop0): Can't find a valid FAT filesystem [ 487.554078] loop4: rw=1, want=133, limit=112 [ 487.569728] attempt to access beyond end of device 11:10:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204011002000270f7f8", 0x16}], 0x0, 0x0) [ 487.586873] loop4: rw=1, want=142, limit=112 [ 487.599894] attempt to access beyond end of device [ 487.605018] loop4: rw=1, want=143, limit=112 [ 487.612381] attempt to access beyond end of device [ 487.622533] loop4: rw=1, want=144, limit=112 11:10:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1600000000000000, 0x297ef) [ 487.641030] attempt to access beyond end of device [ 487.656361] loop4: rw=1, want=145, limit=112 [ 487.699090] attempt to access beyond end of device 11:10:55 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x7f) getsockname$unix(r0, &(0x7f0000000140), &(0x7f0000000000)=0x6e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r1, 0x0, r3, 0x0, 0x3fc, 0x0) 11:10:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010007000270f7f8", 0x16}], 0x0, 0x0) [ 487.729640] loop4: rw=1, want=4241, limit=112 [ 487.757693] attempt to access beyond end of device [ 487.784204] loop4: rw=1, want=5465, limit=112 [ 487.802835] attempt to access beyond end of device [ 487.828645] loop4: rw=1, want=5494, limit=112 [ 487.852071] attempt to access beyond end of device [ 487.866365] loop4: rw=1, want=5495, limit=112 [ 487.882306] attempt to access beyond end of device [ 487.896357] loop4: rw=1, want=5496, limit=112 11:10:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010223000270f7f8", 0x16}], 0x0, 0x0) [ 487.911610] attempt to access beyond end of device [ 487.927512] loop4: rw=1, want=5497, limit=112 [ 487.938790] attempt to access beyond end of device [ 487.949616] loop4: rw=1, want=5518, limit=112 [ 487.967693] attempt to access beyond end of device [ 487.979592] loop4: rw=1, want=5519, limit=112 [ 487.988892] attempt to access beyond end of device [ 487.999746] loop4: rw=1, want=5520, limit=112 [ 488.008936] attempt to access beyond end of device [ 488.038749] loop4: rw=1, want=5521, limit=112 [ 488.043623] attempt to access beyond end of device [ 488.052532] loop4: rw=1, want=5570, limit=112 [ 488.057158] attempt to access beyond end of device [ 488.062373] loop4: rw=1, want=5571, limit=112 [ 488.067006] attempt to access beyond end of device [ 488.072475] loop4: rw=1, want=5572, limit=112 [ 488.077100] attempt to access beyond end of device [ 488.082770] loop4: rw=1, want=5573, limit=112 [ 488.087405] attempt to access beyond end of device [ 488.092739] loop4: rw=1, want=5582, limit=112 [ 488.097490] attempt to access beyond end of device [ 488.102892] loop4: rw=1, want=5583, limit=112 [ 488.107699] attempt to access beyond end of device [ 488.113253] loop4: rw=1, want=5584, limit=112 [ 488.118229] attempt to access beyond end of device [ 488.123634] loop4: rw=1, want=5585, limit=112 [ 488.138324] attempt to access beyond end of device [ 488.143426] loop4: rw=1, want=9681, limit=112 [ 488.158558] attempt to access beyond end of device [ 488.163697] loop4: rw=1, want=13777, limit=112 [ 488.181926] attempt to access beyond end of device [ 488.186961] loop4: rw=1, want=17873, limit=112 [ 488.201888] attempt to access beyond end of device [ 488.210006] loop4: rw=1, want=21969, limit=112 [ 488.227036] attempt to access beyond end of device [ 488.239738] loop4: rw=1, want=26065, limit=112 [ 488.254374] attempt to access beyond end of device [ 488.259548] loop4: rw=1, want=30161, limit=112 [ 488.271749] attempt to access beyond end of device [ 488.276772] loop4: rw=1, want=32993, limit=112 11:10:57 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1700000000000000, 0x297ef) 11:10:57 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:57 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:10:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010007000270f7f8", 0x16}], 0x0, 0x0) 11:10:57 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/l2cap\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) recvmsg(r4, &(0x7f0000001440)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3}, 0x10000) prctl$PR_SET_KEEPCAPS(0x8, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, r5}) [ 489.156191] attempt to access beyond end of device [ 489.169520] loop4: rw=1, want=130, limit=112 [ 489.178029] attempt to access beyond end of device [ 489.183357] loop4: rw=1, want=131, limit=112 [ 489.187937] attempt to access beyond end of device [ 489.193735] loop4: rw=1, want=132, limit=112 [ 489.198349] attempt to access beyond end of device [ 489.212002] loop4: rw=1, want=133, limit=112 [ 489.221433] attempt to access beyond end of device [ 489.242602] loop4: rw=1, want=142, limit=112 [ 489.250718] attempt to access beyond end of device 11:10:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010023020270f7f8", 0x16}], 0x0, 0x0) [ 489.259232] loop4: rw=1, want=143, limit=112 [ 489.276821] attempt to access beyond end of device [ 489.287605] loop4: rw=1, want=144, limit=112 [ 489.296821] attempt to access beyond end of device [ 489.303074] FAT-fs (loop0): bogus number of reserved sectors 11:10:57 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) getpgid(0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) syz_open_procfs(r3, &(0x7f00000000c0)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 489.308735] loop4: rw=1, want=145, limit=112 [ 489.308901] FAT-fs (loop0): Can't find a valid FAT filesystem [ 489.342545] attempt to access beyond end of device [ 489.358854] loop4: rw=1, want=4241, limit=112 11:10:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002020270f7f8", 0x16}], 0x0, 0x0) 11:10:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1800000000000000, 0x297ef) [ 489.421259] attempt to access beyond end of device [ 489.477084] loop4: rw=1, want=5337, limit=112 [ 489.488756] attempt to access beyond end of device [ 489.504892] loop4: rw=1, want=5366, limit=112 11:10:57 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@srh={0x29, 0xe, 0x4, 0x7, 0x80, 0x0, 0x7, [@remote, @empty, @rand_addr="29325c2206092e4a84ce4b8556769c7d", @mcast1, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local]}, 0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 489.528340] attempt to access beyond end of device [ 489.539193] loop4: rw=1, want=5367, limit=112 [ 489.556805] attempt to access beyond end of device [ 489.572179] loop4: rw=1, want=5368, limit=112 11:10:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002030270f7f8", 0x16}], 0x0, 0x0) [ 489.608280] attempt to access beyond end of device [ 489.636645] loop4: rw=1, want=5369, limit=112 [ 489.658262] attempt to access beyond end of device [ 489.674531] loop4: rw=1, want=5390, limit=112 [ 489.689953] attempt to access beyond end of device [ 489.712276] loop4: rw=1, want=5391, limit=112 [ 489.742614] attempt to access beyond end of device [ 489.760569] loop4: rw=1, want=5392, limit=112 [ 489.765120] attempt to access beyond end of device [ 489.785853] loop4: rw=1, want=5393, limit=112 [ 489.790934] attempt to access beyond end of device [ 489.795876] loop4: rw=1, want=5442, limit=112 [ 489.828958] attempt to access beyond end of device [ 489.834178] loop4: rw=1, want=5443, limit=112 [ 489.838710] attempt to access beyond end of device [ 489.854945] loop4: rw=1, want=5444, limit=112 [ 489.865609] attempt to access beyond end of device [ 489.871788] loop4: rw=1, want=5445, limit=112 [ 489.876332] attempt to access beyond end of device [ 489.887774] loop4: rw=1, want=5454, limit=112 [ 489.893585] attempt to access beyond end of device [ 489.898528] loop4: rw=1, want=5455, limit=112 [ 489.909128] attempt to access beyond end of device [ 489.915395] loop4: rw=1, want=5456, limit=112 [ 489.925663] attempt to access beyond end of device [ 489.931804] loop4: rw=1, want=5457, limit=112 [ 489.942252] attempt to access beyond end of device [ 489.947204] loop4: rw=1, want=9553, limit=112 [ 489.967460] attempt to access beyond end of device [ 489.978557] loop4: rw=1, want=13649, limit=112 [ 489.997026] attempt to access beyond end of device [ 490.002016] loop4: rw=1, want=17745, limit=112 [ 490.015077] attempt to access beyond end of device [ 490.026581] loop4: rw=1, want=21841, limit=112 [ 490.045826] attempt to access beyond end of device [ 490.050895] loop4: rw=1, want=25937, limit=112 [ 490.068663] attempt to access beyond end of device [ 490.073704] loop4: rw=1, want=30033, limit=112 [ 490.084779] attempt to access beyond end of device [ 490.095588] loop4: rw=1, want=32993, limit=112 11:10:58 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:10:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1900000000000000, 0x297ef) 11:10:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r3, 0x4, 0x3}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'crc32-generic\x00'}}, &(0x7f00000001c0)="0e38d6527f0e088305142d364ff7db39042e8f11fe18d1d4d6e2bcb9b7b5bf8d904f8bffdf03b0951a2b548c40b100682f88758b002651e5ae", &(0x7f0000000200)=""/10) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:10:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002040270f7f8", 0x16}], 0x0, 0x0) 11:10:58 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:10:58 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 490.907282] attempt to access beyond end of device 11:10:58 executing program 5: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x4) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000023ff8)='./control\x00', r1, &(0x7f0000000080)='./control\x00') renameat2(r0, &(0x7f0000bee000)='./control\x00', r1, &(0x7f000003a000)='./control\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r3, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r2, 0x0, r4, 0x0, 0x3fc, 0x0) [ 490.951288] loop4: rw=1, want=130, limit=112 [ 490.958948] buffer_io_error: 62 callbacks suppressed [ 490.958959] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 490.978586] attempt to access beyond end of device 11:10:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1a00000000000000, 0x297ef) [ 490.998455] loop4: rw=1, want=131, limit=112 [ 491.020183] FAT-fs (loop0): bogus number of reserved sectors [ 491.026000] FAT-fs (loop0): Can't find a valid FAT filesystem 11:10:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002050270f7f8", 0x16}], 0x0, 0x0) [ 491.052509] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 491.079921] attempt to access beyond end of device [ 491.106597] loop4: rw=1, want=132, limit=112 [ 491.119437] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 491.147605] attempt to access beyond end of device [ 491.177032] loop4: rw=1, want=133, limit=112 [ 491.189428] net_ratelimit: 26 callbacks suppressed [ 491.189436] protocol 88fb is buggy, dev hsr_slave_0 [ 491.199769] protocol 88fb is buggy, dev hsr_slave_1 [ 491.204893] protocol 88fb is buggy, dev hsr_slave_0 [ 491.210029] protocol 88fb is buggy, dev hsr_slave_1 [ 491.215138] protocol 88fb is buggy, dev hsr_slave_0 11:10:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1b00000000000000, 0x297ef) 11:10:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002080270f7f8", 0x16}], 0x0, 0x0) [ 491.220205] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 491.220325] protocol 88fb is buggy, dev hsr_slave_1 [ 491.228428] attempt to access beyond end of device [ 491.233177] protocol 88fb is buggy, dev hsr_slave_0 [ 491.243175] loop4: rw=1, want=142, limit=112 [ 491.243198] protocol 88fb is buggy, dev hsr_slave_1 [ 491.247591] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 491.297096] attempt to access beyond end of device [ 491.331625] loop4: rw=1, want=143, limit=112 [ 491.336047] Buffer I/O error on dev loop4, logical block 142, lost async page write 11:10:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000280)) close(r1) write$cgroup_int(r0, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getpgrp(0xffffffffffffffff) splice(r0, 0x0, r0, 0x0, 0xd2eb, 0xfffffffffffffffd) [ 491.379632] attempt to access beyond end of device [ 491.384582] loop4: rw=1, want=144, limit=112 [ 491.389000] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 491.431797] attempt to access beyond end of device [ 491.450689] loop4: rw=1, want=145, limit=112 [ 491.469002] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 491.498700] attempt to access beyond end of device [ 491.504169] loop4: rw=1, want=4241, limit=112 [ 491.514122] attempt to access beyond end of device [ 491.519533] loop4: rw=1, want=5209, limit=112 [ 491.526740] attempt to access beyond end of device [ 491.532719] loop4: rw=1, want=5238, limit=112 [ 491.545591] Buffer I/O error on dev loop4, logical block 5237, lost async page write [ 491.558384] attempt to access beyond end of device [ 491.566301] loop4: rw=1, want=5239, limit=112 [ 491.579781] Buffer I/O error on dev loop4, logical block 5238, lost async page write [ 491.587876] attempt to access beyond end of device [ 491.601513] loop4: rw=1, want=5240, limit=112 [ 491.614294] attempt to access beyond end of device [ 491.621596] loop4: rw=1, want=5241, limit=112 [ 491.638919] attempt to access beyond end of device [ 491.646471] loop4: rw=1, want=5262, limit=112 [ 491.656905] attempt to access beyond end of device [ 491.662778] loop4: rw=1, want=5263, limit=112 [ 491.667486] attempt to access beyond end of device [ 491.672654] protocol 88fb is buggy, dev hsr_slave_0 [ 491.672707] protocol 88fb is buggy, dev hsr_slave_1 [ 491.689533] loop4: rw=1, want=5264, limit=112 [ 491.694229] attempt to access beyond end of device [ 491.699309] loop4: rw=1, want=5265, limit=112 [ 491.704480] attempt to access beyond end of device [ 491.709839] loop4: rw=1, want=5314, limit=112 [ 491.714510] attempt to access beyond end of device [ 491.729773] loop4: rw=1, want=5315, limit=112 [ 491.734331] attempt to access beyond end of device [ 491.739272] loop4: rw=1, want=5316, limit=112 [ 491.745060] attempt to access beyond end of device [ 491.750358] loop4: rw=1, want=5317, limit=112 [ 491.754889] attempt to access beyond end of device [ 491.760238] loop4: rw=1, want=5326, limit=112 [ 491.764777] attempt to access beyond end of device [ 491.770034] loop4: rw=1, want=5327, limit=112 [ 491.774580] attempt to access beyond end of device [ 491.779904] loop4: rw=1, want=5328, limit=112 [ 491.784933] attempt to access beyond end of device [ 491.790228] loop4: rw=1, want=5329, limit=112 [ 491.800523] attempt to access beyond end of device [ 491.805465] loop4: rw=1, want=9425, limit=112 [ 491.818740] attempt to access beyond end of device [ 491.824071] loop4: rw=1, want=13521, limit=112 [ 491.838002] attempt to access beyond end of device [ 491.843026] loop4: rw=1, want=17617, limit=112 [ 491.856204] attempt to access beyond end of device [ 491.861243] loop4: rw=1, want=21713, limit=112 [ 491.875424] attempt to access beyond end of device [ 491.880431] loop4: rw=1, want=25809, limit=112 [ 491.893607] attempt to access beyond end of device [ 491.898587] loop4: rw=1, want=29905, limit=112 [ 491.914604] attempt to access beyond end of device [ 491.919585] loop4: rw=1, want=32993, limit=112 11:11:00 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002100270f7f8", 0x16}], 0x0, 0x0) 11:11:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1c00000000000000, 0x297ef) 11:11:00 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) fcntl$setflags(r1, 0x2, 0x1) 11:11:00 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 492.252375] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006641) [ 492.259789] FAT-fs (loop4): Filesystem has been set read-only [ 492.266181] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006641) 11:11:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2000000000000000, 0x297ef) [ 492.450374] FAT-fs (loop0): invalid media value (0x00) [ 492.455755] FAT-fs (loop0): Can't find a valid FAT filesystem 11:11:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000770f7f8", 0x16}], 0x0, 0x0) 11:11:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002022370f7f8", 0x16}], 0x0, 0x0) 11:11:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2082920200000000, 0x297ef) 11:11:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x294}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x67}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf0}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:01 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:01 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000770f7f8", 0x16}], 0x0, 0x0) 11:11:01 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000080)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) 11:11:01 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8000000000000000, 0x297ef) [ 493.497664] attempt to access beyond end of device [ 493.503002] loop4: rw=1, want=130, limit=112 [ 493.515865] attempt to access beyond end of device [ 493.529444] loop4: rw=1, want=131, limit=112 [ 493.533896] attempt to access beyond end of device [ 493.538829] loop4: rw=1, want=132, limit=112 [ 493.559543] attempt to access beyond end of device [ 493.565777] loop4: rw=1, want=133, limit=112 [ 493.572262] attempt to access beyond end of device [ 493.578551] loop4: rw=1, want=142, limit=112 [ 493.583199] attempt to access beyond end of device [ 493.588302] loop4: rw=1, want=143, limit=112 [ 493.599069] attempt to access beyond end of device [ 493.608211] loop4: rw=1, want=144, limit=112 [ 493.612860] attempt to access beyond end of device [ 493.618009] loop4: rw=1, want=145, limit=112 [ 493.628570] attempt to access beyond end of device [ 493.642483] loop4: rw=1, want=3417, limit=112 11:11:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270e0f8", 0x16}], 0x0, 0x0) 11:11:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x8e0b000000000000, 0x297ef) [ 493.667372] FAT-fs (loop0): invalid media value (0x00) [ 493.673226] FAT-fs (loop0): Can't find a valid FAT filesystem [ 493.689311] attempt to access beyond end of device [ 493.710718] loop4: rw=1, want=3446, limit=112 [ 493.734292] attempt to access beyond end of device [ 493.757522] loop4: rw=1, want=3447, limit=112 [ 493.779641] attempt to access beyond end of device [ 493.799513] loop4: rw=1, want=3448, limit=112 [ 493.818748] attempt to access beyond end of device 11:11:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7e0", 0x16}], 0x0, 0x0) [ 493.835392] loop4: rw=1, want=3449, limit=112 [ 493.850484] attempt to access beyond end of device [ 493.865872] loop4: rw=1, want=3470, limit=112 [ 493.881490] attempt to access beyond end of device [ 493.903521] loop4: rw=1, want=3471, limit=112 [ 493.922995] attempt to access beyond end of device 11:11:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xe000}], 0x0, 0x0) [ 493.939183] loop4: rw=1, want=3472, limit=112 [ 493.954575] attempt to access beyond end of device [ 493.973318] loop4: rw=1, want=3473, limit=112 [ 493.984756] attempt to access beyond end of device 11:11:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf0ffffffffffffff, 0x297ef) [ 493.998724] loop4: rw=1, want=3522, limit=112 [ 494.010638] attempt to access beyond end of device [ 494.023441] loop4: rw=1, want=3523, limit=112 11:11:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfdef}], 0x0, 0x0) [ 494.052958] attempt to access beyond end of device [ 494.062681] loop4: rw=1, want=3524, limit=112 [ 494.073121] attempt to access beyond end of device [ 494.082712] loop4: rw=1, want=3525, limit=112 [ 494.093187] attempt to access beyond end of device [ 494.102997] loop4: rw=1, want=3534, limit=112 [ 494.119132] attempt to access beyond end of device [ 494.130924] loop4: rw=1, want=3535, limit=112 [ 494.140329] attempt to access beyond end of device [ 494.151325] loop4: rw=1, want=3536, limit=112 [ 494.161807] attempt to access beyond end of device [ 494.179128] loop4: rw=1, want=3537, limit=112 [ 494.208250] attempt to access beyond end of device [ 494.227866] loop4: rw=1, want=7633, limit=112 [ 494.287312] attempt to access beyond end of device [ 494.292794] loop4: rw=1, want=11729, limit=112 [ 494.314782] attempt to access beyond end of device [ 494.327362] loop4: rw=1, want=15825, limit=112 [ 494.368405] attempt to access beyond end of device [ 494.373728] loop4: rw=1, want=19921, limit=112 [ 494.394060] attempt to access beyond end of device [ 494.399017] loop4: rw=1, want=24017, limit=112 [ 494.429028] attempt to access beyond end of device [ 494.448760] loop4: rw=1, want=28113, limit=112 [ 494.461418] attempt to access beyond end of device [ 494.466400] loop4: rw=1, want=32209, limit=112 [ 494.476726] attempt to access beyond end of device [ 494.482058] loop4: rw=1, want=32993, limit=112 11:11:03 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x20000116}], 0x0, 0x0) 11:11:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={r3, 0x6, 0x7, 0x0, 0x8000, 0x8}) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:03 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:03 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xf6ff000000000000, 0x297ef) [ 495.599867] attempt to access beyond end of device [ 495.606265] loop4: rw=1, want=130, limit=112 [ 495.618425] attempt to access beyond end of device 11:11:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000140)=""/255) [ 495.645578] loop4: rw=1, want=131, limit=112 [ 495.659565] FAT-fs (loop0): invalid media value (0x00) [ 495.664081] attempt to access beyond end of device [ 495.664903] FAT-fs (loop0): Can't find a valid FAT filesystem [ 495.699007] loop4: rw=1, want=132, limit=112 [ 495.717100] attempt to access beyond end of device 11:11:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xff0f000000000000, 0x297ef) [ 495.739478] loop4: rw=1, want=133, limit=112 [ 495.745523] attempt to access beyond end of device [ 495.784483] loop4: rw=1, want=142, limit=112 [ 495.788938] attempt to access beyond end of device 11:11:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000080)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 495.839272] loop4: rw=1, want=143, limit=112 [ 495.857986] attempt to access beyond end of device [ 495.903314] loop4: rw=1, want=144, limit=112 [ 495.922109] attempt to access beyond end of device 11:11:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xffff1f0000000000, 0x297ef) [ 495.947958] loop4: rw=1, want=145, limit=112 [ 495.972564] buffer_io_error: 45 callbacks suppressed [ 495.972574] Buffer I/O error on dev loop4, logical block 144, lost async page write 11:11:04 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn(r0, &(0x7f00000000c0)={0x22, 0xffff, 0x78, 0x7, 0x6}, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) signalfd(r1, &(0x7f0000000080)={0x4f15}, 0x8) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x8000) fcntl$setstatus(r1, 0x4, 0x2000) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x2) [ 496.042431] attempt to access beyond end of device [ 496.061445] loop4: rw=1, want=3033, limit=112 [ 496.090528] attempt to access beyond end of device [ 496.112236] loop4: rw=1, want=3062, limit=112 [ 496.132136] Buffer I/O error on dev loop4, logical block 3061, lost async page write [ 496.155943] attempt to access beyond end of device 11:11:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xffffff0f00000000, 0x297ef) [ 496.167293] loop4: rw=1, want=3063, limit=112 [ 496.177769] Buffer I/O error on dev loop4, logical block 3062, lost async page write [ 496.199585] attempt to access beyond end of device [ 496.211705] loop4: rw=1, want=3064, limit=112 [ 496.225853] Buffer I/O error on dev loop4, logical block 3063, lost async page write [ 496.248528] attempt to access beyond end of device [ 496.278062] loop4: rw=1, want=3065, limit=112 [ 496.297285] Buffer I/O error on dev loop4, logical block 3064, lost async page write [ 496.334423] attempt to access beyond end of device [ 496.357688] loop4: rw=1, want=3086, limit=112 [ 496.389514] Buffer I/O error on dev loop4, logical block 3085, lost async page write [ 496.408198] attempt to access beyond end of device [ 496.413293] loop4: rw=1, want=3087, limit=112 [ 496.417869] Buffer I/O error on dev loop4, logical block 3086, lost async page write [ 496.429234] attempt to access beyond end of device [ 496.438817] loop4: rw=1, want=3088, limit=112 [ 496.446216] Buffer I/O error on dev loop4, logical block 3087, lost async page write [ 496.454303] attempt to access beyond end of device [ 496.459324] loop4: rw=1, want=3089, limit=112 [ 496.465198] Buffer I/O error on dev loop4, logical block 3088, lost async page write [ 496.473969] attempt to access beyond end of device [ 496.479012] loop4: rw=1, want=3138, limit=112 [ 496.483683] Buffer I/O error on dev loop4, logical block 3137, lost async page write [ 496.491808] attempt to access beyond end of device [ 496.496749] loop4: rw=1, want=3139, limit=112 [ 496.501382] attempt to access beyond end of device [ 496.506322] loop4: rw=1, want=3140, limit=112 [ 496.510914] attempt to access beyond end of device [ 496.515850] loop4: rw=1, want=3141, limit=112 [ 496.520433] attempt to access beyond end of device [ 496.525380] loop4: rw=1, want=3150, limit=112 [ 496.530771] attempt to access beyond end of device [ 496.535706] loop4: rw=1, want=3151, limit=112 [ 496.540293] attempt to access beyond end of device [ 496.545250] loop4: rw=1, want=3152, limit=112 [ 496.550007] attempt to access beyond end of device [ 496.554944] loop4: rw=1, want=3153, limit=112 [ 496.565037] attempt to access beyond end of device [ 496.570030] loop4: rw=1, want=7249, limit=112 [ 496.577653] attempt to access beyond end of device [ 496.583805] loop4: rw=1, want=11345, limit=112 [ 496.596766] attempt to access beyond end of device [ 496.601751] loop4: rw=1, want=15441, limit=112 [ 496.614714] attempt to access beyond end of device [ 496.621096] loop4: rw=1, want=19537, limit=112 [ 496.630087] attempt to access beyond end of device [ 496.635028] loop4: rw=1, want=23633, limit=112 [ 496.644216] attempt to access beyond end of device [ 496.649136] loop4: rw=1, want=27729, limit=112 [ 496.658534] attempt to access beyond end of device [ 496.663736] loop4: rw=1, want=31825, limit=112 [ 496.671369] attempt to access beyond end of device [ 496.676298] loop4: rw=1, want=32993, limit=112 11:11:05 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$SIOCRSACCEPT(r1, 0x89e3) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xffffffff00000000, 0x297ef) 11:11:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffdef}], 0x0, 0x0) [ 497.429505] net_ratelimit: 26 callbacks suppressed [ 497.429513] protocol 88fb is buggy, dev hsr_slave_0 [ 497.439582] protocol 88fb is buggy, dev hsr_slave_1 [ 497.444678] protocol 88fb is buggy, dev hsr_slave_0 [ 497.449761] protocol 88fb is buggy, dev hsr_slave_1 [ 497.454831] protocol 88fb is buggy, dev hsr_slave_0 [ 497.459942] protocol 88fb is buggy, dev hsr_slave_1 [ 497.465006] protocol 88fb is buggy, dev hsr_slave_0 [ 497.470081] protocol 88fb is buggy, dev hsr_slave_1 11:11:05 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:05 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 497.529519] attempt to access beyond end of device [ 497.535130] loop4: rw=1, want=130, limit=112 [ 497.546164] attempt to access beyond end of device 11:11:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000080)={0x6}) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 497.573173] loop4: rw=1, want=131, limit=112 [ 497.595024] attempt to access beyond end of device [ 497.618526] FAT-fs (loop0): invalid media value (0x00) [ 497.624058] FAT-fs (loop0): Can't find a valid FAT filesystem [ 497.655520] loop4: rw=1, want=132, limit=112 [ 497.679770] attempt to access beyond end of device [ 497.721350] loop4: rw=1, want=133, limit=112 11:11:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0xfffffffffffffff0, 0x297ef) [ 497.762202] attempt to access beyond end of device [ 497.776060] loop4: rw=1, want=142, limit=112 [ 497.787771] attempt to access beyond end of device [ 497.796287] loop4: rw=1, want=143, limit=112 [ 497.804302] attempt to access beyond end of device 11:11:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r4}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000007c0)={0x5, 0x6, 0x0, 0x23, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001a80)={0x0, @dev, @empty}, &(0x7f0000001ac0)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001b00)={0x0, @initdev, @multicast2}, &(0x7f0000001b40)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000001b80)={@loopback, @rand_addr, 0x0}, &(0x7f0000001bc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c00)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000001d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000032c0)=0xe8) accept4$packet(r1, &(0x7f0000003440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003480)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000034c0)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000035c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003600)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000003700)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000003d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="7c050000", @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="8000020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="400002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="4001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000101000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600979921f3cf21d76cf2d60bfe772607d970901537408d0f34cc2c434f3010c6b967eddb277bb7e9b4121af7db62f212e84876c1fc072e6ba7bc2994f82583fd498b927d73", @ANYRES32=r13, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r14, @ANYBLOB="a40102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007f000000"], 0x57c}, 0x1, 0x0, 0x0, 0x90}, 0x40) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x4) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 497.813821] loop4: rw=1, want=144, limit=112 [ 497.823836] attempt to access beyond end of device [ 497.836756] loop4: rw=1, want=145, limit=112 [ 497.879830] attempt to access beyond end of device [ 497.909453] protocol 88fb is buggy, dev hsr_slave_0 [ 497.909545] loop4: rw=1, want=4241, limit=112 [ 497.914554] protocol 88fb is buggy, dev hsr_slave_1 [ 497.938030] attempt to access beyond end of device 11:11:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') fchdir(r2) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x1) [ 497.958008] loop4: rw=1, want=4697, limit=112 [ 497.965417] attempt to access beyond end of device [ 497.983656] loop4: rw=1, want=4726, limit=112 [ 497.999240] attempt to access beyond end of device [ 498.031365] loop4: rw=1, want=4727, limit=112 11:11:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x2000) [ 498.056178] attempt to access beyond end of device 11:11:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) close(r2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='attr/prev\x00') write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') connect$x25(r0, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockname$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r5, &(0x7f0000000400)="d5eecc3cca8c0b452f615425945fa476daf5da4d9620fd279800097beb6a3c949e946d95d3c0f9cedfeccfebbc074fd8333605d8eece77ec256f4397a61e0166ece5fc", 0x43) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="e7a997e51b24a7b7096d428e9b7973b2fa19c9e2c1c0d364a5649489177bc2", 0x1f, r1}, 0x68) accept$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10) [ 498.084216] loop4: rw=1, want=4728, limit=112 [ 498.100420] attempt to access beyond end of device [ 498.114599] loop4: rw=1, want=4729, limit=112 [ 498.143612] attempt to access beyond end of device [ 498.167083] loop4: rw=1, want=4750, limit=112 [ 498.189820] attempt to access beyond end of device [ 498.212379] loop4: rw=1, want=4751, limit=112 [ 498.226990] attempt to access beyond end of device [ 498.244662] loop4: rw=1, want=4752, limit=112 [ 498.267528] attempt to access beyond end of device [ 498.283308] loop4: rw=1, want=4753, limit=112 [ 498.297884] attempt to access beyond end of device [ 498.314197] loop4: rw=1, want=4802, limit=112 [ 498.349623] attempt to access beyond end of device [ 498.357443] loop4: rw=1, want=4803, limit=112 [ 498.366405] attempt to access beyond end of device [ 498.380395] loop4: rw=1, want=4804, limit=112 [ 498.385539] attempt to access beyond end of device [ 498.392603] loop4: rw=1, want=4805, limit=112 [ 498.413173] attempt to access beyond end of device [ 498.418169] loop4: rw=1, want=4814, limit=112 [ 498.423087] attempt to access beyond end of device [ 498.437608] loop4: rw=1, want=4815, limit=112 [ 498.446222] attempt to access beyond end of device [ 498.451859] loop4: rw=1, want=4816, limit=112 [ 498.456403] attempt to access beyond end of device [ 498.461663] loop4: rw=1, want=4817, limit=112 [ 498.473072] attempt to access beyond end of device [ 498.478028] loop4: rw=1, want=8913, limit=112 [ 498.490886] attempt to access beyond end of device [ 498.495825] loop4: rw=1, want=13009, limit=112 [ 498.508835] attempt to access beyond end of device [ 498.514924] loop4: rw=1, want=17105, limit=112 [ 498.528686] attempt to access beyond end of device [ 498.533993] loop4: rw=1, want=21201, limit=112 [ 498.552821] attempt to access beyond end of device [ 498.557771] loop4: rw=1, want=25297, limit=112 [ 498.567840] attempt to access beyond end of device [ 498.572839] loop4: rw=1, want=29393, limit=112 [ 498.582725] attempt to access beyond end of device [ 498.587655] loop4: rw=1, want=32993, limit=112 11:11:07 executing program 5: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={r1, r2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@null=' \x00', 0x7, 'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x4, 0x3, 0x0, 0x1ff}, 0x6, 0x1, 0x0, 0x0, "d10b0a25320c7019"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x80) splice(r3, 0x0, r5, 0x0, 0x3fc, 0x0) 11:11:07 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x3000) 11:11:07 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:07 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffffffffffdef}], 0x0, 0x0) [ 499.606673] attempt to access beyond end of device [ 499.629865] loop4: rw=1, want=130, limit=112 [ 499.640421] attempt to access beyond end of device [ 499.648432] loop4: rw=1, want=131, limit=112 [ 499.654219] attempt to access beyond end of device [ 499.660572] loop4: rw=1, want=132, limit=112 [ 499.665256] attempt to access beyond end of device [ 499.670745] loop4: rw=1, want=133, limit=112 [ 499.675408] attempt to access beyond end of device 11:11:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r2, 0x0, r0, 0x0, 0x7ffffffe, 0xc) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 499.680934] loop4: rw=1, want=142, limit=112 [ 499.685558] attempt to access beyond end of device [ 499.701652] loop4: rw=1, want=143, limit=112 [ 499.710047] FAT-fs (loop0): invalid media value (0x00) [ 499.715453] FAT-fs (loop0): Can't find a valid FAT filesystem 11:11:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x4000) [ 499.747411] attempt to access beyond end of device [ 499.753563] loop4: rw=1, want=144, limit=112 [ 499.759935] attempt to access beyond end of device [ 499.768676] loop4: rw=1, want=145, limit=112 [ 499.783746] attempt to access beyond end of device [ 499.789789] loop4: rw=1, want=2713, limit=112 [ 499.796403] attempt to access beyond end of device [ 499.803457] loop4: rw=1, want=2742, limit=112 [ 499.809274] attempt to access beyond end of device [ 499.814773] loop4: rw=1, want=2743, limit=112 [ 499.819644] attempt to access beyond end of device [ 499.828919] loop4: rw=1, want=2744, limit=112 [ 499.834017] attempt to access beyond end of device [ 499.839247] loop4: rw=1, want=2745, limit=112 [ 499.851823] attempt to access beyond end of device [ 499.865453] loop4: rw=1, want=2766, limit=112 [ 499.875176] attempt to access beyond end of device [ 499.881736] loop4: rw=1, want=2767, limit=112 [ 499.887700] attempt to access beyond end of device [ 499.893718] loop4: rw=1, want=2768, limit=112 11:11:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 499.909118] attempt to access beyond end of device [ 499.923528] loop4: rw=1, want=2769, limit=112 [ 499.945118] attempt to access beyond end of device [ 499.954709] loop4: rw=1, want=2818, limit=112 11:11:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x5000) [ 499.968592] attempt to access beyond end of device [ 499.985843] loop4: rw=1, want=2819, limit=112 [ 499.994522] attempt to access beyond end of device [ 499.999765] loop4: rw=1, want=2820, limit=112 [ 500.006069] attempt to access beyond end of device [ 500.012254] loop4: rw=1, want=2821, limit=112 [ 500.035050] attempt to access beyond end of device [ 500.061953] loop4: rw=1, want=2830, limit=112 [ 500.078669] attempt to access beyond end of device [ 500.094671] loop4: rw=1, want=2831, limit=112 [ 500.110761] attempt to access beyond end of device 11:11:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x6000) [ 500.138034] loop4: rw=1, want=2832, limit=112 11:11:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@loopback, r3}, 0x14) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 500.160086] attempt to access beyond end of device [ 500.169744] loop4: rw=1, want=2833, limit=112 [ 500.219036] attempt to access beyond end of device [ 500.245445] loop4: rw=1, want=6929, limit=112 [ 500.314767] attempt to access beyond end of device 11:11:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000140)="5a8a01cb1d9cf9054a0c542827c06d36cf5c0c000cc2070ae35ab375e9014362369012ef3acc19117fab993498526dbe53a12cb60524ce8b3174e5845e9fe180975ad4dcfe7e3736c916bcc9cf128dae745b13190c7dbb4e1a5936a485f1cb789ddde731e31044c2da46e936e26be0b9619e4db0f8dded3075fe4b15bf7420e93cd899ada117520769dfd8a9506ed4e615671ed5fe0829acec5ae1914c", 0x9d) close(r2) write$cgroup_int(r1, &(0x7f00000000c0)=0x8000000000, 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0x1, 0x1000, 0x7, 0x8, 0xeb57, 0x2, 0x7, 0x6]}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000280)={0xb7, 0x7, 0x5cad, 0xfffffffffffffffd, 0x8, 0x240000000}) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000080)={0x5, 0xff, 0x0, 0x1, 0x4000}) [ 500.338591] loop4: rw=1, want=11025, limit=112 [ 500.423272] attempt to access beyond end of device [ 500.434324] loop4: rw=1, want=15121, limit=112 [ 500.467460] attempt to access beyond end of device [ 500.519403] loop4: rw=1, want=19217, limit=112 [ 500.562649] attempt to access beyond end of device [ 500.567603] loop4: rw=1, want=23313, limit=112 [ 500.604267] attempt to access beyond end of device [ 500.609288] loop4: rw=1, want=27409, limit=112 [ 500.636553] attempt to access beyond end of device [ 500.642737] loop4: rw=1, want=31505, limit=112 [ 500.650681] attempt to access beyond end of device [ 500.655635] loop4: rw=1, want=32993, limit=112 11:11:09 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x7000) 11:11:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x2}], 0x0, 0x0) 11:11:09 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:09 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 501.695984] attempt to access beyond end of device [ 501.709086] loop4: rw=1, want=130, limit=112 [ 501.716099] buffer_io_error: 55 callbacks suppressed [ 501.716108] Buffer I/O error on dev loop4, logical block 129, lost async page write 11:11:09 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0xfffffffffffffff9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r2, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r1, 0x0, r3, 0x0, 0x3fc, 0x0) [ 501.744046] attempt to access beyond end of device [ 501.760251] loop4: rw=1, want=131, limit=112 [ 501.765714] Buffer I/O error on dev loop4, logical block 130, lost async page write 11:11:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x9000) 11:11:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x3}], 0x0, 0x0) [ 501.800745] attempt to access beyond end of device [ 501.810470] loop4: rw=1, want=132, limit=112 [ 501.829102] FAT-fs (loop0): invalid media value (0x00) [ 501.832059] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 501.834480] FAT-fs (loop0): Can't find a valid FAT filesystem [ 501.887754] attempt to access beyond end of device [ 501.908795] loop4: rw=1, want=133, limit=112 [ 501.924303] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 501.964297] attempt to access beyond end of device 11:11:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 501.989110] loop4: rw=1, want=142, limit=112 11:11:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x4}], 0x0, 0x0) 11:11:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xa000) [ 502.014417] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 502.063530] attempt to access beyond end of device [ 502.068477] loop4: rw=1, want=143, limit=112 [ 502.085946] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 502.094457] attempt to access beyond end of device [ 502.127074] loop4: rw=1, want=144, limit=112 [ 502.146603] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 502.185640] attempt to access beyond end of device [ 502.196572] loop4: rw=1, want=145, limit=112 [ 502.213378] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 502.250046] attempt to access beyond end of device [ 502.255074] loop4: rw=1, want=2585, limit=112 [ 502.268309] attempt to access beyond end of device [ 502.289448] loop4: rw=1, want=2614, limit=112 [ 502.298493] Buffer I/O error on dev loop4, logical block 2613, lost async page write [ 502.316703] attempt to access beyond end of device [ 502.323705] loop4: rw=1, want=2615, limit=112 [ 502.328377] Buffer I/O error on dev loop4, logical block 2614, lost async page write [ 502.336539] attempt to access beyond end of device [ 502.341754] loop4: rw=1, want=2616, limit=112 [ 502.346526] attempt to access beyond end of device [ 502.351753] loop4: rw=1, want=2617, limit=112 [ 502.356514] attempt to access beyond end of device [ 502.361650] loop4: rw=1, want=2638, limit=112 [ 502.366370] attempt to access beyond end of device [ 502.371555] loop4: rw=1, want=2639, limit=112 [ 502.376275] attempt to access beyond end of device [ 502.381405] loop4: rw=1, want=2640, limit=112 [ 502.386118] attempt to access beyond end of device [ 502.391300] loop4: rw=1, want=2641, limit=112 [ 502.396075] attempt to access beyond end of device [ 502.401225] loop4: rw=1, want=2690, limit=112 [ 502.405964] attempt to access beyond end of device [ 502.412050] loop4: rw=1, want=2691, limit=112 [ 502.416755] attempt to access beyond end of device [ 502.421891] loop4: rw=1, want=2692, limit=112 [ 502.426643] attempt to access beyond end of device [ 502.431805] loop4: rw=1, want=2693, limit=112 [ 502.436520] attempt to access beyond end of device [ 502.441688] loop4: rw=1, want=2702, limit=112 [ 502.446481] attempt to access beyond end of device [ 502.451741] loop4: rw=1, want=2703, limit=112 [ 502.456510] attempt to access beyond end of device [ 502.461684] loop4: rw=1, want=2704, limit=112 [ 502.466439] attempt to access beyond end of device [ 502.472518] loop4: rw=1, want=2705, limit=112 [ 502.484035] attempt to access beyond end of device [ 502.489225] loop4: rw=1, want=6801, limit=112 [ 502.504267] attempt to access beyond end of device [ 502.509568] loop4: rw=1, want=10897, limit=112 [ 502.545951] attempt to access beyond end of device [ 502.563577] loop4: rw=1, want=14993, limit=112 [ 502.593833] attempt to access beyond end of device [ 502.611709] loop4: rw=1, want=19089, limit=112 [ 502.626261] attempt to access beyond end of device [ 502.631243] loop4: rw=1, want=23185, limit=112 [ 502.644424] attempt to access beyond end of device [ 502.649800] loop4: rw=1, want=27281, limit=112 [ 502.662366] attempt to access beyond end of device [ 502.667307] loop4: rw=1, want=31377, limit=112 [ 502.676833] attempt to access beyond end of device [ 502.682714] loop4: rw=1, want=32993, limit=112 [ 503.669528] net_ratelimit: 26 callbacks suppressed [ 503.669539] protocol 88fb is buggy, dev hsr_slave_0 [ 503.679665] protocol 88fb is buggy, dev hsr_slave_1 [ 503.684833] protocol 88fb is buggy, dev hsr_slave_0 [ 503.690002] protocol 88fb is buggy, dev hsr_slave_1 [ 503.695144] protocol 88fb is buggy, dev hsr_slave_0 [ 503.700369] protocol 88fb is buggy, dev hsr_slave_1 [ 503.705544] protocol 88fb is buggy, dev hsr_slave_0 [ 503.710671] protocol 88fb is buggy, dev hsr_slave_1 11:11:11 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5}], 0x0, 0x0) 11:11:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r0, &(0x7f0000000000)=0x8000000000, 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r2, 0x0, r1, 0x0, 0x6, 0x0) 11:11:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xb000) 11:11:11 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:11 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 503.782018] attempt to access beyond end of device [ 503.810087] loop4: rw=1, want=130, limit=112 [ 503.829482] attempt to access beyond end of device [ 503.846199] loop4: rw=1, want=131, limit=112 11:11:11 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xc000) 11:11:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xd4, 0xfffffffffffff001, 0x1, 0x6a6796c6, 0x3}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x4, 0x7}, 0x8) [ 503.856594] attempt to access beyond end of device [ 503.870159] loop4: rw=1, want=132, limit=112 [ 503.877429] attempt to access beyond end of device [ 503.898744] loop4: rw=1, want=133, limit=112 11:11:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x8}], 0x0, 0x0) [ 503.911949] attempt to access beyond end of device [ 503.913357] FAT-fs (loop0): invalid media value (0x00) [ 503.922543] FAT-fs (loop0): Can't find a valid FAT filesystem [ 503.934261] loop4: rw=1, want=142, limit=112 [ 503.951847] attempt to access beyond end of device [ 503.962610] loop4: rw=1, want=143, limit=112 [ 504.019077] attempt to access beyond end of device 11:11:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xd000) [ 504.039925] loop4: rw=1, want=144, limit=112 [ 504.044380] attempt to access beyond end of device 11:11:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x10}], 0x0, 0x0) [ 504.091996] loop4: rw=1, want=145, limit=112 [ 504.110563] attempt to access beyond end of device [ 504.115645] loop4: rw=1, want=2585, limit=112 11:11:12 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSBRK(r0, 0x5427) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 504.149545] protocol 88fb is buggy, dev hsr_slave_0 [ 504.154661] protocol 88fb is buggy, dev hsr_slave_1 [ 504.166175] attempt to access beyond end of device [ 504.214025] loop4: rw=1, want=2614, limit=112 [ 504.263233] attempt to access beyond end of device [ 504.268190] loop4: rw=1, want=2615, limit=112 [ 504.289464] attempt to access beyond end of device [ 504.299687] loop4: rw=1, want=2616, limit=112 [ 504.329029] attempt to access beyond end of device [ 504.342207] loop4: rw=1, want=2617, limit=112 [ 504.359296] attempt to access beyond end of device [ 504.364452] loop4: rw=1, want=2638, limit=112 [ 504.369004] attempt to access beyond end of device [ 504.395910] loop4: rw=1, want=2639, limit=112 [ 504.409523] attempt to access beyond end of device [ 504.421605] loop4: rw=1, want=2640, limit=112 [ 504.433658] attempt to access beyond end of device [ 504.445212] loop4: rw=1, want=2641, limit=112 [ 504.451393] attempt to access beyond end of device [ 504.460215] loop4: rw=1, want=2690, limit=112 [ 504.464899] attempt to access beyond end of device [ 504.478096] loop4: rw=1, want=2691, limit=112 [ 504.483705] attempt to access beyond end of device [ 504.489457] loop4: rw=1, want=2692, limit=112 [ 504.498078] attempt to access beyond end of device [ 504.505687] loop4: rw=1, want=2693, limit=112 [ 504.512183] attempt to access beyond end of device [ 504.517272] loop4: rw=1, want=2702, limit=112 [ 504.522952] attempt to access beyond end of device [ 504.528228] loop4: rw=1, want=2703, limit=112 [ 504.532936] attempt to access beyond end of device [ 504.538004] loop4: rw=1, want=2704, limit=112 [ 504.542702] attempt to access beyond end of device [ 504.547789] loop4: rw=1, want=2705, limit=112 [ 504.559458] attempt to access beyond end of device [ 504.564538] loop4: rw=1, want=6801, limit=112 [ 504.579589] attempt to access beyond end of device [ 504.584665] loop4: rw=1, want=10897, limit=112 [ 504.599769] attempt to access beyond end of device [ 504.604871] loop4: rw=1, want=14993, limit=112 [ 504.619492] attempt to access beyond end of device [ 504.624555] loop4: rw=1, want=19089, limit=112 [ 504.638015] attempt to access beyond end of device [ 504.643332] loop4: rw=1, want=23185, limit=112 [ 504.666587] attempt to access beyond end of device [ 504.679404] loop4: rw=1, want=27281, limit=112 [ 504.708498] attempt to access beyond end of device [ 504.713522] loop4: rw=1, want=31377, limit=112 [ 504.722944] attempt to access beyond end of device [ 504.727890] loop4: rw=1, want=32993, limit=112 11:11:13 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xe0}], 0x0, 0x0) 11:11:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xe000) 11:11:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) 11:11:13 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:13 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 505.856979] attempt to access beyond end of device [ 505.869823] loop4: rw=1, want=130, limit=112 [ 505.880028] attempt to access beyond end of device 11:11:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xf000) [ 505.915832] loop4: rw=1, want=131, limit=112 [ 505.926078] attempt to access beyond end of device [ 505.945522] loop4: rw=1, want=132, limit=112 11:11:13 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x300}], 0x0, 0x0) [ 505.962025] FAT-fs (loop0): invalid media value (0x00) [ 505.967326] FAT-fs (loop0): Can't find a valid FAT filesystem [ 505.994498] attempt to access beyond end of device [ 506.016592] loop4: rw=1, want=133, limit=112 [ 506.036690] attempt to access beyond end of device [ 506.074554] loop4: rw=1, want=142, limit=112 [ 506.099213] attempt to access beyond end of device [ 506.134741] loop4: rw=1, want=143, limit=112 [ 506.173825] attempt to access beyond end of device [ 506.204758] loop4: rw=1, want=144, limit=112 [ 506.229300] attempt to access beyond end of device 11:11:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x500}], 0x0, 0x0) 11:11:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x11000) 11:11:14 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x2, 0x0, [{0xc0000007, 0x34ec, 0x5, 0x0, 0x6, 0x0, 0x80000001}, {0x0, 0x5, 0x4, 0x7, 0x3f, 0xf9bf, 0xffffffff}]}) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) r4 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='trusted(\x98nodev\x00', 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="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", 0x1000, 0xfffffffffffffffc) keyctl$unlink(0x9, r4, r5) [ 506.319882] loop4: rw=1, want=145, limit=112 [ 506.327238] attempt to access beyond end of device [ 506.356754] loop4: rw=1, want=2329, limit=112 [ 506.412522] attempt to access beyond end of device [ 506.417520] loop4: rw=1, want=2358, limit=112 [ 506.453315] attempt to access beyond end of device [ 506.458272] loop4: rw=1, want=2359, limit=112 [ 506.468133] attempt to access beyond end of device [ 506.509254] loop4: rw=1, want=2360, limit=112 [ 506.529444] attempt to access beyond end of device [ 506.537977] loop4: rw=1, want=2361, limit=112 [ 506.562736] attempt to access beyond end of device [ 506.569756] loop4: rw=1, want=2382, limit=112 [ 506.574287] attempt to access beyond end of device [ 506.579308] loop4: rw=1, want=2383, limit=112 [ 506.597367] attempt to access beyond end of device [ 506.607816] loop4: rw=1, want=2384, limit=112 [ 506.647679] attempt to access beyond end of device [ 506.657832] loop4: rw=1, want=2385, limit=112 [ 506.665222] attempt to access beyond end of device [ 506.670246] loop4: rw=1, want=2434, limit=112 [ 506.674937] attempt to access beyond end of device [ 506.680869] loop4: rw=1, want=2435, limit=112 [ 506.685434] attempt to access beyond end of device [ 506.694772] loop4: rw=1, want=2436, limit=112 [ 506.699301] attempt to access beyond end of device [ 506.707523] loop4: rw=1, want=2437, limit=112 [ 506.712194] attempt to access beyond end of device [ 506.717131] loop4: rw=1, want=2446, limit=112 [ 506.721707] buffer_io_error: 58 callbacks suppressed [ 506.721717] Buffer I/O error on dev loop4, logical block 2445, lost async page write [ 506.734799] attempt to access beyond end of device [ 506.739791] loop4: rw=1, want=2447, limit=112 [ 506.744289] Buffer I/O error on dev loop4, logical block 2446, lost async page write [ 506.752229] attempt to access beyond end of device [ 506.757162] loop4: rw=1, want=2448, limit=112 [ 506.761717] Buffer I/O error on dev loop4, logical block 2447, lost async page write [ 506.769661] attempt to access beyond end of device [ 506.774586] loop4: rw=1, want=2449, limit=112 [ 506.779060] Buffer I/O error on dev loop4, logical block 2448, lost async page write [ 506.791060] attempt to access beyond end of device [ 506.795993] loop4: rw=1, want=6545, limit=112 [ 506.805939] attempt to access beyond end of device [ 506.810978] loop4: rw=1, want=10641, limit=112 [ 506.820582] attempt to access beyond end of device [ 506.825512] loop4: rw=1, want=14737, limit=112 [ 506.836023] attempt to access beyond end of device [ 506.841282] loop4: rw=1, want=18833, limit=112 [ 506.850941] attempt to access beyond end of device [ 506.855897] loop4: rw=1, want=22929, limit=112 [ 506.865858] attempt to access beyond end of device [ 506.870924] loop4: rw=1, want=27025, limit=112 [ 506.880141] attempt to access beyond end of device [ 506.885083] loop4: rw=1, want=31121, limit=112 [ 506.893786] attempt to access beyond end of device [ 506.898708] loop4: rw=1, want=32993, limit=112 11:11:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:15 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12000) 11:11:15 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x0, 0x8, 0x6000, 'tunl0\x00', 'caif0\x00', 'veth0_to_hsr\x00', 'syzkaller1\x00', @random="5d09239c94e5", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x14}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x70, 0xd8, 0x110}, [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @null, @rose={'rose', 0x0}, 0xffffffffffffff25, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@buf={0x3a, &(0x7f00000001c0)="1f69aa7e5c08c3ff238944740b1164e026db8094bae642cccbd9911ff5ec9cd6d2f0dc3378d993495c50b78bc0fbc037c14a4555f7cd3450a1a5"}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0xfffffffffffffffd) fgetxattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="75d781c75dc06c5ee8"], &(0x7f0000000140)=""/126, 0x7e) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x3f00}], 0x0, 0x0) 11:11:15 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 507.968438] attempt to access beyond end of device [ 508.005569] loop4: rw=1, want=130, limit=112 [ 508.028260] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 508.065651] attempt to access beyond end of device [ 508.071443] loop4: rw=1, want=131, limit=112 11:11:16 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp(0x1, 0x1, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x1f, 0x6, 0x80, 0x7}, {0x3, 0x100000000, 0x2, 0x1}, {0x8, 0x3, 0x0, 0x1000}, {0x7, 0x3, 0xfffffffffffffffb, 0xfff}]}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r2, 0x772) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x7, 0x3}, 0x2) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r3, 0x0, 0x3fc, 0x0) [ 508.086936] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 508.095837] FAT-fs (loop0): invalid media value (0x00) [ 508.101296] FAT-fs (loop0): Can't find a valid FAT filesystem [ 508.117249] attempt to access beyond end of device [ 508.123556] loop4: rw=1, want=132, limit=112 [ 508.128089] Buffer I/O error on dev loop4, logical block 131, lost async page write 11:11:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x13000) 11:11:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x8008}], 0x0, 0x0) [ 508.136493] attempt to access beyond end of device [ 508.145598] loop4: rw=1, want=133, limit=112 [ 508.163094] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 508.204123] attempt to access beyond end of device [ 508.235065] loop4: rw=1, want=142, limit=112 11:11:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xe000}], 0x0, 0x0) [ 508.271754] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 508.306362] attempt to access beyond end of device [ 508.316306] loop4: rw=1, want=143, limit=112 11:11:16 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) dup3(r0, r1, 0x80000) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) dup3(r0, r0, 0x80000) 11:11:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x14000) [ 508.336649] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 508.373004] attempt to access beyond end of device [ 508.407530] loop4: rw=1, want=144, limit=112 [ 508.428099] attempt to access beyond end of device [ 508.450199] loop4: rw=1, want=145, limit=112 [ 508.480846] attempt to access beyond end of device [ 508.496309] loop4: rw=1, want=2521, limit=112 [ 508.512107] attempt to access beyond end of device [ 508.540958] loop4: rw=1, want=2550, limit=112 [ 508.545516] attempt to access beyond end of device [ 508.559492] loop4: rw=1, want=2551, limit=112 [ 508.570731] attempt to access beyond end of device [ 508.592916] loop4: rw=1, want=2552, limit=112 [ 508.598595] attempt to access beyond end of device [ 508.609465] loop4: rw=1, want=2553, limit=112 [ 508.623548] attempt to access beyond end of device [ 508.628506] loop4: rw=1, want=2574, limit=112 [ 508.633561] attempt to access beyond end of device [ 508.638648] loop4: rw=1, want=2575, limit=112 [ 508.643679] attempt to access beyond end of device [ 508.648765] loop4: rw=1, want=2576, limit=112 [ 508.664041] attempt to access beyond end of device [ 508.674822] loop4: rw=1, want=2577, limit=112 [ 508.680204] attempt to access beyond end of device [ 508.685325] loop4: rw=1, want=2626, limit=112 [ 508.693279] attempt to access beyond end of device [ 508.698643] loop4: rw=1, want=2627, limit=112 [ 508.704581] attempt to access beyond end of device [ 508.710004] loop4: rw=1, want=2628, limit=112 [ 508.714676] attempt to access beyond end of device [ 508.721730] loop4: rw=1, want=2629, limit=112 [ 508.726350] attempt to access beyond end of device [ 508.738982] loop4: rw=1, want=2638, limit=112 [ 508.746745] attempt to access beyond end of device [ 508.751835] loop4: rw=1, want=2639, limit=112 [ 508.756476] attempt to access beyond end of device [ 508.761519] loop4: rw=1, want=2640, limit=112 [ 508.766194] attempt to access beyond end of device [ 508.774348] loop4: rw=1, want=2641, limit=112 [ 508.784909] attempt to access beyond end of device [ 508.790055] loop4: rw=1, want=6737, limit=112 [ 508.803514] attempt to access beyond end of device [ 508.808473] loop4: rw=1, want=10833, limit=112 [ 508.821592] attempt to access beyond end of device [ 508.826646] loop4: rw=1, want=14929, limit=112 [ 508.840564] attempt to access beyond end of device [ 508.845516] loop4: rw=1, want=19025, limit=112 [ 508.858793] attempt to access beyond end of device [ 508.863812] loop4: rw=1, want=23121, limit=112 [ 508.877070] attempt to access beyond end of device [ 508.882129] loop4: rw=1, want=27217, limit=112 [ 508.895493] attempt to access beyond end of device [ 508.900506] loop4: rw=1, want=31313, limit=112 [ 508.910624] attempt to access beyond end of device [ 508.915581] loop4: rw=1, want=32993, limit=112 [ 509.909507] net_ratelimit: 26 callbacks suppressed [ 509.909517] protocol 88fb is buggy, dev hsr_slave_0 [ 509.919803] protocol 88fb is buggy, dev hsr_slave_1 [ 509.924961] protocol 88fb is buggy, dev hsr_slave_0 [ 509.930074] protocol 88fb is buggy, dev hsr_slave_1 [ 509.935219] protocol 88fb is buggy, dev hsr_slave_0 [ 509.940331] protocol 88fb is buggy, dev hsr_slave_1 [ 509.945452] protocol 88fb is buggy, dev hsr_slave_0 [ 509.950567] protocol 88fb is buggy, dev hsr_slave_1 11:11:18 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xe00000}], 0x0, 0x0) 11:11:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x15000) 11:11:18 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1d, &(0x7f0000000040)="06b711a0140d04d0ac47e6214426a2aa1de9914a844f2cce2f770bd3f9cf", 0x1e) fcntl$setflags(r2, 0x2, 0x1) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:18 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:18 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 510.109955] attempt to access beyond end of device [ 510.118808] [ 510.120460] ====================================================== [ 510.126392] loop4: rw=1, want=130, limit=112 [ 510.126787] WARNING: possible circular locking dependency detected [ 510.131368] attempt to access beyond end of device [ 510.137535] 5.0.0+ #13 Not tainted [ 510.137540] ------------------------------------------------------ [ 510.137546] syz-executor.5/16773 is trying to acquire lock: [ 510.137552] 00000000afbcf9ff (&sig->cred_guard_mutex){+.+.}, at: proc_pid_attr_write+0x200/0x580 [ 510.137583] [ 510.137583] but task is already holding lock: [ 510.142609] loop4: rw=1, want=131, limit=112 [ 510.146050] 000000005e132ae5 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 510.146077] [ 510.146077] which lock already depends on the new lock. [ 510.146077] [ 510.146080] [ 510.146080] the existing dependency chain (in reverse order) is: [ 510.146088] [ 510.146088] -> #1 (&pipe->mutex/1){+.+.}: [ 510.152606] attempt to access beyond end of device [ 510.158224] lock_acquire+0x16f/0x3f0 [ 510.158238] __mutex_lock+0xf7/0x1310 [ 510.158249] mutex_lock_nested+0x16/0x20 [ 510.158265] fifo_open+0x159/0xb00 [ 510.168832] loop4: rw=1, want=132, limit=112 [ 510.173199] do_dentry_open+0x488/0x1160 [ 510.173210] vfs_open+0xa0/0xd0 [ 510.173221] path_openat+0x10e9/0x46e0 [ 510.173231] do_filp_open+0x1a1/0x280 [ 510.173246] do_open_execat+0x137/0x690 [ 510.177747] attempt to access beyond end of device [ 510.184846] __do_execve_file.isra.0+0x178d/0x23f0 [ 510.184859] __x64_sys_execve+0x8f/0xc0 [ 510.184873] do_syscall_64+0x103/0x610 [ 510.184887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 510.184895] [ 510.184895] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 510.193309] loop4: rw=1, want=133, limit=112 [ 510.201013] __lock_acquire+0x239c/0x3fb0 [ 510.201025] lock_acquire+0x16f/0x3f0 [ 510.201036] __mutex_lock+0xf7/0x1310 [ 510.201048] mutex_lock_interruptible_nested+0x16/0x20 [ 510.201063] proc_pid_attr_write+0x200/0x580 [ 510.206770] attempt to access beyond end of device [ 510.211613] __vfs_write+0x116/0x8e0 [ 510.211626] __kernel_write+0x110/0x3b0 [ 510.211637] write_pipe_buf+0x15d/0x1f0 [ 510.211648] __splice_from_pipe+0x39a/0x7e0 [ 510.211662] splice_from_pipe+0x108/0x170 [ 510.216351] loop4: rw=1, want=142, limit=112 [ 510.220300] default_file_splice_write+0x3c/0x90 [ 510.220311] do_splice+0x70a/0x1490 [ 510.220322] __x64_sys_splice+0x2c6/0x330 [ 510.220334] do_syscall_64+0x103/0x610 [ 510.220351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 510.225023] attempt to access beyond end of device [ 510.228982] [ 510.228982] other info that might help us debug this: [ 510.228982] [ 510.228986] Possible unsafe locking scenario: [ 510.228986] [ 510.228989] CPU0 CPU1 [ 510.228992] ---- ---- [ 510.228994] lock(&pipe->mutex/1); [ 510.229005] lock(&sig->cred_guard_mutex); [ 510.229012] lock(&pipe->mutex/1); [ 510.233551] loop4: rw=1, want=143, limit=112 [ 510.238033] lock(&sig->cred_guard_mutex); [ 510.238041] [ 510.238041] *** DEADLOCK *** [ 510.238041] [ 510.238049] 2 locks held by syz-executor.5/16773: [ 510.238053] #0: 00000000d04955fb (sb_writers#6){.+.+}, at: do_splice+0xdf9/0x1490 [ 510.238083] #1: 000000005e132ae5 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 510.241992] attempt to access beyond end of device [ 510.246284] [ 510.246284] stack backtrace: [ 510.246299] CPU: 1 PID: 16773 Comm: syz-executor.5 Not tainted 5.0.0+ #13 [ 510.246306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.246311] Call Trace: [ 510.246327] dump_stack+0x172/0x1f0 [ 510.246344] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 510.250756] loop4: rw=1, want=144, limit=112 [ 510.255190] check_prev_add.constprop.0+0xf11/0x23c0 [ 510.255203] ? find_held_lock+0x35/0x130 [ 510.255219] ? check_usage+0x570/0x570 11:11:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x16000) 11:11:18 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) 11:11:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x1000000}], 0x0, 0x0) [ 510.260274] attempt to access beyond end of device [ 510.265625] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 510.265639] ? graph_lock+0x7b/0x200 [ 510.265651] ? __lockdep_reset_lock+0x450/0x450 [ 510.265669] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 510.270292] loop4: rw=1, want=145, limit=112 [ 510.274596] __lock_acquire+0x239c/0x3fb0 [ 510.274615] ? mark_held_locks+0xf0/0xf0 [ 510.274626] ? do_splice+0x70a/0x1490 [ 510.274642] lock_acquire+0x16f/0x3f0 [ 510.282365] attempt to access beyond end of device [ 510.286667] ? proc_pid_attr_write+0x200/0x580 [ 510.286683] ? proc_pid_attr_write+0x200/0x580 [ 510.286695] __mutex_lock+0xf7/0x1310 [ 510.286710] ? proc_pid_attr_write+0x200/0x580 [ 510.291247] loop4: rw=1, want=2137, limit=112 [ 510.295783] ? proc_pid_attr_write+0x200/0x580 [ 510.295799] ? mutex_trylock+0x1e0/0x1e0 [ 510.295814] ? check_stack_object+0x114/0x160 [ 510.295830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 510.301068] attempt to access beyond end of device [ 510.304496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 11:11:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x2000000}], 0x0, 0x0) 11:11:18 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 510.304510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 510.304524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 510.304541] ? _copy_from_user+0xdd/0x150 [ 510.310444] loop4: rw=1, want=2166, limit=112 [ 510.315263] mutex_lock_interruptible_nested+0x16/0x20 [ 510.315278] ? mutex_lock_interruptible_nested+0x16/0x20 [ 510.315290] proc_pid_attr_write+0x200/0x580 [ 510.315306] __vfs_write+0x116/0x8e0 [ 510.320349] attempt to access beyond end of device [ 510.324468] ? proc_loginuid_write+0x4d0/0x4d0 [ 510.324483] ? kernel_read+0x120/0x120 [ 510.324508] __kernel_write+0x110/0x3b0 [ 510.329076] loop4: rw=1, want=2167, limit=112 [ 510.333492] write_pipe_buf+0x15d/0x1f0 [ 510.333505] ? do_splice_direct+0x2a0/0x2a0 [ 510.333520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 510.333532] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 510.333548] __splice_from_pipe+0x39a/0x7e0 [ 510.338513] attempt to access beyond end of device [ 510.343056] ? do_splice_direct+0x2a0/0x2a0 [ 510.343072] ? do_splice_direct+0x2a0/0x2a0 [ 510.343085] splice_from_pipe+0x108/0x170 11:11:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x3000000}], 0x0, 0x0) [ 510.343098] ? splice_shrink_spd+0xd0/0xd0 [ 510.343116] default_file_splice_write+0x3c/0x90 [ 510.348533] loop4: rw=1, want=2168, limit=112 [ 510.352798] ? generic_splice_sendpage+0x50/0x50 [ 510.352812] do_splice+0x70a/0x1490 [ 510.352827] ? ksys_dup3+0x3e0/0x3e0 [ 510.352840] ? opipe_prep.part.0+0x2d0/0x2d0 [ 510.352860] ? __fget_light+0x1a9/0x230 [ 510.357231] attempt to access beyond end of device [ 510.361689] __x64_sys_splice+0x2c6/0x330 [ 510.361720] do_syscall_64+0x103/0x610 [ 510.361735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 510.361761] RIP: 0033:0x457f29 [ 510.366286] loop4: rw=1, want=2169, limit=112 [ 510.371909] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 510.371924] RSP: 002b:00007ff2c81e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 510.371937] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457f29 [ 510.371944] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 510.371956] RBP: 000000000073bf00 R08: 00000000000003fc R09: 0000000000000000 [ 510.376987] attempt to access beyond end of device [ 510.385037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff2c81e46d4 [ 510.385045] R13: 00000000004c6d75 R14: 00000000004db970 R15: 00000000ffffffff [ 510.391325] protocol 88fb is buggy, dev hsr_slave_0 [ 510.391391] protocol 88fb is buggy, dev hsr_slave_1 [ 510.450269] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 510.524517] loop4: rw=1, want=2190, limit=112 [ 510.526484] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 510.532069] attempt to access beyond end of device [ 510.536462] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 510.615342] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 510.641898] loop4: rw=1, want=2191, limit=112 [ 510.722215] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 510.742565] attempt to access beyond end of device [ 510.845102] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 510.846255] loop4: rw=1, want=2192, limit=112 [ 510.913313] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 510.929248] attempt to access beyond end of device [ 510.934619] loop4: rw=1, want=2193, limit=112 [ 510.939205] attempt to access beyond end of device [ 510.946088] loop4: rw=1, want=2242, limit=112 [ 510.950688] attempt to access beyond end of device [ 510.955646] loop4: rw=1, want=2243, limit=112 [ 510.962624] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 510.972486] attempt to access beyond end of device [ 510.977439] loop4: rw=1, want=2244, limit=112 [ 510.988863] attempt to access beyond end of device [ 511.000705] loop4: rw=1, want=2245, limit=112 [ 511.007048] attempt to access beyond end of device [ 511.014297] loop4: rw=1, want=2254, limit=112 [ 511.018830] attempt to access beyond end of device [ 511.023834] loop4: rw=1, want=2255, limit=112 [ 511.028364] attempt to access beyond end of device [ 511.033540] loop4: rw=1, want=2256, limit=112 [ 511.038204] attempt to access beyond end of device [ 511.043275] loop4: rw=1, want=2257, limit=112 [ 511.051625] attempt to access beyond end of device [ 511.056575] loop4: rw=1, want=6353, limit=112 [ 511.066861] attempt to access beyond end of device [ 511.071853] loop4: rw=1, want=10449, limit=112 [ 511.081840] attempt to access beyond end of device [ 511.086801] loop4: rw=1, want=14545, limit=112 [ 511.096863] attempt to access beyond end of device [ 511.102184] loop4: rw=1, want=18641, limit=112 [ 511.112388] attempt to access beyond end of device [ 511.117348] loop4: rw=1, want=22737, limit=112 [ 511.122829] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 511.127335] attempt to access beyond end of device [ 511.131416] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 511.134294] loop4: rw=1, want=26833, limit=112 [ 511.139482] attempt to access beyond end of device [ 511.163634] loop4: rw=1, want=30929, limit=112 [ 511.171870] attempt to access beyond end of device [ 511.176824] loop4: rw=1, want=32993, limit=112 [ 511.331998] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 511.339780] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 511.449607] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 511.456269] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 511.468437] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 511.487850] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 511.500562] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 511.502504] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 511.507075] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 511.521380] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:11:20 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x17000) 11:11:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x4000000}], 0x0, 0x0) 11:11:20 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:20 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:20 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x3) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r3, &(0x7f0000000240)='oom_a\xf5n\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 512.141342] attempt to access beyond end of device 11:11:20 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@initdev, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x408, 0x70bd25, 0x25dfdbfb, {0x0, r3, {0xf, 0xffff}, {0xa, 0xe}, {0xfffd, 0xffff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x10) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 512.171709] loop4: rw=1, want=130, limit=112 [ 512.177983] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 512.197990] buffer_io_error: 42 callbacks suppressed [ 512.197999] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 512.198557] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:11:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x5000000}], 0x0, 0x0) 11:11:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x18000) [ 512.209820] attempt to access beyond end of device [ 512.211327] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 512.232075] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.237285] loop4: rw=1, want=131, limit=112 [ 512.257592] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 512.278147] attempt to access beyond end of device [ 512.291277] loop4: rw=1, want=132, limit=112 [ 512.301893] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 512.307864] Buffer I/O error on dev loop4, logical block 131, lost async page write 11:11:20 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') epoll_create(0x0) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={0x1}, &(0x7f0000000080), &(0x7f0000000180)={r3, r4+10000000}, 0x8) 11:11:20 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 512.324711] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.341991] attempt to access beyond end of device [ 512.352037] loop4: rw=1, want=133, limit=112 [ 512.359581] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 512.371929] attempt to access beyond end of device 11:11:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x19000) [ 512.375446] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 512.381272] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 512.396626] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.417448] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 512.428407] loop4: rw=1, want=142, limit=112 [ 512.441564] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 512.459707] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 512.473111] attempt to access beyond end of device [ 512.485711] loop4: rw=1, want=143, limit=112 [ 512.496493] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 512.498427] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.517542] attempt to access beyond end of device [ 512.523221] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 512.530273] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.557716] loop4: rw=1, want=144, limit=112 [ 512.562624] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 512.572800] attempt to access beyond end of device [ 512.577984] loop4: rw=1, want=145, limit=112 [ 512.583136] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 512.608914] attempt to access beyond end of device [ 512.614265] loop4: rw=1, want=2073, limit=112 [ 512.620111] attempt to access beyond end of device [ 512.625249] loop4: rw=1, want=2102, limit=112 [ 512.630224] Buffer I/O error on dev loop4, logical block 2101, lost async page write [ 512.638288] attempt to access beyond end of device [ 512.643789] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 512.650373] loop4: rw=1, want=2103, limit=112 [ 512.655025] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 512.664884] Buffer I/O error on dev loop4, logical block 2102, lost async page write [ 512.676766] attempt to access beyond end of device [ 512.682042] loop4: rw=1, want=2104, limit=112 [ 512.686811] attempt to access beyond end of device [ 512.693018] loop4: rw=1, want=2105, limit=112 [ 512.697670] attempt to access beyond end of device [ 512.703012] loop4: rw=1, want=2126, limit=112 [ 512.707850] attempt to access beyond end of device [ 512.713432] loop4: rw=1, want=2127, limit=112 [ 512.718089] attempt to access beyond end of device [ 512.723380] loop4: rw=1, want=2128, limit=112 [ 512.728764] attempt to access beyond end of device [ 512.734780] loop4: rw=1, want=2129, limit=112 [ 512.739837] attempt to access beyond end of device [ 512.744978] loop4: rw=1, want=2178, limit=112 [ 512.749951] attempt to access beyond end of device [ 512.755036] loop4: rw=1, want=2179, limit=112 [ 512.759910] attempt to access beyond end of device [ 512.765070] loop4: rw=1, want=2180, limit=112 [ 512.769917] attempt to access beyond end of device [ 512.774987] loop4: rw=1, want=2181, limit=112 [ 512.783125] attempt to access beyond end of device [ 512.788255] loop4: rw=1, want=2190, limit=112 [ 512.793139] attempt to access beyond end of device [ 512.798223] loop4: rw=1, want=2191, limit=112 [ 512.803405] attempt to access beyond end of device [ 512.808441] loop4: rw=1, want=2192, limit=112 [ 512.813299] attempt to access beyond end of device [ 512.821570] loop4: rw=1, want=2193, limit=112 [ 512.822324] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 512.830182] attempt to access beyond end of device [ 512.832709] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 512.837564] loop4: rw=1, want=6289, limit=112 [ 512.857905] attempt to access beyond end of device [ 512.863313] loop4: rw=1, want=10385, limit=112 [ 512.872466] attempt to access beyond end of device [ 512.877402] loop4: rw=1, want=14481, limit=112 [ 512.885264] attempt to access beyond end of device [ 512.890252] loop4: rw=1, want=18577, limit=112 [ 512.897866] attempt to access beyond end of device [ 512.902846] loop4: rw=1, want=22673, limit=112 [ 512.911409] attempt to access beyond end of device [ 512.916358] loop4: rw=1, want=26769, limit=112 [ 512.924086] attempt to access beyond end of device [ 512.929020] loop4: rw=1, want=30865, limit=112 [ 512.935898] attempt to access beyond end of device [ 512.940888] loop4: rw=1, want=32993, limit=112 [ 513.099651] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 513.112742] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 513.139748] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 513.146395] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 513.262313] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 513.273978] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:11:21 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x8000000}], 0x0, 0x0) 11:11:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x1a000) 11:11:21 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:21 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:21 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="e02f955d5c72df2739b65567947944b7bde23539e413d17a75c0bcb9feb2233b8be9125588e6f67640099f845c0231729e94e9ec92a8", 0x36}], 0x1) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 513.742505] attempt to access beyond end of device [ 513.747791] loop4: rw=1, want=130, limit=112 11:11:21 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) pipe(&(0x7f00000000c0)) 11:11:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x1b000) [ 513.791363] attempt to access beyond end of device [ 513.796352] loop4: rw=1, want=131, limit=112 [ 513.807033] attempt to access beyond end of device [ 513.807976] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 513.812346] loop4: rw=1, want=132, limit=112 [ 513.822479] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 513.854231] attempt to access beyond end of device [ 513.859424] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 513.865878] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 513.886966] loop4: rw=1, want=133, limit=112 11:11:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x8800000}], 0x0, 0x0) [ 513.913348] attempt to access beyond end of device [ 513.931954] loop4: rw=1, want=142, limit=112 [ 513.936401] attempt to access beyond end of device 11:11:21 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = semget$private(0x0, 0x7, 0x40) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000140)=""/247) socket(0x0, 0x4, 0x5) close(r1) write$cgroup_int(r0, &(0x7f00000000c0)=0x1, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r1, 0x0, 0x3fc, 0x0) 11:11:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x2002986f) 11:11:21 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 513.961676] loop4: rw=1, want=143, limit=112 [ 513.973980] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 513.980577] attempt to access beyond end of device [ 513.985573] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 514.001389] loop4: rw=1, want=144, limit=112 [ 514.017830] attempt to access beyond end of device [ 514.040603] loop4: rw=1, want=145, limit=112 [ 514.047203] attempt to access beyond end of device [ 514.059667] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 514.069485] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 514.080672] loop4: rw=1, want=2585, limit=112 [ 514.111259] attempt to access beyond end of device [ 514.119641] loop4: rw=1, want=2614, limit=112 [ 514.124158] attempt to access beyond end of device [ 514.129115] loop4: rw=1, want=2615, limit=112 [ 514.160252] attempt to access beyond end of device [ 514.172841] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 514.173565] loop4: rw=1, want=2616, limit=112 [ 514.179295] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 514.202032] attempt to access beyond end of device [ 514.207274] loop4: rw=1, want=2617, limit=112 [ 514.222002] attempt to access beyond end of device [ 514.236322] loop4: rw=1, want=2638, limit=112 [ 514.249431] attempt to access beyond end of device [ 514.266566] loop4: rw=1, want=2639, limit=112 [ 514.282876] attempt to access beyond end of device [ 514.301224] loop4: rw=1, want=2640, limit=112 [ 514.318501] attempt to access beyond end of device [ 514.336168] loop4: rw=1, want=2641, limit=112 [ 514.344051] attempt to access beyond end of device [ 514.349015] loop4: rw=1, want=2690, limit=112 [ 514.349979] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 514.363757] attempt to access beyond end of device [ 514.368387] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 514.368696] loop4: rw=1, want=2691, limit=112 [ 514.428850] attempt to access beyond end of device [ 514.438286] loop4: rw=1, want=2692, limit=112 [ 514.450293] attempt to access beyond end of device [ 514.461923] loop4: rw=1, want=2693, limit=112 [ 514.473280] attempt to access beyond end of device [ 514.478228] loop4: rw=1, want=2702, limit=112 [ 514.486342] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 514.493084] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 514.505233] attempt to access beyond end of device [ 514.514003] loop4: rw=1, want=2703, limit=112 [ 514.520807] attempt to access beyond end of device [ 514.530730] loop4: rw=1, want=2704, limit=112 [ 514.536280] attempt to access beyond end of device [ 514.541326] loop4: rw=1, want=2705, limit=112 [ 514.552978] attempt to access beyond end of device [ 514.557973] loop4: rw=1, want=6801, limit=112 [ 514.568261] attempt to access beyond end of device [ 514.576107] loop4: rw=1, want=10897, limit=112 [ 514.586537] attempt to access beyond end of device [ 514.594127] loop4: rw=1, want=14993, limit=112 [ 514.604699] attempt to access beyond end of device [ 514.612136] loop4: rw=1, want=19089, limit=112 [ 514.622656] attempt to access beyond end of device [ 514.627662] loop4: rw=1, want=23185, limit=112 [ 514.640706] attempt to access beyond end of device [ 514.645712] loop4: rw=1, want=27281, limit=112 [ 514.658562] attempt to access beyond end of device [ 514.663586] loop4: rw=1, want=31377, limit=112 [ 514.671296] attempt to access beyond end of device [ 514.676298] loop4: rw=1, want=32993, limit=112 [ 514.857793] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 514.871981] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 514.929579] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 514.937899] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 514.974981] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 514.984728] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:11:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x10000000}], 0x0, 0x0) 11:11:23 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:23 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xc7d, 0x7, 0x5d72, 0x7, 0x9, 0x6}) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xfffffcca) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/70) r3 = getpgid(0xffffffffffffffff) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000500)="03263dd1c82d9ba67f45f5435d0cc9719c2a45a2a58cfa0386227b861cbc72cb4796213581593e77ac97b53100ca7a1be2323d0d0d329bb16495180659c1265e977b56571c55e7a5cc8ab913648f5233", 0x50}, {&(0x7f0000000580)="0b0d8074bf628f85f3377810e301c2f86e3f868576c53c8820f8f467b7746a735a4bc3917a995f6a316b14ca9f7139b38ebd0cd6257cd7e17c771694d72841d1f987cf269600f483950cebcba4795d8b3b3674a592b3f7fc9cf431510c1178868285dcd68e10a02a5cb3b3fe8a8e82159f963cc148a2dc90c1042a88c016cd482037392b22c2be24efb2cb599e69ff2f076e1e45387fbcb940f78e", 0x9b}, {&(0x7f0000000640)="ec6b77e1289fb73b83d3db8233b8cfa51a1dc65fbe63769276e28b643744c1a9c2628d8b5b74b1ce37d864", 0x2b}], 0x3, 0x8) r4 = syz_open_procfs(r3, &(0x7f0000000240)='oom_adj\x00') ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000400)=""/244) write(r4, &(0x7f0000000380)="2389db2532caf1edb456e76937549fbc42961568c2d82f583b8aabc4d3b9ea02108e1df77c9881649a4d37ba8dcae36a7f6b590f3554ef1be3ba57189b25aaee46ca4fc2c696f15edbc62d39fe0dae01384de2e867391eb1e68814c1f7839b4bbc2f422a7bc30b3a184ef8f7c93a6cdb74ca5768b6388a84d16e", 0x7a) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000006c0)={0x0, r2, 0x5, 0x95f, 0x1, 0xfffffffffffffffa}) 11:11:23 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0x9, "388ef94a19b1e31cdf4b82a69f737a99845993230849d261dcd4d3fcd607dd73", 0x201, 0x1000, 0x100, 0x10, 0x7}) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:11:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0xa1, [], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000200)=""/161}, &(0x7f0000000340)=0x78) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) [ 515.602512] attempt to access beyond end of device [ 515.610695] loop4: rw=1, want=130, limit=112 [ 515.615824] attempt to access beyond end of device [ 515.621030] loop4: rw=1, want=131, limit=112 [ 515.625647] attempt to access beyond end of device [ 515.633347] loop4: rw=1, want=132, limit=112 [ 515.639547] attempt to access beyond end of device [ 515.644649] loop4: rw=1, want=133, limit=112 11:11:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x3f000000}], 0x0, 0x0) [ 515.660601] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 515.667099] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 515.669518] attempt to access beyond end of device 11:11:23 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0xca040) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) setregid(r4, r5) [ 515.707856] loop4: rw=1, want=142, limit=112 [ 515.723752] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 515.730330] attempt to access beyond end of device [ 515.736515] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 515.751244] loop4: rw=1, want=143, limit=112 11:11:23 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 515.759212] attempt to access beyond end of device 11:11:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000001240)={0x7, 0x7, 0x5, 'queue0\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7ff, 0x341001) recvfrom$llc(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x2, &(0x7f0000001200)={0x1a, 0x324, 0x1f, 0x200000, 0xbf13, 0x401, @local}, 0x10) [ 515.783438] loop4: rw=1, want=144, limit=112 [ 515.792815] attempt to access beyond end of device [ 515.798511] loop4: rw=1, want=145, limit=112 [ 515.805970] attempt to access beyond end of device [ 515.810028] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 515.811571] loop4: rw=1, want=1433, limit=112 [ 515.817338] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' 11:11:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xfcfdffff}], 0x0, 0x0) [ 515.829441] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 515.837850] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 515.848959] attempt to access beyond end of device [ 515.871614] loop4: rw=1, want=1462, limit=112 [ 515.885187] attempt to access beyond end of device [ 515.894043] loop4: rw=1, want=1463, limit=112 [ 515.905988] attempt to access beyond end of device [ 515.914342] loop4: rw=1, want=1464, limit=112 [ 515.923398] attempt to access beyond end of device [ 515.930500] loop4: rw=1, want=1465, limit=112 [ 515.939086] attempt to access beyond end of device [ 515.948334] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 515.948636] loop4: rw=1, want=1486, limit=112 [ 515.954862] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 515.959391] attempt to access beyond end of device [ 515.976235] loop4: rw=1, want=1487, limit=112 [ 515.976484] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 515.981360] attempt to access beyond end of device [ 515.992526] loop4: rw=1, want=1488, limit=112 [ 515.999238] attempt to access beyond end of device [ 516.004904] loop4: rw=1, want=1489, limit=112 [ 516.009754] attempt to access beyond end of device [ 516.011970] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 516.014803] loop4: rw=1, want=1538, limit=112 [ 516.029017] attempt to access beyond end of device [ 516.034472] loop4: rw=1, want=1539, limit=112 [ 516.039085] attempt to access beyond end of device [ 516.044495] loop4: rw=1, want=1540, limit=112 [ 516.049126] attempt to access beyond end of device [ 516.054411] loop4: rw=1, want=1541, limit=112 [ 516.059039] attempt to access beyond end of device [ 516.064306] loop4: rw=1, want=1550, limit=112 [ 516.074733] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 516.075806] attempt to access beyond end of device [ 516.081398] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 516.086605] loop4: rw=1, want=1551, limit=112 [ 516.100874] attempt to access beyond end of device [ 516.105886] loop4: rw=1, want=1552, limit=112 [ 516.110778] attempt to access beyond end of device [ 516.115760] loop4: rw=1, want=1553, limit=112 [ 516.120404] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 516.126845] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 516.128681] attempt to access beyond end of device [ 516.141435] loop4: rw=1, want=5649, limit=112 [ 516.149412] net_ratelimit: 26 callbacks suppressed [ 516.149419] protocol 88fb is buggy, dev hsr_slave_0 [ 516.152202] attempt to access beyond end of device [ 516.154406] protocol 88fb is buggy, dev hsr_slave_1 [ 516.159403] loop4: rw=1, want=9745, limit=112 [ 516.164375] protocol 88fb is buggy, dev hsr_slave_0 [ 516.174123] attempt to access beyond end of device [ 516.178858] protocol 88fb is buggy, dev hsr_slave_1 [ 516.188830] protocol 88fb is buggy, dev hsr_slave_0 [ 516.190796] loop4: rw=1, want=13841, limit=112 [ 516.193893] protocol 88fb is buggy, dev hsr_slave_1 [ 516.203563] protocol 88fb is buggy, dev hsr_slave_0 [ 516.203566] attempt to access beyond end of device [ 516.203578] loop4: rw=1, want=17937, limit=112 [ 516.208601] protocol 88fb is buggy, dev hsr_slave_1 [ 516.219027] attempt to access beyond end of device [ 516.230808] loop4: rw=1, want=22033, limit=112 [ 516.238295] attempt to access beyond end of device [ 516.243296] loop4: rw=1, want=26129, limit=112 [ 516.251001] attempt to access beyond end of device [ 516.255923] loop4: rw=1, want=30225, limit=112 [ 516.263330] attempt to access beyond end of device [ 516.268247] loop4: rw=1, want=32993, limit=112 [ 516.338292] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 516.348914] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 516.439620] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 516.446755] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 516.473002] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 516.479594] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 516.550199] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 516.556680] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 516.629456] protocol 88fb is buggy, dev hsr_slave_0 [ 516.634583] protocol 88fb is buggy, dev hsr_slave_1 11:11:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x4, 0x8b64}) uselib(&(0x7f0000000100)='./file0\x00') write$cgroup_int(r2, &(0x7f0000000080)=0x3, 0xfffffe62) 11:11:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xfeffffff}], 0x0, 0x0) 11:11:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3fc, 0x0) 11:11:24 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:24 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:24 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "47dafe", 0x8, 0x0, 0x0, @ipv4={[], [], @local}, @mcast1, {[], @udp={0x4e21, 0x0, 0x8}}}}}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000580)='oom_adj\x00\x92\xb1\"#7/,\x0e\xcb\x8c0%\x1bX\xd1\x11\xb7q\x04\'#\r\x87L\xb9\x10\xd4\x16H_\r\x8b\x9b\x10]\xaa\x0e\xa1\x7f\xfeT\x80\xab\xb4\xfe\xff\x9ax\xfb\x18\x1bl\xc9\xfeB\xaa\x18\xde\xd6>.\xb6\xc4\xa4&Xr\'mX$\x81\xd4~\x9aa}S\xda\x88-\xe3s\x98\x10*1\xeb\x1a26\xc7\xa4\xef5\xa9\x99_\x99\t\xbc2\xc6}\xa7\xac\xe3y\x80~N~\xf4\xc6\n\t\x1f\x9f\xc9\xa9Sj\xa8G%\x9c\x94D\\k\x9f%.\xc7]\xf5~\x92\xcf\xb5\xd67\xbd\tP\x05\x00\x00\x00\xcf\x9b\x8a\x9a\xef\x95\xbc \x0fv\x06\xe7gJ\x7f9\xe5\x15\xbe!\xac\x96\xcd\xa0\xbfZ\x7f\xd7\x1f\x87\x9e\xbfa\xc76\xa9\xd2\x18\xef\xc4\xeeY\xce\xca`\v\xa2Q\a\xda\x00\x00\x00\x00\x00\x00\x00\xca\x80\xe6\xe7\xd3\xee%\xa8\x00\xea/\xc0\x95\r\xbc[\x8c\xde\xd9\x82\xb8\x8b${qYw\x901\x01\xa0&\x84|\x12f\xa5d\xc5\xb6\xb8\'\xbce^\xf3\x11\xd1\x81\r\x10\xb5\x0f\x06\x10\a\x91$6\x93\xa5\xe9\x1c;\xa9r\x9c\xb8\x12\x9d2\xff\xd6\xd3\xf5\x12L\aF\xc1H\x93F\xe9\xa7i\x90\xc8x%\x05a\x95\'\xe6D\x95\xa5\x15\xb6\xcb\xfa\xd8\x99\xf6\xe1\xf8\x03\xf2\xb6\xdc>\xcf\xcb\x91\b\r\xdb\xf5\x9f\xcb/F\xde\xf5V\xc1d\xd1\x805\x02\xd55\x85\xdcC-[ZS@me|\xe4\xfd\b\x90{fWd<\xf1\x8f\xd3\x87\x90\xff;\x10[U\xbb\x7fS >\xb3A\x1e\x12~\x92%Vw\xccop\xf1\xc77\b:h\x13\x1f\'6\xa7\"\xb2p&N4\x93\x82\xc3\n\x87\xf30\xdc\x1d\xa7(\xd90\xf0\xf0\xda\xc5\xb1\xd5\xf3\xbe82\xcb\xf2\xb7\xb8\xa2\xeb\x12\xefx\x1ch+\x7fy\xae\x8f\xd2\xd4s\x03\xee\xa3\xc8R\x9e\xb6\x18\xe6\b\xc2&') ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 516.788260] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 516.802193] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 516.827779] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env 11:11:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xfffffdfc}], 0x0, 0x0) [ 516.834380] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 516.871271] attempt to access beyond end of device [ 516.876223] loop1: rw=1, want=16177, limit=112 11:11:24 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:24 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) ioctl$FICLONE(r2, 0x40049409, r2) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) [ 516.979865] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 516.987634] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 517.009800] kobject: 'loop5' (000000009f60294e): kobject_uevent_env 11:11:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xfffffffe}], 0x0, 0x0) [ 517.034071] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 517.054945] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 517.061518] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 517.067435] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env 11:11:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xb) [ 517.104465] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 517.120401] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 517.126929] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 517.169845] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 517.176333] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 517.300218] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 517.306692] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 517.323164] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 517.339459] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:11:25 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) [ 517.586132] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 517.593729] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' 11:11:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r2, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x34, 0x3, 0x3}}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0x8, 0x12) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)={0x0, @aes128, 0x0, "8848add731578ff8"}) arch_prctl$ARCH_SET_GS(0x1001, 0x1) write$cgroup_int(r3, &(0x7f0000000080)=0x5, 0xd493c7d65d8a6279) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000200)=0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x9a, "9aecafbc737b1658bc5b04ecf4350ba66938e8ec25a3d101ab8968b4a300a6d847de48e37f1d634a1a70e58a2cd21ec2981efdabcec2d806f524d104ad088a554be1c2ed019a252c4686c7c1ee0c0fe09c43218cdf2e994cac980c8df1133c4b1a69e664c96aef0e6f3678ae3ed2654f333915f830c38d1169e97a60e91d8f7ee953d3d93062b56e0c77cec68d525ffc8830afe39ec03af34282"}, &(0x7f0000000000)=0xa2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x8}, 0x8) 11:11:25 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x800800000000}], 0x0, 0x0) 11:11:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{}, {&(0x7f0000000080)="365a700c0d3ffbe8a60308c39140722a9369905d747b53e581be7cc04f541f704ada5e134e66f28661741d3a6aa3de", 0x26}, {&(0x7f0000000280)="ad7e04b7fca7c46b2e76a3c764168506eb0ccf4fa550b618fb9cc1a791f9014fedf4b9a22a0b92b7102a8eda9d5ce64e2eaff167622c90003d3eefa2b292590c4b65435e06f4eef4ed029b2a0f91f03ee4ded2ab49e0b5c81f18008f01078844a0868202f7b5417ff74503866311070226011ff4bea469eda50aa07144151032a85c406064417c", 0x87}], 0x3, 0x0, 0x0, 0x20040812}, 0x4040000) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) 11:11:25 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 517.727935] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 517.737892] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:11:25 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x310, r1, 0x202, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x177}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x27, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x868}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @mcast1, 0xb601}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3f, @ipv4={[], [], @multicast1}, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x7fff}}}}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x160ef79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb495}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x48085}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 11:11:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) [ 517.822600] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 517.829098] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 517.843885] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 517.850777] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' 11:11:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x1000000000000}], 0x0, 0x0) 11:11:25 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x40) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'ifb0\x00', @dev={[], 0x1b}}) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5ed7) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x3f, 0x5cc872d1}, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x28, 0x1, 0x1}}, 0x14) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) [ 517.982467] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 517.988972] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' 11:11:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x7ffffffffffff}], 0x0, 0x0) 11:11:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:11:26 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0xe0000000000000}], 0x0, 0x0) [ 518.588718] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 518.605954] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' 11:11:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0xffff, 0x1c585) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000002c0)={r2, 0x1}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000280), &(0x7f0000000140)=0xc) 11:11:26 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:11:26 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:26 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) recvfrom$llc(r1, &(0x7f0000000280)=""/49, 0x31, 0x0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x5f7b4632, 0x100, 0xffff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xf0ba, 0x6042) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000180)={0x8, 0x4, [{0x1, 0x0, 0x2}, {0x3ff, 0x0, 0x6}, {0x622, 0x0, 0x3}, {0x480, 0x0, 0x3f}, {}, {0x3}, {0x100, 0x0, 0x5ce8}, {0xfffffffffffff2a6, 0x0, 0x2}]}) write$sndseq(r3, &(0x7f00000000c0)=[{0x7ff, 0x200, 0xfff, 0x800, @tick=0x100000001, {0x9, 0x9}, {0xfffffffffffff801, 0xff}, @raw32={[0xf3, 0x8000, 0xe5ee]}}, {0x200, 0x1, 0x7f, 0x8, @tick=0x401, {0x3f, 0x3}, {0x90000000000000}, @addr={0x702, 0x7f}}], 0x60) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) write$P9_RREAD(r4, &(0x7f0000000300)={0x2d, 0x75, 0x2, {0x22, "61144dd1222ca3590e5e54f0e460ecfc474302182e98396c5f3380d6b23f6a361063"}}, 0x2d) [ 518.634553] kobject: 'loop5' (000000009f60294e): kobject_uevent_env 11:11:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x100000000000000}], 0x0, 0x0) [ 518.664128] attempt to access beyond end of device [ 518.673789] loop0: rw=1, want=130, limit=112 [ 518.678624] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 518.697698] buffer_io_error: 62 callbacks suppressed [ 518.697707] Buffer I/O error on dev loop0, logical block 129, lost async page write 11:11:26 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080)=0x8000000000, 0x1c56c0984a18e6e5) syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) 11:11:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x6000010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) renameat2(r3, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x297ef) [ 518.735345] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 518.746761] attempt to access beyond end of device [ 518.747656] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 518.752206] loop0: rw=1, want=131, limit=112 [ 518.773256] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 518.787902] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 518.794695] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 518.804648] attempt to access beyond end of device [ 518.809654] loop0: rw=1, want=132, limit=112 [ 518.814086] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 518.814497] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 518.822001] attempt to access beyond end of device 11:11:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:11:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x200000000000000}], 0x0, 0x0) [ 518.838483] loop0: rw=1, want=133, limit=112 [ 518.848099] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 518.856754] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 518.863140] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 518.863271] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 518.894545] attempt to access beyond end of device [ 518.899934] loop0: rw=1, want=142, limit=112 [ 518.904629] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 518.916460] attempt to access beyond end of device [ 518.921561] loop0: rw=1, want=143, limit=112 [ 518.926069] Buffer I/O error on dev loop0, logical block 142, lost async page write 11:11:26 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x300000000000000}], 0x0, 0x0) [ 518.957492] attempt to access beyond end of device [ 518.964959] loop0: rw=1, want=144, limit=112 [ 518.981159] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 518.999638] attempt to access beyond end of device 11:11:26 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setflags(r0, 0x2, 0x1) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmdt(r2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) [ 519.005098] loop0: rw=1, want=145, limit=112 [ 519.009621] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 519.021612] attempt to access beyond end of device [ 519.027067] loop0: rw=1, want=4241, limit=112 [ 519.035433] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 519.042302] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 519.055478] attempt to access beyond end of device [ 519.064957] loop0: rw=1, want=8337, limit=112 [ 519.069671] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 519.076120] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 519.101673] attempt to access beyond end of device 11:11:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x400000000000000}], 0x0, 0x0) [ 519.106687] loop0: rw=1, want=12433, limit=112 [ 519.123205] attempt to access beyond end of device [ 519.150076] loop0: rw=1, want=16529, limit=112 [ 519.153106] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 519.157644] attempt to access beyond end of device [ 519.166167] loop0: rw=1, want=18041, limit=112 [ 519.168869] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 519.289533] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 519.299154] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 519.337767] kobject: 'loop0' (00000000366ddebf): kobject_uevent_env [ 519.344375] kobject: 'loop0' (00000000366ddebf): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 519.501228] kobject: 'loop2' (00000000b22f0992): kobject_uevent_env [ 519.512997] kobject: 'loop2' (00000000b22f0992): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 519.657125] kobject: 'loop5' (000000009f60294e): kobject_uevent_env [ 519.664813] kobject: 'loop5' (000000009f60294e): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:11:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 11:11:27 executing program 0: socket$inet(0x2, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:11:27 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x401}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) 11:11:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x500000000000000}], 0x0, 0x0) 11:11:27 executing program 2: socket$pppoe(0x18, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:11:27 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r3 = getuid() r4 = geteuid() getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setresuid(r3, r4, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0x8, 0x20000) splice(r0, 0x0, r2, 0x0, 0x3fc, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0xffff, 0x8004, 0x101, 0xffffffffffffffff, 0x6, 0x8, 0x9baa, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000001c0)={r7, 0xfffffffffffffff9, 0x473f, 0x7}, &(0x7f0000000200)=0x10) 11:11:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16, 0x800000000000000}], 0x0, 0x0) [ 519.995892] attempt to access beyond end of device [ 520.007428] loop0: rw=1, want=130, limit=112 [ 520.017970] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 520.026137] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 520.032656] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 520.044796] attempt to access beyond end of device [ 520.050794] loop0: rw=1, want=131, limit=112 [ 520.055320] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 520.063716] attempt to access beyond end of device [ 520.068772] loop0: rw=1, want=132, limit=112 [ 520.073385] kobject: 'loop4' (0000000084c3cf60): kobject_uevent_env [ 520.079944] kobject: 'loop4' (0000000084c3cf60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 520.089963] attempt to access beyond end of device 11:11:28 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = getpid() capget(&(0x7f0000000280)={0x0, r3}, &(0x7f00000002c0)={0x3, 0x7, 0xfffffffffffffff7, 0x1, 0x5, 0x9}) close(r2) write$cgroup_int(r1, &(0x7f0000000000)=0x8000000000, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') splice(r4, 0x0, r0, 0x0, 0x7fff, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x108, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 11:11:28 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6b9f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) [ 520.095419] loop0: rw=1, want=133, limit=112 [ 520.100981] attempt to access beyond end of device [ 520.106851] loop0: rw=1, want=142, limit=112 [ 520.111541] attempt to access beyond end of device [ 520.116601] loop0: rw=1, want=143, limit=112 [ 520.121274] attempt to access beyond end of device [ 520.126323] loop0: rw=1, want=144, limit=112 [ 520.130929] attempt to access beyond end of device [ 520.135967] loop0: rw=1, want=145, limit=112