0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:22:55 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3317.238078] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3317.244434] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3317.317579] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3317.483223] input: syz1 as /devices/virtual/input/input296 [ 3317.570475] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3317.779324] input: syz1 as /devices/virtual/input/input297 [ 3317.799330] EXT4-fs (loop0): bad geometry: block count 1207960632 exceeds size of device (55296 blocks) [ 3317.815068] IPv6: ADDRCONF(NETDEV_UP): veth1687: link is not ready [ 3317.817200] loop5: partition table partially beyond EOD, truncated [ 3317.852908] loop5: p1 size 2 extends beyond EOD, truncated [ 3317.870985] team0: Port device veth1687 added 04:22:56 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3317.896696] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3317.930683] loop5: p5 start 1854537728 is beyond EOD, truncated 04:22:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xa000000) 04:22:56 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:22:56 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804004c19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3317.991940] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3317.998816] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3318.065876] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3318.083630] input: syz1 as /devices/virtual/input/input298 [ 3318.087866] loop5: p9 start 1854537728 is beyond EOD, truncated 04:22:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3318.117867] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3318.123732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3318.156193] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3318.211253] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3318.226500] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3318.265457] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3318.286218] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3318.291910] IPv6: ADDRCONF(NETDEV_UP): veth1689: link is not ready [ 3318.300963] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3318.336510] EXT4-fs (loop0): bad geometry: block count 1275069496 exceeds size of device (55296 blocks) [ 3318.342355] team0: Port device veth1689 added [ 3318.350948] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3318.380371] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3318.399283] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3318.404015] loop5: p19 start 1854537728 is beyond EOD, [ 3318.408656] input: syz1 as /devices/virtual/input/input299 [ 3318.417323] truncated 04:22:56 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3318.456701] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3318.502263] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3318.555322] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3318.641567] loop5: p23 start 1854537728 is beyond EOD, [ 3318.642579] truncated [ 3318.682129] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3318.715047] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3318.735422] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3318.756542] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3318.781856] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3318.796310] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3318.815371] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3318.833006] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3318.839865] input: syz1 as /devices/virtual/input/input300 [ 3318.852344] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3318.864241] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3318.883139] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3318.889871] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3318.898451] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3318.905403] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3318.922962] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3318.929939] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3318.936955] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3318.943886] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3318.950156] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3318.956633] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3318.965063] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3318.971316] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3318.977994] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3318.984705] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3318.990853] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3318.997122] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3319.003390] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3319.009545] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3319.029490] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3319.035792] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3319.042078] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3319.048227] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3319.054492] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3319.060659] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3319.066933] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3319.073278] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3319.079426] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3319.085690] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3319.092407] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3319.098588] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3319.105028] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3319.111185] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3319.117418] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3319.123656] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3319.129813] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3319.136032] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3319.142268] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3319.148418] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3319.158062] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3319.164711] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3319.170918] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3319.177168] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3319.183426] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3319.189642] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3319.200764] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3319.208638] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3319.225807] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3319.236957] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3319.243516] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3319.249914] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3319.257023] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3319.264774] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3319.270949] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3319.277154] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3319.283368] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3319.289528] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3319.295765] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3319.301985] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3319.308150] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3319.314418] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3319.320941] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3319.329604] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3319.335820] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3319.342164] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3319.348464] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3319.354687] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3319.360972] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3319.367401] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3319.373692] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3319.380018] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3319.386910] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3319.393231] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3319.399482] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3319.405768] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3319.412121] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3319.418376] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3319.424651] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3319.430899] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3319.437397] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3319.443999] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3319.450247] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3319.456542] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3319.462917] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3319.469156] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3319.475585] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3319.481896] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3319.488139] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3319.494643] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3319.500984] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3319.507301] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3319.514416] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3319.520668] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3319.527155] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3319.533475] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3319.539724] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3319.546287] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3319.553922] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3319.560262] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3319.566558] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3319.572925] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3319.579161] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3319.585461] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3319.591761] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3319.598000] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3319.604373] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3319.610616] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3319.616900] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3319.623302] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3319.629752] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3319.636073] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3319.642919] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3319.649295] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3319.655673] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3319.662083] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3319.668510] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3319.674822] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3319.681083] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3319.687494] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3319.694845] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3319.701102] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3319.707463] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3319.713763] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3319.720026] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3319.726514] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3319.732876] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3319.739276] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3319.745643] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3319.752049] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3319.758316] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3319.764611] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3319.770995] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3319.777998] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3319.784409] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3319.790684] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3319.797014] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3319.803342] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3319.809577] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3319.816347] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3319.822675] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3319.829136] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3319.835455] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3319.841767] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3319.848006] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3319.854830] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3319.861126] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3319.867422] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3319.873740] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3319.880020] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3319.886336] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3319.892824] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3319.899066] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3319.906080] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3319.912410] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3319.918670] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3319.924974] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3319.931236] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3319.937548] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3319.943848] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3319.950254] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3319.956647] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3319.963018] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3319.969280] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3319.975953] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3319.982266] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3319.988509] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3319.994904] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3320.001191] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3320.008097] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3320.014449] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3320.020799] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3320.027221] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3320.034368] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3320.040700] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3320.047020] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3320.053382] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3320.059647] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3320.065948] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3320.072270] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3320.078539] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3320.084842] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3320.091169] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3320.097506] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3320.103818] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3320.110064] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3320.116403] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3320.122710] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3320.128945] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3320.135277] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3320.141588] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3320.147837] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3320.154162] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3320.160501] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3320.167401] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3320.173834] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3320.180089] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3320.186384] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3320.192682] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3320.198950] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3320.205235] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3320.211475] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3320.217935] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3320.224222] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3320.230454] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3320.236741] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3320.243030] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3320.249299] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3320.255602] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3320.262876] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3320.269226] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3320.275691] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3320.282012] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3320.288350] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3320.295329] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3320.301652] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3320.307922] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3320.314253] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3320.320589] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3320.326900] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3320.333397] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3320.339642] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3320.345923] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3320.352210] loop5: p255 start 1854537728 is beyond EOD, truncated 04:22:58 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000003f00000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:22:58 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804005419000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:22:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc000000) 04:22:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r7) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:22:58 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:22:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3320.463976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3320.738784] EXT4-fs (loop0): bad geometry: block count 1409287224 exceeds size of device (55296 blocks) [ 3320.795227] input: syz1 as /devices/virtual/input/input301 [ 3320.840934] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p 04:22:59 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3320.988909] loop5: partition table partially beyond EOD, truncated [ 3321.020369] loop5: p1 size 2 extends beyond EOD, truncated 04:22:59 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804005619000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3321.048936] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3321.079294] loop5: p5 start 1854537728 is beyond EOD, truncated 04:22:59 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3321.099626] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3321.118646] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3321.133404] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3321.143138] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3321.149545] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3321.153186] IPv6: ADDRCONF(NETDEV_UP): veth1691: link is not ready [ 3321.158345] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3321.175530] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3321.198361] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3321.220273] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3321.269475] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3321.277172] team0: Port device veth1691 added [ 3321.294388] input: syz1 as /devices/virtual/input/input303 [ 3321.306050] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3321.312258] input: syz1 as /devices/virtual/input/input302 04:22:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3321.335906] EXT4-fs (loop0): bad geometry: block count 1442841656 exceeds size of device (55296 blocks) [ 3321.363115] loop5: p17 start 1854537728 is beyond EOD, truncated 04:22:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xe000000) [ 3321.402027] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3321.440559] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3321.470479] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3321.479513] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3321.489969] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3321.490054] loop5: p22 start 1854537728 is beyond EOD, [ 3321.513653] truncated [ 3321.518116] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3321.530031] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3321.540450] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3321.553726] loop5: p26 start 1854537728 is beyond EOD, truncated 04:22:59 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804025a19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3321.570449] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3321.580806] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3321.588869] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3321.760990] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3321.830303] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3321.850336] IPv6: ADDRCONF(NETDEV_UP): veth1693: link is not ready [ 3321.858446] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3321.865773] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3321.878578] team0: Port device veth1693 added [ 3321.884064] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3321.894493] loop5: p35 start 1854537728 is beyond EOD, [ 3321.911882] truncated [ 3321.914677] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3321.924807] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3321.945813] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3321.956642] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3321.967283] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3321.977531] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3321.988489] EXT4-fs (loop0): bad geometry: block count 1510081592 exceeds size of device (55296 blocks) [ 3321.988544] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3322.012115] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3322.020180] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3322.031401] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3322.039514] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3322.047133] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3322.059794] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3322.078870] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3322.086665] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3322.093483] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3322.099776] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3322.111857] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3322.126534] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3322.135333] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3322.141894] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3322.148140] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3322.154581] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3322.161745] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3322.168131] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3322.174418] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3322.180753] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3322.187207] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3322.193598] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3322.199758] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3322.206220] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3322.212548] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3322.218851] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3322.225443] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3322.231954] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3322.238095] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3322.244342] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3322.250493] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3322.256781] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3322.263033] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3322.269379] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3322.275639] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3322.281903] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3322.288062] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3322.297308] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3322.303655] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3322.309831] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3322.316103] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3322.322523] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3322.328727] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3322.335406] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3322.341661] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3322.347849] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3322.347863] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3322.360257] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3322.366626] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3322.372887] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3322.379043] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3322.385335] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3322.400600] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3322.411760] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3322.421410] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3322.429042] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3322.435713] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3322.442580] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3322.449215] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3322.456091] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3322.462652] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3322.468912] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3322.475611] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3322.482334] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3322.488810] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3322.495492] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3322.502280] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3322.508613] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3322.515372] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3322.522198] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3322.528623] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3322.536232] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3322.542871] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3322.549506] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3322.556484] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3322.562949] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3322.569559] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3322.575860] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3322.582196] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3322.588451] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3322.594740] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3322.601176] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3322.607474] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3322.614382] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3322.620741] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3322.627181] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3322.633580] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3322.640056] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3322.646345] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3322.652731] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3322.658974] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3322.665703] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3322.672045] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3322.678413] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3322.685254] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3322.691554] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3322.697918] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3322.704204] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3322.710481] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3322.717060] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3322.723461] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3322.729699] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3322.736511] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3322.742887] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3322.749243] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3322.755573] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3322.761873] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3322.768246] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3322.774580] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3322.780827] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3322.787118] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3322.793418] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3322.799687] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3322.805990] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3322.813221] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3322.819545] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3322.825859] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3322.832151] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3322.838394] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3322.844674] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3322.850948] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3322.857337] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3322.863624] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3322.869947] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3322.876231] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3322.882528] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3322.888888] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3322.895383] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3322.901684] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3322.908089] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3322.914460] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3322.920709] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3322.926998] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3322.933485] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3322.939752] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3322.946706] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3322.953192] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3322.959559] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3322.965901] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3322.972225] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3322.978580] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3322.984968] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3322.991909] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3322.998170] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3323.004729] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3323.011103] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3323.017723] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3323.024060] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3323.030332] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3323.036656] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3323.042955] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3323.049182] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3323.055468] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3323.061757] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3323.068022] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3323.075082] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3323.081327] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3323.087876] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3323.094171] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3323.100411] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3323.108404] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3323.114756] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3323.120994] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3323.127297] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3323.134100] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3323.140356] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3323.146647] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3323.152955] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3323.159206] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3323.166011] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3323.172340] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3323.178597] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3323.184877] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3323.191324] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3323.197606] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3323.204364] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3323.210698] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3323.216994] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3323.223406] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3323.229649] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3323.235939] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3323.242246] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3323.248496] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3323.254800] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3323.261053] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3323.267378] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3323.273681] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3323.279926] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3323.286244] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3323.292583] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3323.298843] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3323.305355] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3323.311745] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3323.317987] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3323.324520] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3323.330773] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3323.337817] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3323.344990] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3323.351384] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3323.357689] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3323.364332] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3323.370557] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3323.376834] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3323.383540] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3323.390720] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3323.397812] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3323.404093] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3323.410534] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3323.416844] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3323.424454] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3323.430689] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3323.437072] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3323.443357] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000004000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:01 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:01 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) 04:23:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xf000000) 04:23:01 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3323.546573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3323.841875] input: syz1 as /devices/virtual/input/input304 [ 3323.866133] input: syz1 as /devices/virtual/input/input305 [ 3323.967946] IPv6: ADDRCONF(NETDEV_UP): veth1695: link is not ready [ 3324.001509] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3324.130712] EXT4-fs (loop0): bad geometry: block count 1610613816 exceeds size of device (55296 blocks) [ 3324.146818] team0: Port device veth1695 added [ 3324.156527] loop5: partition table partially beyond EOD, truncated [ 3324.166917] loop5: p1 size 2 extends beyond EOD, truncated [ 3324.175901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x400a0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 04:23:02 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) 04:23:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x10000000) [ 3324.259132] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3324.291693] loop5: p5 start 1854537728 is beyond EOD, truncated 04:23:02 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006819000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3324.307471] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3324.328082] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3324.359955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3324.370752] loop5: p8 start 1854537728 is beyond EOD, truncated 04:23:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3324.419668] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3324.453909] input: syz1 as /devices/virtual/input/input306 [ 3324.465451] IPv6: ADDRCONF(NETDEV_UP): veth1697: link is not ready [ 3324.499002] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3324.530186] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3324.538811] team0: Port device veth1697 added [ 3324.562037] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3324.598037] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3324.718882] loop5: p14 start 1854537728 is beyond EOD, truncated 04:23:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x20000000) [ 3324.848568] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3324.886771] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3324.899277] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3324.904416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3324.928747] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3324.939697] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3324.948853] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3324.968819] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3324.975888] EXT4-fs (loop0): bad geometry: block count 1744831544 exceeds size of device (55296 blocks) [ 3324.997634] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3325.030897] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3325.037486] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3325.053418] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3325.073241] IPv6: ADDRCONF(NETDEV_UP): veth1699: link is not ready [ 3325.079828] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3325.091264] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3325.098185] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3325.105437] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3325.112636] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3325.119010] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3325.125508] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3325.126611] team0: Port device veth1699 added [ 3325.132010] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3325.163169] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3325.174867] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3325.188689] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3325.212239] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3325.222267] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3325.228480] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3325.236351] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3325.243199] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3325.249562] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3325.256287] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3325.263009] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3325.269320] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3325.275988] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3325.282618] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3325.288804] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3325.298040] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3325.306505] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3325.314025] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3325.320208] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3325.346797] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3325.364152] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3325.370382] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3325.377218] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3325.384228] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3325.390650] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3325.397027] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3325.403546] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3325.409798] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3325.416749] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3325.423480] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3325.430068] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3325.436415] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3325.442678] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3325.448836] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3325.455084] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3325.461241] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3325.467539] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3325.473785] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3325.479981] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3325.486314] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3325.492551] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3325.498714] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3325.505104] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3325.511485] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3325.517854] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3325.524113] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3325.530285] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3325.536529] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3325.542805] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3325.549006] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3325.555230] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3325.561411] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3325.567755] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3325.575562] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3325.581877] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3325.588176] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3325.594572] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3325.600894] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3325.607335] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3325.613663] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3325.619815] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3325.626071] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3325.632310] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3325.638465] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3325.644716] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3325.650870] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3325.657461] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3325.663816] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3325.670057] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3325.676469] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3325.682802] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3325.689130] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3325.695624] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3325.702002] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3325.708455] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3325.714784] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3325.721059] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3325.727553] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3325.733890] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3325.740232] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3325.746590] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3325.752910] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3325.759155] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3325.765844] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3325.772310] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3325.778597] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3325.784955] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3325.791207] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3325.797504] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3325.803855] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3325.810120] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3325.816866] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3325.823228] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3325.829564] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3325.835886] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3325.842225] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3325.848496] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3325.854904] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3325.861155] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3325.867495] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3325.874072] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3325.880310] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3325.886630] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3325.893074] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3325.899320] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3325.905782] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3325.912100] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3325.918351] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3325.925225] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3325.932583] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3325.938812] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3325.945935] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3325.952322] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3325.958551] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3325.965170] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3325.971447] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3325.977803] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3325.984225] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3325.990484] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3325.996787] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3326.003119] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3326.009879] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3326.016165] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3326.022503] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3326.028758] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3326.035067] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3326.041315] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3326.047637] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3326.055975] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3326.062958] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3326.069207] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3326.075500] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3326.081826] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3326.088070] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3326.094585] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3326.100829] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3326.107175] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3326.113561] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3326.119885] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3326.126218] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3326.132507] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3326.138836] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3326.145175] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3326.151423] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3326.157723] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3326.164072] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3326.171616] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3326.177888] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3326.184324] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3326.190562] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3326.196868] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3326.203201] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3326.209447] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3326.215819] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3326.222180] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3326.228962] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3326.235274] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3326.242013] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3326.248258] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3326.254562] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3326.261356] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3326.267842] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3326.274318] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3326.280745] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3326.287085] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3326.293429] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3326.299703] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3326.306179] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3326.312622] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3326.318993] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3326.325348] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3326.331769] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3326.338025] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3326.344447] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3326.350822] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3326.357226] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3326.363578] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3326.369842] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3326.376149] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3326.382519] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3326.388777] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3326.395101] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3326.401353] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3326.407703] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3326.414216] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3326.420579] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3326.426927] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3326.433424] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3326.439992] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3326.446339] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3326.452921] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3326.460865] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3326.467341] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3326.473768] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3326.480284] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3326.486801] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3326.493370] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3326.499607] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3326.505957] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3326.512416] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3326.518661] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3326.525160] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3326.531574] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3326.537833] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3326.544272] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3326.550508] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3326.556853] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3326.563166] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3326.569507] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3326.575907] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3326.582233] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3326.588581] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3326.594880] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3326.601120] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3326.607454] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3326.613911] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3326.620161] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3326.626482] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3326.632784] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3326.639024] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3326.645363] loop5: p254 start 1854537728 is beyond EOD, truncated 04:23:04 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000ffffffffffffff7f00000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x8000d, 0x9) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) fchown(r4, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) open(0x0, 0x0, 0x0) write(r5, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7e", 0x3f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0) sendfile(r5, r5, &(0x7f0000000200), 0xff8) r6 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='Z\x00') 04:23:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) 04:23:04 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006c19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3326.651663] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x3f000000) 04:23:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3326.759148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3326.828024] IPv6: ADDRCONF(NETDEV_UP): veth1701: link is not ready [ 3326.847155] team0: Port device veth1701 added [ 3327.036939] EXT4-fs (loop0): bad geometry: block count 1811940408 exceeds size of device (55296 blocks) [ 3327.050214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x40000000) [ 3327.099294] input: syz1 as /devices/virtual/input/input307 [ 3327.153444] Dev loop5: unable to read RDB block 1 [ 3327.172429] loop5: unable to read partition table 04:23:05 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804007419000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3327.199731] loop5: partition table beyond EOD, truncated [ 3327.225104] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) munlockall() [ 3327.263399] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:05 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000000000fffffffb00000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 3327.403774] IPv6: ADDRCONF(NETDEV_UP): veth1703: link is not ready [ 3327.460737] team0: Port device veth1703 added 04:23:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x4b3e7a9e) [ 3327.510444] EXT4-fs (loop0): bad geometry: block count 1946158136 exceeds size of device (55296 blocks) [ 3327.598723] input: syz1 as /devices/virtual/input/input308 04:23:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[]}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r3) setreuid(0xee00, 0x0) [ 3327.714260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:06 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804007a19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:06 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) munlockall() [ 3327.835482] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3327.974599] loop5: partition table partially beyond EOD, truncated [ 3327.982468] IPv6: ADDRCONF(NETDEV_UP): veth1705: link is not ready [ 3327.999607] team0: Port device veth1705 added [ 3328.012680] loop5: p1 size 2 extends beyond EOD, truncated [ 3328.133916] loop5: p4 start 1854537728 is beyond EOD, truncated 04:23:06 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) open_by_handle_at(r0, &(0x7f0000000100)={0xc, 0x0, "154ff79e"}, 0x0) [ 3328.193895] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3328.297998] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3328.307492] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3328.316764] EXT4-fs (loop0): bad geometry: block count 2046821432 exceeds size of device (55296 blocks) [ 3328.318410] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3328.342555] input: syz1 as /devices/virtual/input/input309 04:23:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x60000000) [ 3328.355840] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3328.391798] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3328.432431] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3328.462054] loop5: p12 start 1854537728 is beyond EOD, truncated 04:23:06 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380436a919000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0xffffffffffffff0c) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x180800) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=""/36, &(0x7f0000000140)=0x24) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) sched_setattr(r2, &(0x7f0000000240)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffee3}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r6, &(0x7f00000003c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48bb7a9dbe30fcc0ee3c0d19", 0x5e) sendfile(r6, r6, &(0x7f0000000200), 0xff8) [ 3328.489375] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3328.504942] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3328.515052] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3328.539913] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3328.548545] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3328.555589] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3328.562494] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3328.570774] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3328.578088] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3328.601827] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3328.617769] loop5: p22 start 1854537728 is beyond EOD, truncated 04:23:06 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) munlockall() [ 3328.657735] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3328.680256] IPv6: ADDRCONF(NETDEV_UP): veth1707: link is not ready [ 3328.680798] loop5: p24 start 1854537728 is beyond EOD, [ 3328.700560] team0: Port device veth1707 added 04:23:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[]}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3328.721223] truncated [ 3328.729408] EXT4-fs (loop0): bad geometry: block count 2838889528 exceeds size of device (55296 blocks) [ 3328.745946] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3328.770324] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3328.791785] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3328.812044] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3328.850867] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3328.890921] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3328.921139] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3328.936204] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3328.943379] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3328.990917] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3329.007973] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3329.038356] input: syz1 as /devices/virtual/input/input310 [ 3329.047355] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3329.107663] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3329.151251] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3329.166961] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3329.177494] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3329.188034] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3329.198371] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3329.213983] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3329.225919] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3329.238501] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3329.249127] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3329.257959] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3329.265725] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3329.278995] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3329.285490] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3329.303557] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3329.309934] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3329.319488] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3329.326519] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3329.338193] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3329.344808] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3329.351040] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3329.357352] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3329.363727] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3329.370084] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3329.376402] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3329.382676] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3329.382688] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3329.382700] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3329.382712] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3329.382722] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3329.382732] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3329.382750] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3329.407751] loop5: p69 start 1854537728 is beyond EOD, [ 3329.426688] truncated [ 3329.435338] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3329.441684] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3329.441697] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3329.441710] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3329.441722] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3329.441733] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3329.441743] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3329.441755] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3329.441766] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3329.441777] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3329.441870] loop5: p80 start 1854537728 is beyond EOD, [ 3329.455355] truncated [ 3329.474991] loop5: p81 start 1854537728 is beyond EOD, [ 3329.486882] truncated [ 3329.515206] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3329.523037] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3329.529626] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3329.536360] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3329.542747] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3329.549059] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3329.555707] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3329.564193] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3329.570399] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3329.576787] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3329.583189] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3329.589355] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3329.595689] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3329.601968] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3329.601983] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3329.601994] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3329.602004] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3329.602015] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3329.602025] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3329.602035] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3329.602046] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3329.602055] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3329.602066] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3329.602077] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3329.602088] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3329.602099] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3329.602110] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3329.602121] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3329.602132] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3329.602144] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3329.602155] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3329.602166] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3329.602176] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3329.602187] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3329.602198] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3329.614642] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3329.614656] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3329.614668] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3329.614684] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3329.767531] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3329.778550] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3329.787821] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3329.799154] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3329.806574] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3329.814099] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3329.820626] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3329.827457] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3329.834181] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3329.840721] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3329.847159] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3329.853489] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3329.859747] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3329.866147] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3329.872491] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3329.878746] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3329.885146] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3329.891413] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3329.897928] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3329.904315] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3329.910610] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3329.916955] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3329.923316] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3329.929583] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3329.935892] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3329.943628] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3329.949862] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3329.956514] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3329.962942] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3329.969173] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3329.975782] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3329.982220] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3329.988476] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3329.994801] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3330.001048] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3330.007423] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3330.013760] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3330.020025] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3330.026376] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3330.032813] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3330.039143] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3330.045477] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3330.051788] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3330.058175] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3330.064532] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3330.070860] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3330.077334] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3330.083699] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3330.090087] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3330.096460] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3330.102807] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3330.109052] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3330.115351] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3330.121684] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3330.127935] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3330.134557] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3330.140898] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3330.147244] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3330.153626] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3330.159889] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3330.166232] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3330.172574] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3330.178835] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3330.185258] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3330.191603] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3330.197836] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3330.204171] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3330.210421] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3330.216763] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3330.223116] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3330.229492] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3330.235834] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3330.242242] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3330.248602] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3330.255033] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3330.261383] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3330.267791] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3330.274116] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3330.280366] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3330.286755] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3330.293115] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3330.299360] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3330.305707] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3330.312125] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3330.318366] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3330.324698] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3330.331036] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3330.337580] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3330.343930] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3330.350172] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3330.356522] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3330.362870] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3330.369119] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3330.375432] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3330.381782] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3330.388043] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3330.394364] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3330.400609] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3330.406941] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3330.413287] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3330.419627] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3330.425965] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3330.432672] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3330.438924] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3330.445371] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3330.452722] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3330.458999] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3330.465356] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3330.471786] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3330.478401] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3330.484779] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3330.491035] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3330.497780] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3330.504149] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3330.510663] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3330.517098] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3330.523511] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3330.529914] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3330.536257] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3330.542612] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3330.549218] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3330.555695] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3330.562085] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3330.568333] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3330.574737] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3330.580993] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3330.587348] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3330.593666] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3330.599924] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3330.606305] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3330.613057] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3330.619314] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3330.625648] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3330.632013] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3330.638805] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff07007400000000000000000000000000000007ffffffffffff00000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x65580000) 04:23:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400d819000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:08 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x20000}]) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nbd(0x0) socket$inet(0x10, 0x3, 0x0) 04:23:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[]}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3330.766596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3331.119525] input: syz1 as /devices/virtual/input/input311 [ 3331.128654] EXT4-fs (loop0): bad geometry: block count 3623879736 exceeds size of device (55296 blocks) 04:23:09 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @remote, 0x4e20, 0x1, 'dh\x00', 0x0, 0x9, 0x71}, 0x2c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) dup(0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) [ 3331.190206] IPv6: ADDRCONF(NETDEV_UP): veth1709: link is not ready [ 3331.211420] team0: Port device veth1709 added [ 3331.217336] Dev loop5: unable to read RDB block 1 [ 3331.232486] loop5: unable to read partition table [ 3331.238281] loop5: partition table beyond EOD, truncated [ 3331.249747] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x81000000) 04:23:09 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:09 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040fff19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:09 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff07007400000000000000000000000000007fffffffffffffff00000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 3331.477645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3331.535870] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 04:23:09 executing program 2: [ 3331.613142] Dev loop5: unable to read RDB block 1 [ 3331.627635] loop5: unable to read partition table [ 3331.652511] loop5: partition table beyond EOD, truncated 04:23:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB]}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3331.681184] input: syz1 as /devices/virtual/input/input312 [ 3331.683392] EXT4-fs (loop0): bad geometry: block count 4279174200 exceeds size of device (55296 blocks) [ 3331.709645] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x88a8ffff) 04:23:10 executing program 2: [ 3331.915706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:10 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:10 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000200000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:10 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000400000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x9e7a3e4b) 04:23:10 executing program 2: [ 3332.268681] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3332.435909] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p 04:23:10 executing program 2: [ 3332.538500] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3332.591903] loop5: partition table partially beyond EOD, truncated [ 3332.604110] loop5: p1 size 2 extends beyond EOD, truncated [ 3332.639803] loop5: p2 size 33554432 extends beyond EOD, truncated [ 3332.651234] EXT4-fs (loop0): bad geometry: block count 67109944 exceeds size of device (55296 blocks) 04:23:10 executing program 2: [ 3332.680928] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3332.707051] input: syz1 as /devices/virtual/input/input313 [ 3332.715317] loop5: p5 size 33554432 extends beyond EOD, truncated 04:23:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB]}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3332.806426] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3332.846325] loop5: p7 size 33554432 extends beyond EOD, truncated 04:23:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x9effffff) [ 3332.896383] loop5: p8 start 1854537728 is beyond EOD, truncated 04:23:11 executing program 2: 04:23:11 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000007000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3332.941213] loop5: p9 size 33554432 extends beyond EOD, truncated 04:23:11 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX, @ANYRESHEX=0x0], 0x247) munlockall() [ 3333.019527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3333.022942] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3333.144924] loop5: p11 size 33554432 extends beyond EOD, truncated 04:23:11 executing program 2: [ 3333.295575] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3333.310251] loop5: p13 size 33554432 extends beyond EOD, truncated [ 3333.321435] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3333.334746] loop5: p15 size 33554432 extends beyond EOD, truncated [ 3333.387626] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3333.401648] loop5: p17 size 33554432 extends beyond EOD, truncated [ 3333.450983] input: syz1 as /devices/virtual/input/input314 [ 3333.476212] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3333.550430] loop5: p19 size 33554432 extends beyond EOD, truncated [ 3333.561005] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3333.595111] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3333.663653] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3333.716430] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3333.720870] loop5: p20 start 1854537728 is beyond EOD, [ 3333.728354] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3333.731952] truncated [ 3333.739479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3333.758546] loop5: p21 size 33554432 extends beyond EOD, truncated [ 3333.774806] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3333.797852] loop5: p23 size 33554432 extends beyond EOD, truncated [ 3333.848176] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3333.872441] loop5: p25 size 33554432 extends beyond EOD, truncated [ 3333.920914] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3333.950258] loop5: p27 size 33554432 extends beyond EOD, truncated [ 3333.984939] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3334.001488] loop5: p29 size 33554432 extends beyond EOD, truncated [ 3334.026881] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3334.061787] loop5: p31 size 33554432 extends beyond EOD, truncated [ 3334.070020] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3334.081884] loop5: p33 size 33554432 extends beyond EOD, truncated [ 3334.092572] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3334.111946] loop5: p35 size 33554432 extends beyond EOD, truncated [ 3334.122720] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3334.141757] loop5: p37 size 33554432 extends beyond EOD, truncated [ 3334.151955] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3334.158162] loop5: p39 size 33554432 extends beyond EOD, truncated [ 3334.196102] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3334.215370] loop5: p41 size 33554432 extends beyond EOD, truncated [ 3334.236515] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3334.255836] loop5: p43 size 33554432 extends beyond EOD, truncated [ 3334.276420] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3334.291700] loop5: p45 size 33554432 extends beyond EOD, truncated [ 3334.302649] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3334.321701] loop5: p47 size 33554432 extends beyond EOD, truncated [ 3334.332566] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3334.351620] loop5: p49 size 33554432 extends beyond EOD, truncated [ 3334.366447] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3334.380582] loop5: p51 size 33554432 extends beyond EOD, truncated [ 3334.402780] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3334.409326] loop5: p53 size 33554432 extends beyond EOD, truncated [ 3334.418699] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3334.429599] loop5: p55 size 33554432 extends beyond EOD, truncated [ 3334.437174] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3334.448154] loop5: p57 size 33554432 extends beyond EOD, truncated [ 3334.456346] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3334.463550] loop5: p59 size 33554432 extends beyond EOD, truncated [ 3334.470899] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3334.477329] loop5: p61 size 33554432 extends beyond EOD, truncated [ 3334.484849] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3334.491077] loop5: p63 size 33554432 extends beyond EOD, truncated [ 3334.498913] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3334.505223] loop5: p65 size 33554432 extends beyond EOD, truncated [ 3334.512705] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3334.518897] loop5: p67 size 33554432 extends beyond EOD, truncated [ 3334.526369] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3334.532756] loop5: p69 size 33554432 extends beyond EOD, truncated [ 3334.539989] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3334.546263] loop5: p71 size 33554432 extends beyond EOD, truncated [ 3334.553368] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3334.559539] loop5: p73 size 33554432 extends beyond EOD, truncated [ 3334.567100] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3334.573343] loop5: p75 size 33554432 extends beyond EOD, truncated [ 3334.580349] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3334.588003] loop5: p77 size 33554432 extends beyond EOD, truncated [ 3334.595427] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3334.601694] loop5: p79 size 33554432 extends beyond EOD, truncated [ 3334.608732] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3334.615097] loop5: p81 size 33554432 extends beyond EOD, truncated [ 3334.623954] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3334.630141] loop5: p83 size 33554432 extends beyond EOD, truncated [ 3334.637442] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3334.643718] loop5: p85 size 33554432 extends beyond EOD, truncated [ 3334.650924] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3334.657327] loop5: p87 size 33554432 extends beyond EOD, truncated [ 3334.664356] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3334.670641] loop5: p89 size 33554432 extends beyond EOD, truncated [ 3334.678044] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3334.684622] loop5: p91 size 33554432 extends beyond EOD, truncated [ 3334.691792] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3334.698064] loop5: p93 size 33554432 extends beyond EOD, truncated [ 3334.705258] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3334.711584] loop5: p95 size 33554432 extends beyond EOD, truncated [ 3334.718628] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3334.724877] loop5: p97 size 33554432 extends beyond EOD, truncated [ 3334.732218] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3334.738385] loop5: p99 size 33554432 extends beyond EOD, truncated [ 3334.745707] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3334.752063] loop5: p101 size 33554432 extends beyond EOD, truncated [ 3334.759174] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3334.765530] loop5: p103 size 33554432 extends beyond EOD, truncated [ 3334.773249] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3334.779516] loop5: p105 size 33554432 extends beyond EOD, truncated [ 3334.786907] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3334.793335] loop5: p107 size 33554432 extends beyond EOD, truncated [ 3334.800532] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3334.806885] loop5: p109 size 33554432 extends beyond EOD, truncated [ 3334.814768] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3334.821704] loop5: p111 size 33554432 extends beyond EOD, truncated [ 3334.828932] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3334.835269] loop5: p113 size 33554432 extends beyond EOD, truncated [ 3334.842876] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3334.849134] loop5: p115 size 33554432 extends beyond EOD, truncated [ 3334.856740] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3334.863090] loop5: p117 size 33554432 extends beyond EOD, truncated [ 3334.870229] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3334.876799] loop5: p119 size 33554432 extends beyond EOD, truncated [ 3334.884492] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3334.891029] loop5: p121 size 33554432 extends beyond EOD, truncated [ 3334.898980] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3334.905534] loop5: p123 size 33554432 extends beyond EOD, truncated [ 3334.913580] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3334.919833] loop5: p125 size 33554432 extends beyond EOD, truncated [ 3334.927252] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3334.933595] loop5: p127 size 33554432 extends beyond EOD, truncated [ 3334.940969] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3334.947370] loop5: p129 size 33554432 extends beyond EOD, truncated [ 3334.954888] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3334.961249] loop5: p131 size 33554432 extends beyond EOD, truncated [ 3334.968695] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3334.975050] loop5: p133 size 33554432 extends beyond EOD, truncated [ 3334.982598] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3334.988941] loop5: p135 size 33554432 extends beyond EOD, truncated [ 3334.997474] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3335.003839] loop5: p137 size 33554432 extends beyond EOD, truncated [ 3335.011151] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3335.017641] loop5: p139 size 33554432 extends beyond EOD, truncated [ 3335.024896] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3335.031158] loop5: p141 size 33554432 extends beyond EOD, truncated [ 3335.038573] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3335.044934] loop5: p143 size 33554432 extends beyond EOD, truncated [ 3335.052651] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3335.058904] loop5: p145 size 33554432 extends beyond EOD, truncated [ 3335.066222] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3335.072569] loop5: p147 size 33554432 extends beyond EOD, truncated [ 3335.079663] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3335.086079] loop5: p149 size 33554432 extends beyond EOD, truncated [ 3335.093641] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3335.100939] loop5: p151 size 33554432 extends beyond EOD, truncated [ 3335.108374] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3335.114828] loop5: p153 size 33554432 extends beyond EOD, truncated [ 3335.122689] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3335.129915] loop5: p155 size 33554432 extends beyond EOD, truncated [ 3335.137343] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3335.143675] loop5: p157 size 33554432 extends beyond EOD, truncated [ 3335.150819] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3335.157147] loop5: p159 size 33554432 extends beyond EOD, truncated [ 3335.164749] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3335.171034] loop5: p161 size 33554432 extends beyond EOD, truncated [ 3335.178662] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3335.185025] loop5: p163 size 33554432 extends beyond EOD, truncated [ 3335.192606] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3335.198900] loop5: p165 size 33554432 extends beyond EOD, truncated [ 3335.206270] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3335.212596] loop5: p167 size 33554432 extends beyond EOD, truncated [ 3335.219729] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3335.226072] loop5: p169 size 33554432 extends beyond EOD, truncated [ 3335.233591] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3335.239836] loop5: p171 size 33554432 extends beyond EOD, truncated [ 3335.247297] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3335.253630] loop5: p173 size 33554432 extends beyond EOD, truncated [ 3335.260795] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3335.267146] loop5: p175 size 33554432 extends beyond EOD, truncated [ 3335.274683] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3335.281017] loop5: p177 size 33554432 extends beyond EOD, truncated [ 3335.288405] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3335.294741] loop5: p179 size 33554432 extends beyond EOD, truncated [ 3335.302202] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3335.308498] loop5: p181 size 33554432 extends beyond EOD, truncated [ 3335.316380] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3335.322717] loop5: p183 size 33554432 extends beyond EOD, truncated [ 3335.329819] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3335.336144] loop5: p185 size 33554432 extends beyond EOD, truncated [ 3335.343265] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3335.349603] loop5: p187 size 33554432 extends beyond EOD, truncated [ 3335.357032] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3335.363349] loop5: p189 size 33554432 extends beyond EOD, truncated [ 3335.370466] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3335.376798] loop5: p191 size 33554432 extends beyond EOD, truncated [ 3335.384595] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3335.391024] loop5: p193 size 33554432 extends beyond EOD, truncated [ 3335.398417] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3335.404780] loop5: p195 size 33554432 extends beyond EOD, truncated [ 3335.412220] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3335.418565] loop5: p197 size 33554432 extends beyond EOD, truncated [ 3335.426005] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3335.432341] loop5: p199 size 33554432 extends beyond EOD, truncated [ 3335.439547] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3335.445878] loop5: p201 size 33554432 extends beyond EOD, truncated [ 3335.453364] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3335.459781] loop5: p203 size 33554432 extends beyond EOD, truncated [ 3335.467173] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3335.473522] loop5: p205 size 33554432 extends beyond EOD, truncated [ 3335.480693] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3335.487058] loop5: p207 size 33554432 extends beyond EOD, truncated [ 3335.494755] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3335.501346] loop5: p209 size 33554432 extends beyond EOD, truncated [ 3335.509412] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3335.515766] loop5: p211 size 33554432 extends beyond EOD, truncated [ 3335.523347] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3335.529612] loop5: p213 size 33554432 extends beyond EOD, truncated [ 3335.537135] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3335.543523] loop5: p215 size 33554432 extends beyond EOD, truncated [ 3335.550754] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3335.557133] loop5: p217 size 33554432 extends beyond EOD, truncated [ 3335.564999] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3335.573463] loop5: p219 size 33554432 extends beyond EOD, truncated [ 3335.580691] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3335.587073] loop5: p221 size 33554432 extends beyond EOD, truncated [ 3335.594966] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3335.601385] loop5: p223 size 33554432 extends beyond EOD, truncated [ 3335.609466] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3335.616010] loop5: p225 size 33554432 extends beyond EOD, truncated [ 3335.623699] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3335.630217] loop5: p227 size 33554432 extends beyond EOD, truncated [ 3335.637800] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3335.644351] loop5: p229 size 33554432 extends beyond EOD, truncated [ 3335.651904] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3335.658162] loop5: p231 size 33554432 extends beyond EOD, truncated [ 3335.665735] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3335.672167] loop5: p233 size 33554432 extends beyond EOD, truncated [ 3335.679542] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3335.685937] loop5: p235 size 33554432 extends beyond EOD, truncated [ 3335.693680] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3335.700156] loop5: p237 size 33554432 extends beyond EOD, truncated [ 3335.707828] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3335.714203] loop5: p239 size 33554432 extends beyond EOD, truncated [ 3335.721814] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3335.728096] loop5: p241 size 33554432 extends beyond EOD, truncated [ 3335.736197] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3335.742537] loop5: p243 size 33554432 extends beyond EOD, truncated [ 3335.750176] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3335.756582] loop5: p245 size 33554432 extends beyond EOD, truncated [ 3335.763866] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3335.770251] loop5: p247 size 33554432 extends beyond EOD, truncated [ 3335.777795] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3335.784129] loop5: p249 size 33554432 extends beyond EOD, truncated [ 3335.791419] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3335.798918] loop5: p251 size 33554432 extends beyond EOD, truncated [ 3335.806352] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3335.812831] loop5: p253 size 33554432 extends beyond EOD, truncated [ 3335.820121] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3335.827187] loop5: p255 size 33554432 extends beyond EOD, truncated 04:23:14 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000020000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:14 executing program 2: 04:23:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc3ffffff) 04:23:14 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB]}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:14 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000219000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:14 executing program 2: [ 3335.943728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:14 executing program 2: [ 3336.304363] input: syz1 as /devices/virtual/input/input315 04:23:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc5240400) [ 3336.369700] EXT4-fs (loop0): bad geometry: block count 33555512 exceeds size of device (55296 blocks) 04:23:14 executing program 2: 04:23:14 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:14 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000319000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3336.571107] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3336.799229] input: syz1 as /devices/virtual/input/input316 [ 3336.812634] Dev loop5: unable to read RDB block 1 [ 3336.823140] loop5: unable to read partition table [ 3336.856549] EXT4-fs (loop0): bad geometry: block count 50332728 exceeds size of device (55296 blocks) [ 3336.879670] loop5: partition table beyond EOD, truncated [ 3336.905912] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc6240400) 04:23:15 executing program 2: 04:23:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f"], 0xfa}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:15 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:15 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000003f000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:15 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000419000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:15 executing program 2: [ 3337.126651] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:15 executing program 2: 04:23:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc7240400) [ 3337.565704] Dev loop5: unable to read RDB block 1 [ 3337.573928] loop5: unable to read partition table [ 3337.583491] EXT4-fs (loop0): bad geometry: block count 67109944 exceeds size of device (55296 blocks) [ 3337.594891] loop5: partition table beyond EOD, truncated [ 3337.600882] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:15 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:15 executing program 2: [ 3337.688857] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:16 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000519000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:16 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000040000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:16 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xfa}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:16 executing program 2: 04:23:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xe4ffffff) [ 3338.089032] Dev loop5: unable to read RDB block 1 [ 3338.104356] EXT4-fs (loop0): bad geometry: block count 83887160 exceeds size of device (55296 blocks) [ 3338.117104] loop5: unable to read partition table [ 3338.149316] loop5: partition table beyond EOD, truncated [ 3338.178131] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3338.196175] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:16 executing program 2: 04:23:16 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000619000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:16 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:16 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000100000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xf0ffffff) 04:23:17 executing program 2: 04:23:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xfa}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3339.886109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:18 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000719000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:18 executing program 2: pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x0) keyctl$get_security(0x11, r4, 0x0, 0x0) keyctl$get_security(0x11, r3, 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) [ 3339.913618] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3340.014701] loop5: partition table partially beyond EOD, truncated 04:23:18 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3340.056517] loop5: p1 size 2 extends beyond EOD, truncated [ 3340.409458] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3340.506233] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3340.529307] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3340.548551] loop5: p7 start 1854537728 is beyond EOD, truncated 04:23:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xfcffffff) [ 3340.560739] EXT4-fs (loop0): bad geometry: block count 117441592 exceeds size of device (55296 blocks) [ 3340.576923] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3340.584233] loop5: p9 start 1854537728 is beyond EOD, truncated 04:23:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x0, 0x0, 0x0, @dev}}}}}, 0x0) [ 3340.618837] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3340.666370] loop5: p11 start 1854537728 is beyond EOD, truncated 04:23:18 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000919000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3340.709469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3340.720690] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3340.731475] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3340.760310] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3340.791187] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3340.804306] loop5: p16 start 1854537728 is beyond EOD, truncated 04:23:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0505405, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x666d) sendfile(r1, r2, 0x0, 0xa195) 04:23:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffa888) [ 3340.810783] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3340.820766] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3340.837383] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3340.891926] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3340.898132] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3340.962882] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3340.975451] audit: type=1800 audit(2000002999.171:360): pid=26494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17116 res=0 [ 3341.004721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3341.007804] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3341.020169] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3341.032083] audit: type=1804 audit(2000002999.171:361): pid=26494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir373055533/syzkaller.wfInbO/148/file0" dev="sda1" ino=17116 res=1 [ 3341.059495] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3341.081714] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3341.091609] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3341.103152] EXT4-fs (loop0): bad geometry: block count 150996024 exceeds size of device (55296 blocks) [ 3341.113222] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3341.120400] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3341.127205] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3341.134089] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3341.140550] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3341.147584] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3341.160285] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3341.167717] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3341.174381] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3341.182044] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3341.188510] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3341.195331] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3341.210552] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3341.228068] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3341.243766] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3341.263507] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3341.282769] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3341.297722] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3341.307318] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3341.314565] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3341.321175] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3341.327805] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3341.335056] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3341.341895] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3341.352140] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3341.363218] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3341.370803] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3341.381268] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3341.387756] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3341.394418] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3341.401294] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3341.408637] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3341.415428] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3341.422276] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3341.428825] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3341.435609] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3341.442174] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3341.448804] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3341.455347] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3341.462128] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3341.468833] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3341.475546] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3341.482116] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3341.489772] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3341.496802] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3341.503326] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3341.509794] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3341.516426] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3341.523320] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3341.530152] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3341.537063] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3341.543767] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3341.550502] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3341.557154] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3341.563773] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3341.570278] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3341.576662] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3341.585197] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3341.591862] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3341.598279] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3341.604676] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3341.611129] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3341.617547] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3341.623960] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3341.630337] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3341.636768] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3341.643279] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3341.649723] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3341.656949] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3341.663469] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3341.669811] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3341.676223] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3341.683687] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3341.690355] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3341.696974] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3341.703498] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3341.710144] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3341.716840] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3341.723480] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3341.729905] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3341.736709] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3341.743496] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3341.749949] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3341.756428] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3341.763926] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3341.770718] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3341.783017] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3341.786614] audit: type=1804 audit(2000002999.961:362): pid=26511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir373055533/syzkaller.wfInbO/148/file0" dev="sda1" ino=17116 res=1 [ 3341.789301] loop5: p115 start 1854537728 is beyond EOD, [ 3341.829170] truncated [ 3341.829245] audit: type=1800 audit(2000002999.961:363): pid=26511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17116 res=0 [ 3341.858308] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3341.864953] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3341.871334] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3341.877952] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3341.884863] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3341.891261] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3341.897815] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3341.905780] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3341.912360] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3341.918652] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3341.925097] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3341.931373] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3341.937870] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3341.944251] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3341.950534] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3341.956899] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3341.963220] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3341.969555] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3341.976366] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3341.982945] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3341.989193] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3341.995522] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3342.001828] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3342.008068] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3342.014392] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3342.020669] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3342.027015] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3342.033361] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3342.039618] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3342.045913] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3342.052236] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3342.058486] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3342.064819] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3342.071244] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3342.077603] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3342.083924] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3342.090178] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3342.096541] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3342.102897] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3342.109303] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3342.115755] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3342.122079] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3342.128498] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3342.135640] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3342.141973] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3342.148224] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3342.154565] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3342.160814] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3342.167172] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3342.173600] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3342.179834] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3342.186136] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3342.192552] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3342.198814] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3342.205119] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3342.211373] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3342.217874] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3342.224201] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3342.230468] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3342.236852] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3342.243168] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3342.249410] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3342.255755] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3342.262084] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3342.268338] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3342.274943] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3342.281312] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3342.287626] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3342.294357] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3342.300634] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3342.306973] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3342.313303] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3342.319565] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3342.325874] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3342.333163] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3342.339406] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3342.345705] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3342.352063] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3342.359258] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3342.365685] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3342.372126] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3342.378459] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3342.384990] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3342.391257] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3342.397654] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3342.403966] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3342.410201] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3342.416544] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3342.423087] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3342.429418] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3342.435759] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3342.442099] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3342.448394] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3342.454739] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3342.461148] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3342.467502] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3342.474178] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3342.480428] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3342.486958] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3342.493578] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3342.499820] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3342.506224] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3342.512588] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3342.519102] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3342.525403] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3342.531711] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3342.537960] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3342.544265] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3342.550513] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3342.556817] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3342.563189] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3342.569416] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3342.575768] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3342.582046] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3342.588275] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3342.594693] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3342.600930] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3342.607217] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3342.613714] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3342.619980] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3342.626283] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3342.632608] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3342.638847] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3342.645170] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3342.651760] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3342.658136] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3342.664436] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3342.670852] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3342.677217] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3342.683526] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3342.689789] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3342.696130] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3342.703620] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3342.709856] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3342.716175] loop5: p250 start 1854537728 is beyond EOD, truncated 04:23:20 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000200000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x177}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:20 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:20 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000a19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xfffff000) 04:23:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000008c0)=0x0) timer_create(0x2, &(0x7f0000000b40)={0x0, 0x34, 0x6b91598ac370c2, @tid=r3}, &(0x7f0000000b80)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000004200)=[{{&(0x7f00000006c0)=@in6, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/255, 0xff}, {0x0}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000002a40)=""/144, 0x90}], 0x8, &(0x7f0000000c80)=""/131, 0x83}, 0x1000}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002e40)=""/239, 0xef}, {&(0x7f0000000d40)=""/131, 0x83}, {&(0x7f0000002f40)=""/70, 0x46}, {&(0x7f0000002fc0)=""/1, 0x1}, {&(0x7f0000003000)=""/230, 0xe6}], 0x5}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003600)=""/66, 0x42}, {&(0x7f0000003780)=""/69, 0x45}, {&(0x7f0000003800)=""/127, 0x7f}, {0x0}, {&(0x7f0000003980)=""/45, 0x2d}, {&(0x7f00000039c0)=""/34, 0x22}], 0x6, &(0x7f0000003a80)=""/40, 0x28}, 0x401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/247, 0xf7}, 0x2}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003e40)=""/16, 0x10}, {&(0x7f0000003f80)=""/195, 0xc3}, {&(0x7f0000004080)=""/19, 0x13}], 0x3, &(0x7f0000004100)=""/207, 0xcf}, 0xbff}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwritev(r5, &(0x7f0000000640)=[{&(0x7f00000002c0)="57693e9dc644d9cab18e301ea5bc0c1796f280477d177929b245c9d2517c4af6bdad2b14fe5822a5ded355249f162a124028a5fa2b49d3b8a1083a206188295ee45fc95effd987c59c4454daa27cc9f39767ea467c27d8142e594a2bc178795471c057e005c34471e00a7119db27e3e206e219e2046b5edab666264d82267e65bf56", 0x82}, {&(0x7f0000000e40)="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", 0xffc}, {&(0x7f0000000380)="d27c478e257666f1096c83ee3009d38238fa0bad64cdccad4ec73fe2f57d2d4edf27d135eb2e9f3c6f8b93a80d6b658bae1112e500f8cbee4d474854903c9179eb7d3881c597750955a85d05153cd51a3bb1567e46afc814bd85e01049030aa8a9397b1ca76dfdbe0e0b43a69094966ae52eb6ec188d0b13386e34125dfacc7365228d45bc90381a36dc6320189dcb67243e1fe3754ba8200d1708776b12768397e2b7d296b290e15216006fea72b8132cceabdf6e1b9c", 0xb7}, {&(0x7f0000000440)="1ddf475547657b3c160e9bde4203d3d1fbcd32e7e8c24fcd020e65c4afe9e12b76bb54f0ae0c0bc68c82faa8c3e70e379b81a20b960caed2a2e9afb773d7a8d5a5bd", 0x42}, {&(0x7f0000001e40)="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", 0xc00}, {&(0x7f00000004c0)="d428b30f05688f368c227200ac53127e6e28d36d3411e8e0c85f436e60c10d61b9bb2a446f17290d5132fe9d9e1cbdfb6bdc4e45fd0c106790b44e49", 0x3c}, {&(0x7f0000000540)="e081cf6b59f70286a8867c06f6c014413d76b8f33a2d75cfe0423c73c96989becf681c431ce594a33a65b4bf78c67b5a4699d11b4be401e27ebe126fbf0e826db6f1be24869a2479e49db151fd516c74e0755ffe746cfbf690859af1c439e4be24f379997d7c562e7e4bce54b831ea0333fb486339a477ffc8bd767e9bbee6a82e1b4c580d9650581fde9e25144fc06688b3d9daab44f4c73752a802a663bdf58e77635844e7a181530903f6f4a04f7c275e89ec1661f21cb502065fab5eae02f61c3e414fd3942f36a1af0a2b789215f068832413ef98a5683c3140468683f31bc4d77bc2ac", 0xe6}], 0x7, 0x6) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') [ 3342.722499] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3342.728757] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3342.735083] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3342.741332] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3342.747637] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3342.841128] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@local, @dev, @local, 0x0, 0x0, 0x10001, 0x400, 0x55c, 0x280}) [ 3343.151395] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3343.253931] EXT4-fs (loop0): bad geometry: block count 167773240 exceeds size of device (55296 blocks) [ 3343.257286] loop5: partition table partially beyond EOD, truncated [ 3343.271036] loop5: p1 size 2 extends beyond EOD, truncated [ 3343.281391] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3343.289437] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3343.296227] loop5: p6 start 1854537728 is beyond EOD, truncated 04:23:21 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3343.322246] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3343.328372] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3343.334972] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3343.341067] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3343.347797] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3343.355038] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3343.368148] loop5: p13 start 1854537728 is beyond EOD, truncated 04:23:21 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002219000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3343.399969] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3343.431856] loop5: p15 start 1854537728 is beyond EOD, truncated 04:23:21 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3343.460561] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3343.481017] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3343.545186] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3343.570104] loop5: p19 start 1854537728 is beyond EOD, truncated 04:23:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x177}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3343.601159] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3343.609863] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3343.621421] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3343.653626] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3343.677246] EXT4-fs (loop0): bad geometry: block count 570426424 exceeds size of device (55296 blocks) 04:23:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffff7f) [ 3343.720957] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3343.761182] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3343.771865] input: syz1 as /devices/virtual/input/input323 [ 3343.878461] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3344.012232] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3344.068744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3344.078762] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3344.089405] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3344.104664] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3344.110874] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3344.134241] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3344.142707] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3344.149438] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3344.156674] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3344.164445] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3344.171250] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3344.179505] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3344.190993] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3344.198859] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3344.219440] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3344.241959] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3344.248428] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3344.256345] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3344.263110] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3344.269628] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3344.276029] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3344.282521] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3344.290662] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3344.297170] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3344.305267] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3344.311715] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3344.317955] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3344.324323] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3344.330595] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3344.336924] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3344.343223] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3344.350140] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3344.356604] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3344.362898] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3344.369258] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3344.376017] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3344.382549] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3344.388860] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3344.395182] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3344.401455] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3344.407834] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3344.414126] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3344.420360] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3344.426617] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3344.432913] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3344.439125] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3344.445394] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3344.451739] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3344.457960] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3344.464236] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3344.470483] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3344.476816] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3344.483079] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3344.489313] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3344.495635] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3344.502081] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3344.508809] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3344.515219] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3344.521391] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3344.527660] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3344.535252] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3344.546616] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3344.554309] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3344.564243] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3344.570454] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3344.584335] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3344.590681] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3344.597111] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3344.605614] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3344.612068] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3344.618247] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3344.624732] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3344.630983] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3344.637243] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3344.643578] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3344.649998] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3344.656873] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3344.663210] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3344.669559] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3344.675902] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3344.682494] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3344.688907] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3344.695279] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3344.701760] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3344.708106] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3344.714908] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3344.721668] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3344.727925] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3344.734254] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3344.740520] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3344.746828] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3344.753163] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3344.759521] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3344.765864] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3344.772228] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3344.778507] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3344.784828] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3344.791071] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3344.797395] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3344.803691] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3344.810026] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3344.816467] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3344.822956] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3344.829736] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3344.836082] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3344.842431] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3344.848697] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3344.855218] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3344.861722] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3344.867985] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3344.874331] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3344.880673] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3344.887166] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3344.893549] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3344.899974] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3344.906310] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3344.913174] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3344.919512] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3344.925933] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3344.932283] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3344.938526] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3344.944853] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3344.951241] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3344.957683] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3344.964034] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3344.970278] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3344.976782] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3344.983111] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3344.989487] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3344.995874] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3345.002203] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3345.008583] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3345.015086] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3345.021407] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3345.027947] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3345.034315] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3345.040660] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3345.046968] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3345.053392] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3345.059741] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3345.066243] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3345.072624] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3345.079141] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3345.085476] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3345.091821] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3345.098062] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3345.104398] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3345.110651] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3345.117012] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3345.123343] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3345.129780] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3345.136242] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3345.142740] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3345.149197] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3345.155557] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3345.161877] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3345.168112] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3345.174653] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3345.180907] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3345.187430] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3345.194034] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3345.200305] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3345.206638] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3345.213076] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3345.219348] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3345.225651] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3345.232000] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3345.238328] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3345.244653] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3345.251716] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3345.257994] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3345.264335] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3345.270625] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3345.277180] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3345.283641] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3345.289914] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3345.296275] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3345.302677] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3345.308923] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3345.315246] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3345.321551] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3345.327798] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3345.334127] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3345.340369] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3345.346697] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3345.353026] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3345.359400] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3345.365705] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3345.372039] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3345.378290] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3345.384604] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3345.390856] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3345.397324] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3345.403667] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3345.409940] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3345.416460] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3345.422892] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3345.429162] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3345.436060] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3345.443552] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3345.449790] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3345.456202] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3345.462555] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3345.468908] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3345.475270] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3345.481595] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3345.487829] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3345.494167] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3345.500508] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3345.506840] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3345.513272] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3345.519632] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3345.526067] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3345.532419] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3345.539011] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3345.545336] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3345.551657] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3345.557978] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3345.564279] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3345.570550] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3345.578016] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3345.585771] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3345.592343] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3345.598767] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3345.605071] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3345.611309] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3345.617609] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3345.623912] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3345.630348] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:23 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000002000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:23 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:23 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002319000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1}, 0x4d00000000000000) bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:23:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffff9e) 04:23:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x177}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3345.726181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3346.085253] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3346.180275] loop5: partition table partially beyond EOD, truncated [ 3346.188366] loop5: p1 size 2 extends beyond EOD, truncated [ 3346.213985] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3346.221646] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3346.226996] EXT4-fs (loop0): bad geometry: block count 587203640 exceeds size of device (55296 blocks) 04:23:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffffc3) 04:23:24 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3346.227913] loop5: p6 start 1854537728 is beyond EOD, [ 3346.279009] truncated [ 3346.282324] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3346.313267] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3346.334236] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3346.353253] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3346.360474] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3346.367459] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3346.368697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3346.383031] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3346.389505] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3346.413790] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3346.447946] loop5: p16 start 1854537728 is beyond EOD, truncated 04:23:24 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002c19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3346.466924] input: syz1 as /devices/virtual/input/input324 [ 3346.494317] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3346.531339] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3346.563149] loop5: p19 start 1854537728 is beyond EOD, truncated 04:23:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1b5}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3346.584973] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3346.607331] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3346.617551] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3346.630837] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3346.639348] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3346.652996] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3346.663512] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3346.670190] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3346.678693] loop5: p28 start 1854537728 is beyond EOD, truncated 04:23:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1}, 0x100000000000000) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 3346.706446] EXT4-fs (loop0): bad geometry: block count 738198584 exceeds size of device (55296 blocks) [ 3346.716257] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3346.733420] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3346.749467] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3346.756391] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3346.821776] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3346.874811] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3346.930947] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3346.964996] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3347.000940] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3347.030544] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3347.107801] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3347.136383] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3347.160212] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3347.185784] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3347.196048] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3347.202931] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3347.209099] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3347.221576] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3347.230016] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3347.237778] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3347.244063] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3347.250350] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3347.256905] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3347.263438] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3347.269805] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3347.276396] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3347.284322] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3347.290822] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3347.297048] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3347.303315] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3347.309822] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3347.316045] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3347.322417] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3347.328572] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3347.334777] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3347.341025] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3347.347282] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3347.354103] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3347.360246] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3347.367046] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3347.373260] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3347.379433] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3347.385871] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3347.392550] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3347.398712] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3347.404931] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3347.411098] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3347.417339] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3347.423546] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3347.429700] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3347.435908] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3347.442156] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3347.448311] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3347.454502] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3347.460676] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3347.466973] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3347.473380] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3347.479943] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3347.486148] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3347.493339] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3347.499505] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3347.505741] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3347.512252] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3347.518525] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3347.524899] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3347.531072] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3347.537478] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3347.543849] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3347.550022] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3347.557043] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3347.564966] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3347.587950] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3347.596963] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3347.606283] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3347.612813] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3347.619319] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3347.626058] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3347.632433] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3347.638788] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3347.645086] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3347.651336] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3347.657703] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3347.664017] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3347.670258] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3347.676892] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3347.683488] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3347.689748] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3347.696224] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3347.702540] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3347.709030] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3347.715975] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3347.722315] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3347.728569] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3347.734953] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3347.741378] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3347.747723] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3347.754092] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3347.760358] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3347.766680] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3347.773208] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3347.779468] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3347.785978] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3347.792330] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3347.798563] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3347.804873] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3347.811135] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3347.817484] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3347.823793] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3347.830043] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3347.836550] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3347.842871] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3347.849245] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3347.855598] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3347.861959] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3347.868387] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3347.874917] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3347.881177] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3347.887478] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3347.895519] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3347.901885] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3347.908229] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3347.914569] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3347.920987] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3347.927474] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3347.933989] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3347.940484] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3347.947245] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3347.953628] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3347.959938] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3347.966242] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3347.972568] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3347.978928] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3347.985248] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3347.991978] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3347.998252] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3348.004670] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3348.010989] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3348.017439] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3348.024644] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3348.030890] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3348.037276] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3348.043603] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3348.049936] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3348.056398] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3348.062715] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3348.068953] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3348.075319] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3348.084048] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3348.090383] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3348.096820] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3348.103242] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3348.109472] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3348.115798] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3348.122234] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3348.128931] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3348.135463] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3348.141865] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3348.148121] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3348.154475] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3348.161085] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3348.167665] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3348.175402] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3348.182148] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3348.188435] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3348.194767] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3348.201141] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3348.207504] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3348.214325] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3348.220580] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3348.226916] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3348.233298] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3348.239640] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3348.246050] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3348.252454] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3348.258689] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3348.265767] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3348.272454] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3348.278866] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3348.285206] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3348.291664] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3348.297913] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3348.304255] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3348.310517] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3348.316845] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3348.323334] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3348.329624] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3348.335961] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3348.342403] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3348.348783] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3348.355142] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3348.361728] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3348.368023] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3348.374399] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3348.380654] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3348.387060] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3348.393403] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3348.399650] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3348.405991] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3348.412344] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3348.418598] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3348.424923] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3348.431175] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3348.437503] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3348.443829] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3348.450088] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3348.456424] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3348.462748] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3348.468995] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3348.475317] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3348.481733] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3348.487977] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3348.494309] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3348.500579] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3348.506914] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3348.513300] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3348.519552] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3348.525957] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3348.532899] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3348.539206] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3348.545529] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3348.551920] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3348.558144] loop5: p250 start 1854537728 is beyond EOD, truncated 04:23:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffffe4) 04:23:26 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:26 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000003f00000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:26 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002d19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1}, 0x4d000000) bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:23:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b4"], 0x1b5}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3348.564435] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3348.570678] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3348.577112] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3348.583420] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3348.589740] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3348.676792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xfffffff0) [ 3349.028711] input: syz1 as /devices/virtual/input/input325 [ 3349.046460] EXT4-fs (loop0): bad geometry: block count 754975800 exceeds size of device (55296 blocks) 04:23:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1}, 0xc000000) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 3349.096323] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p 04:23:27 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804004819000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3349.228225] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3349.230891] loop5: partition table partially beyond EOD, truncated [ 3349.244869] loop5: p1 size 2 extends beyond EOD, truncated [ 3349.280379] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3349.299204] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3349.314142] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3349.320501] loop5: p7 start 1854537728 is beyond EOD, truncated 04:23:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xfffffffc) [ 3349.373767] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3349.390087] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3349.398880] loop5: p10 start 1854537728 is beyond EOD, truncated 04:23:27 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3349.424351] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3349.453319] loop5: p12 start 1854537728 is beyond EOD, truncated 04:23:27 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3349.487230] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3349.510245] EXT4-fs (loop0): bad geometry: block count 1207960632 exceeds size of device (55296 blocks) [ 3349.530053] loop5: p14 start 1854537728 is beyond EOD, truncated 04:23:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1b5}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3349.561658] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3349.566167] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3349.581762] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3349.595558] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3349.630376] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3349.672001] loop5: p19 start 1854537728 is beyond EOD, truncated 04:23:27 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804004c19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3349.721779] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3349.750018] input: syz1 as /devices/virtual/input/input326 [ 3349.756761] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3349.796629] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3349.841740] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3349.927332] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3350.038959] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3350.107317] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3350.133804] EXT4-fs (loop0): bad geometry: block count 1275069496 exceeds size of device (55296 blocks) [ 3350.145001] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3350.155668] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3350.162628] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3350.169008] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3350.182492] input: syz1 as /devices/virtual/input/input327 [ 3350.198072] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3350.216616] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3350.232270] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3350.249490] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3350.256554] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3350.265245] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3350.273251] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3350.280925] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3350.288039] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3350.304433] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3350.312362] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3350.319053] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3350.326292] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3350.341234] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3350.352227] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3350.358804] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3350.365834] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3350.372792] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3350.379421] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3350.395697] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3350.413023] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3350.437417] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3350.444429] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3350.450927] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3350.457795] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3350.467227] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3350.474872] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3350.481363] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3350.487760] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3350.494373] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3350.500917] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3350.507221] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3350.513624] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3350.520199] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3350.527038] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3350.534528] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3350.540939] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3350.548460] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3350.555148] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3350.561343] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3350.569325] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3350.577221] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3350.584689] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3350.590885] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3350.599599] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3350.608367] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3350.622516] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3350.628846] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3350.635560] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3350.642495] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3350.648808] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3350.655801] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3350.662050] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3350.668326] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3350.674558] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3350.680766] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3350.687018] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3350.693525] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3350.699829] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3350.706052] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3350.712512] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3350.718963] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3350.725410] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3350.732284] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3350.738670] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3350.744873] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3350.751128] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3350.757332] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3350.763577] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3350.769751] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3350.776202] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3350.783417] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3350.789749] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3350.796110] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3350.802411] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3350.808648] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3350.814923] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3350.821340] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3350.827635] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3350.833937] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3350.840275] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3350.846568] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3350.853249] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3350.859503] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3350.865797] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3350.872111] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3350.878373] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3350.884653] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3350.891820] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3350.898053] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3350.904317] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3350.910563] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3350.917452] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3350.923765] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3350.930019] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3350.936315] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3350.942893] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3350.949242] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3350.955626] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3350.961947] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3350.968185] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3350.974454] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3350.980702] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3350.986981] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3350.993276] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3350.999535] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3351.005814] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3351.012107] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3351.018351] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3351.024634] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3351.030933] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3351.037229] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3351.044233] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3351.050638] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3351.058561] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3351.064987] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3351.071224] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3351.077496] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3351.083873] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3351.090208] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3351.096720] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3351.103041] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3351.109286] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3351.115686] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3351.121994] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3351.128400] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3351.134728] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3351.140975] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3351.147432] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3351.153827] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3351.160082] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3351.166477] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3351.173579] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3351.180009] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3351.186307] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3351.192605] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3351.198976] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3351.205258] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3351.211640] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3351.217964] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3351.224266] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3351.230743] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3351.237691] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3351.243979] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3351.250340] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3351.256619] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3351.262915] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3351.269167] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3351.275499] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3351.281872] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3351.288106] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3351.295863] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3351.303130] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3351.309388] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3351.315662] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3351.321944] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3351.328363] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3351.334670] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3351.341195] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3351.347496] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3351.353908] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3351.360167] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3351.366458] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3351.372857] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3351.379184] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3351.385476] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3351.391784] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3351.398037] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3351.404389] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3351.410771] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3351.417255] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3351.423558] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3351.429805] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3351.436694] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3351.443013] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3351.449271] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3351.455577] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3351.461880] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3351.468135] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3351.474429] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3351.480674] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3351.487227] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3351.493545] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3351.499782] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3351.506062] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3351.512358] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3351.518595] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3351.524984] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3351.531231] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3351.537515] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3351.543811] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3351.550064] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3351.556354] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3351.563460] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3351.569709] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3351.576087] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3351.582395] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3351.588646] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3351.594938] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3351.601198] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3351.607493] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3351.613810] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3351.620057] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3351.626334] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3351.632634] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3351.638879] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3351.645294] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3351.652130] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3351.658378] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3351.664749] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3351.670998] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3351.677396] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3351.683698] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3351.690035] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3351.696902] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3351.703202] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3351.709448] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3351.715748] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3351.722172] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3351.728416] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3351.734759] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3351.741016] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3351.747425] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3351.753887] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3351.760126] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:30 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:30 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000004000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:30 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804005619000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1}, 0x900) bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:23:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x400000400) 04:23:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3351.857634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3352.211905] input: syz1 as /devices/virtual/input/input328 [ 3352.233335] IPv6: ADDRCONF(NETDEV_UP): veth1749: link is not ready [ 3352.246242] EXT4-fs (loop0): bad geometry: block count 1442841656 exceeds size of device (55296 blocks) 04:23:30 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3352.280667] team0: Port device veth1749 added 04:23:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x400000800) 04:23:30 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3352.426055] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3352.466960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:30 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3352.581601] loop5: partition table partially beyond EOD, truncated [ 3352.590873] loop5: p1 size 2 extends beyond EOD, truncated [ 3352.626153] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3352.644883] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3352.667418] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3352.684052] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3352.705474] loop5: p8 start 1854537728 is beyond EOD, truncated 04:23:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3352.739968] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3352.758359] IPv6: ADDRCONF(NETDEV_UP): veth1751: link is not ready [ 3352.781194] EXT4-fs (loop0): bad geometry: block count 1610613816 exceeds size of device (55296 blocks) [ 3352.797603] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3352.838476] input: syz1 as /devices/virtual/input/input329 [ 3352.865495] input: syz1 as /devices/virtual/input/input330 [ 3352.877592] team0: Port device veth1751 added 04:23:31 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006819000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x1000000000000) [ 3352.966077] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3352.973653] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3352.980088] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3352.995951] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3353.037217] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3353.080022] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3353.277306] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3353.311945] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3353.318636] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3353.331774] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3353.332771] loop5: p20 start 1854537728 is beyond EOD, [ 3353.355713] truncated [ 3353.358331] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3353.380301] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3353.409049] EXT4-fs (loop0): bad geometry: block count 1744831544 exceeds size of device (55296 blocks) [ 3353.414097] loop5: p23 start 1854537728 is beyond EOD, [ 3353.451682] truncated [ 3353.454349] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3353.463789] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3353.472435] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3353.479651] loop5: p27 start 1854537728 is beyond EOD, [ 3353.485226] truncated [ 3353.485235] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3353.485246] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3353.485256] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3353.485268] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3353.485280] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3353.485291] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3353.485302] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3353.485313] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3353.485324] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3353.485334] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3353.485345] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3353.485354] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3353.485365] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3353.485376] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3353.485387] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3353.485398] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3353.485409] loop5: p44 start 1854537728 is beyond EOD, [ 3353.500601] truncated [ 3353.519232] loop5: p45 start 1854537728 is beyond EOD, [ 3353.532154] truncated [ 3353.544694] loop5: p46 start 1854537728 is beyond EOD, [ 3353.578022] IPv6: ADDRCONF(NETDEV_UP): veth1753: link is not ready [ 3353.609085] truncated [ 3353.618146] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3353.624494] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3353.630740] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3353.637445] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3353.644685] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3353.650950] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3353.657476] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3353.663839] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3353.666596] team0: Port device veth1753 added [ 3353.673952] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3353.680867] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3353.687190] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3353.693685] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3353.699946] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3353.706868] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3353.713389] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3353.719714] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3353.726047] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3353.738664] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3353.745022] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3353.752591] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3353.758850] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3353.765108] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3353.765121] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3353.765133] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3353.784264] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3353.799921] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3353.806301] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3353.813334] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3353.819606] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3353.826201] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3353.832453] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3353.838648] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3353.844921] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3353.851089] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3353.858965] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3353.865434] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3353.871667] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3353.878861] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3353.885156] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3353.891677] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3353.897936] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3353.904226] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3353.910512] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3353.916742] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3353.923152] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3353.929463] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3353.935739] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3353.942284] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3353.948539] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3353.954791] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3353.960943] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3353.967169] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3353.974628] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3353.980789] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3353.988160] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3353.994487] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3354.000848] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3354.007362] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3354.013695] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3354.020378] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3354.026718] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3354.033017] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3354.039271] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3354.045584] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3354.052072] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3354.058366] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3354.064712] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3354.071067] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3354.077470] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3354.083826] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3354.090072] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3354.096397] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3354.102698] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3354.108950] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3354.116089] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3354.122391] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3354.128643] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3354.134986] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3354.141332] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3354.147903] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3354.154381] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3354.161792] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3354.168109] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3354.174713] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3354.181210] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3354.187537] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3354.193874] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3354.200121] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3354.206419] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3354.212749] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3354.219218] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3354.225531] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3354.231861] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3354.238129] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3354.244459] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3354.250706] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3354.257295] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3354.263589] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3354.270012] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3354.276348] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3354.282653] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3354.289005] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3354.295351] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3354.301651] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3354.307965] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3354.314290] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3354.320524] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3354.326831] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3354.333138] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3354.339468] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3354.345759] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3354.352086] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3354.358319] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3354.364603] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3354.370864] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3354.377187] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3354.383490] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3354.390699] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3354.397050] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3354.403354] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3354.409595] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3354.415895] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3354.422808] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3354.429147] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3354.435479] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3354.441912] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3354.448292] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3354.455267] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3354.461626] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3354.468117] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3354.474661] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3354.481075] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3354.487376] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3354.493716] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3354.499978] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3354.506310] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3354.512656] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3354.520852] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3354.527169] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3354.533476] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3354.539717] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3354.546153] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3354.552572] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3354.558806] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3354.565188] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3354.571594] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3354.577918] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3354.584264] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3354.590514] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3354.596963] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3354.603440] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3354.609704] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3354.616154] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3354.622477] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3354.628843] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3354.637937] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3354.644366] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3354.650786] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3354.657122] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3354.663507] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3354.669739] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3354.676144] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3354.682466] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3354.688716] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3354.695057] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3354.701957] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3354.708272] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3354.714608] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3354.720850] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3354.727146] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3354.733473] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3354.739802] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3354.746115] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3354.752686] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3354.758928] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3354.765209] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3354.771444] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3354.778196] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3354.784535] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3354.791067] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3354.797396] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3354.804390] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3354.810651] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3354.816978] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3354.823399] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3354.829654] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3354.835977] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3354.842311] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3354.848575] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3354.854917] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3354.861170] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3354.867462] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3354.873798] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3354.880586] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3354.886873] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3354.893290] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3354.899760] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3354.906163] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3354.912483] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3354.918811] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3354.925127] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3354.931371] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3354.937733] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3354.944098] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3354.950348] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3354.956693] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3354.963021] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3354.969254] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3354.975688] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:33 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000fffffffb00000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:33 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:33 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006c19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x4000000000000) 04:23:33 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3355.111334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3355.459453] input: syz1 as /devices/virtual/input/input331 [ 3355.493689] EXT4-fs (loop0): bad geometry: block count 1811940408 exceeds size of device (55296 blocks) [ 3355.497915] Dev loop5: unable to read RDB block 1 [ 3355.509013] IPv6: ADDRCONF(NETDEV_UP): veth1755: link is not ready [ 3355.522976] team0: Port device veth1755 added [ 3355.528652] loop5: unable to read partition table [ 3355.539603] input: syz1 as /devices/virtual/input/input332 [ 3355.549278] loop5: partition table beyond EOD, truncated [ 3355.577272] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:23:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x4000004000000) 04:23:33 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804007419000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:33 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3355.770005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000fbffffff00000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16ca173c0761ad74364f562f3106a15d17d34ff27abc49b8a7d9aa3d2d2bd5c406c9fe21e59ffad1a85c3d1283f983efaab087a92ce4bc66c934605b658f56857301278b09f5e22ba0034a3944ae27bd20cf9cd4a7d1973d4818716d0bf71d922d74ef68ede2604a98f6db652206e0a34ceed21cb950eebbee9686fc368e2b42f9417b22ab84c1a341630f962560900e02f20cc0ed618e657fe4ede15f9a105620dd2206dbd74ba7f061f2d058a127f5ecb72ad12264d81816d82169d668adf80bbdd279c684e11980f72ba126d0326dbfe6736d2b737069e0c5efb7e76276f10fa915907d91282084fa9a12c5636fd265ef705f49adc9924ffcc68742b17c9212fe8abcc49e4db91ee543a7fd438e59d030d6fa1c31ebe151f9c44af0069df608f0395159c41339aaf31b4c3e67526036c7f4d96fdd5afa5c4c85f2a6648098dccd6a49a8250e26bce3ca0e78976c961432783947e3a8ff5430af9cfebf3d2ee72153b7bd4d7f2cce79da6defba02cc5a73f7fa137c01a2cea52a961d9504d959aec7e2627fc33d07ef45bb8afbded876bee54c7f2feacf548bbab68a782e7bbcb6140d6c6b3fbe1108a6f4dd750c0424a9e1e0b8f239c4739f28463a23fe011cb8c98e25126c5693f19f16ab8a4b6351ff2955a397c3618ae47c78b2d123c334082f9aae0d7f9e7b761d58ef7e1f6dd20a23c7bcc3e84dbc75551573c425e5d56ca84e263b22c2ed5ff1255e500c1810574ff1af28114221fa6e72439d5fc117700bf5a7e01e2ffc0cfeabfddb8ae217a7033c9c8dce5a685ca7a0f4ceeb153ab2ae77652e1d73e9510f868b70270e386664ab4c45ddf353e61aef1ac0c673502b7e7faae557df3eaa5fd0a3a00c54f23723ce6406f616f678b6f789c57e09864895dd8a1e5da9ff0bc7be9f9174af99e157e4c71ed69c71783abb3ad18141d99e49ef32614b8ac29eb50f64b2355f4b599acbdf039877d68275a2ebeb0729791412dfd3194cc2cb4f045a4d2ac74afffec582df03ce4afd2aedc594c6cd34a4cd21d4ea653b04d49a8aa1e942df36b530c90d0c2c62ef8369677ce2ffd4304b0410ff9ef86be8afbf55adc6abca02acf03dcab2fe5339ab0eb9d79dfc4817c5e2c10676904192395d9b8552760b0fa79add2769284a0ef5ebc4d61e64dc9a8b2d4770cdb4be4345026f6d04549140f4bb01e8252eb06d70afd84247f8023a0cc31329499a0efcd8a79e0832992a96b437258ab186c6a9c8f2e55fe7319605453b888d928730a11a11b4f56eec25b4c18b2205aad508a9f6850e6e23103a517cf43af019d54593803b76a3529777a58441d781d2eb509fcb723ba3be91d12c809f0148095e2066e1b0f0656ceeb751ad610e265bd4bc1b67f5e521ef420420e9b7e137f29240d63a42d678c1739f33f39a09a0f4c5249f808f41152a07ce9bfcc94e35683bea83f82a5e34e1fef3f8ea2cf4c9f1c8ccef87d7f58fc1b4ace6cb667e62ed1f54f72b3a156551d96f9a16ff4864ae3a01dc86b5c65e6676493f07d7257b34d8c6c5851334a4542dd2bea4aef4f444b5f26ac89a27e3313a4a66bdad09382357f1adbd61d526a2541022814cc4b2515aec30f74729d1a5826a3206c02ccd6adfb6c2b6c7aee33b7213bdbc5878151b50d1a8fdc1b2b9b44a01606770028723c848e1faf60b89de5a2e72b7d19f7745f7c89989ab2a8174291ad7d0f2b172672aba9f4a1b42df53baf6d353b45d755eff7526efa8a87a2aeaf84d9a434e8844a98eab172fa474b353f19e1231aca846d93eb24e650e015a42c578d23d794c02304ff72e358ea5c75f6709e587951d3900b3b1066ddd4a2fe9186d0cfcfcc7e33e9b882e8c2242ba990face580f94d66bb6a5212190fba3c1f1e046738c422d9e94ed6671157af9145bcfe7fd0d431a7a7c84a3eec802794286e2dc2b59e93fcb09ea22a1e47ee8f0b3cf756fb67bc3676819cbc67396322ea6be61552533b52a2fd258e82dc7c57a09211cce3e785f5b4deacae7b9dcd48080c9edb03d935c9c9a426bb6d3ec71e559af61b796827b5e425c991d3485381e0842b35cb0ad91154f4a13117b35d2a9ebfcf0ef68d73093dd483923f7b3a00e9c04c0eec31effc9f908f38949e1766409fc9c8cc48f95d4d537520159dd794edb56e824d31c67d9c7cbefdb51860a8d1f859baa9bf5c2752d00b6969e94d47a88be798f6df9e6b5977a56206c33a38e74ac5de0b23489c9f5a037e13ae0194beb9f954c6b8ebefa78194a4e891c12ddb43019e60d9b8e7fe78df65a83671b76fd1a9c7be064c6d822bb0749d2162168821484ab78f906cb990167a2f9e19a33be2086dd55e54cb8b6dbcd6d1cc9b4c828472d55db6f175547f73db54d142f290ef99e8e26f2c6ebc7a53bfe31fe1eb2ac6a13dd0081debcc346cc0d3407ff158bc48a314a18b7fa781e32b66f9eaa792031567fa8d5c33fd85ebf85af958ef84c0c69f2bc3f842bff08b4b3112a6ac24a78c9476f15d40de489e50fb5e426167a10739db436cb1a63f5e7b3baf7c21c3506d3021c487ce4625f66a18468c89c3a9c94c7c1c2676e1f21a26bc393cf83e7bdf9bf66c2e9dd080574e1a80fe152124e5191c9367f22b4a712322986165964ccc2b016f0fc52e69d009a2f9fc13f344153f17bcebf937f59714f44dfdc11e69c7216cdb4f4d2143222e41d7415b3ef52e45477f62def841cea29c6258a2a2d8c7895712c51025ed7fd5d68bf8aa5a96fbbba98090dac42ad69522f47288af9f6f7acd2406c42706a940300ab41a59488966dc63f4ce8a6e6e7b18c1cf7b3e5013441ad0d7f201343e4a64da2cd513782877cb35d00f2113147ec4d7410971968daa76b1b9ad115c9ef6e8fe6abeb8b372806dbccb26f504f3fb8fb26c97fc6dcc7091f2f940e76fc121b39f215cb5ee96383b0ad5dcb2f7671e1d75612b3992a8bfd9ef25545b75845991f64a26c87a8abbdde668be3e6fb8ebdc31e73eb4eafda15215e0b545907a86c0fa3d5f1af4cf096cd7ec9c31dd57851203a2ce0c4cfecefe63e43ec9335f00fe3195965d0602bdf0fb36a8b4c6a538f18c002895f4d33968901c0228fbbfd250ae07075c9c3d8e3233027ca1ba82586797b9c3fd5c256c9562789f4393908ecba4bbd26a49672d71098198efe77b3661a2114c3b919330e67cd0ae6e90d88e1922750b6d36bde8926f9c635fbe0b1016f016af69965d762ebcab348ea4fe695007c9e1f91b8f7019a3206627751c8216dae9857569f152888ba8876b51d5d73bffb3c5544500e1121d72a0d2ca9b382bae36c36fdb5680b5973ec3529eefc2077654f5ec0021d473c221d544d6c0b56c48926ece451f01bd3b2746f6ccb0a44a2e934eefbc24c8f4ced796e4941bb6363d2bf0af8834e0dde49632c228477fcbae8d6667c5996aeb14eac620e35a1b3a3b29c4122c91f92a2f9917291c04cfb9ef91215d8b0dffccd082474c9a2ee26ab2139d4428c74efd41f820d671b4255253abad18028b4d19715ba084eaa884dcc975da4c316ac3f8c056a2dc1215bd1db2fd504169e6dab0494bc8e02d4374f061c517d424b0050b678fb240df83d19c0f9a71465541f706cf976f6f653a216dc290698158864c941067577cc0b54c8ccae532de0ec0ddc67d4a22f5c9dcee990b7ae21567991bb1fa1f83d51114f00248735a3b884311b695a65fe6671db499588fd69c79baa8962d6f4331e3dda9b3d7075b2240d58cbe88521", 0xe71}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:23:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e4}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3355.987324] input: syz1 as /devices/virtual/input/input333 [ 3356.026727] IPv6: ADDRCONF(NETDEV_UP): veth1757: link is not ready [ 3356.100012] team0: Port device veth1757 added [ 3356.137644] EXT4-fs (loop0): bad geometry: block count 1946158136 exceeds size of device (55296 blocks) [ 3356.146806] Dev loop5: unable to read RDB block 1 04:23:34 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3356.190599] loop5: unable to read partition table 04:23:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x8000004000000) [ 3356.209272] loop5: partition table beyond EOD, truncated [ 3356.234636] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 3356.454264] input: syz1 as /devices/virtual/input/input334 04:23:34 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804007a19000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1, 0x0, 0x0, 0x500e0000}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 3356.621987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:34 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000100000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 3356.858247] EXT4-fs (loop0): bad geometry: block count 2046821432 exceeds size of device (55296 blocks) [ 3356.876826] IPv6: ADDRCONF(NETDEV_UP): veth1759: link is not ready 04:23:35 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3356.914862] team0: Port device veth1759 added [ 3356.946496] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p 04:23:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16ca173c0761ad74364f562f3106a15d17d34ff27abc49b8a7d9aa3d2d2bd5c406c9fe21e59ffad1a85c3d1283f983efaab087a92ce4bc66c934605b658f56857301278b09f5e22ba0034a3944ae27bd20cf9cd4a7d1973d4818716d0bf71d922d74ef68ede2604a98f6db652206e0a34ceed21cb950eebbee9686fc368e2b42f9417b22ab84c1a341630f962560900e02f20cc0ed618e657fe4ede15f9a105620dd2206dbd74ba7f061f2d058a127f5ecb72ad12264d81816d82169d668adf80bbdd279c684e11980f72ba126d0326dbfe6736d2b737069e0c5efb7e76276f10fa915907d91282084fa9a12c5636fd265ef705f49adc9924ffcc68742b17c9212fe8abcc49e4db91ee543a7fd438e59d030d6fa1c31ebe151f9c44af0069df608f0395159c41339aaf31b4c3e67526036c7f4d96fdd5afa5c4c85f2a6648098dccd6a49a8250e26bce3ca0e78976c961432783947e3a8ff5430af9cfebf3d2ee72153b7bd4d7f2cce79da6defba02cc5a73f7fa137c01a2cea52a961d9504d959aec7e2627fc33d07ef45bb8afbded876bee54c7f2feacf548bbab68a782e7bbcb6140d6c6b3fbe1108a6f4dd750c0424a9e1e0b8f239c4739f28463a23fe011cb8c98e25126c5693f19f16ab8a4b6351ff2955a397c3618ae47c78b2d123c334082f9aae0d7f9e7b761d58ef7e1f6dd20a23c7bcc3e84dbc75551573c425e5d56ca84e263b22c2ed5ff1255e500c1810574ff1af28114221fa6e72439d5fc117700bf5a7e01e2ffc0cfeabfddb8ae217a7033c9c8dce5a685ca7a0f4ceeb153ab2ae77652e1d73e9510f868b70270e386664ab4c45ddf353e61aef1ac0c673502b7e7faae557df3eaa5fd0a3a00c54f23723ce6406f616f678b6f789c57e09864895dd8a1e5da9ff0bc7be9f9174af99e157e4c71ed69c71783abb3ad18141d99e49ef32614b8ac29eb50f64b2355f4b599acbdf039877d68275a2ebeb0729791412dfd3194cc2cb4f045a4d2ac74afffec582df03ce4afd2aedc594c6cd34a4cd21d4ea653b04d49a8aa1e942df36b530c90d0c2c62ef8369677ce2ffd4304b0410ff9ef86be8afbf55adc6abca02acf03dcab2fe5339ab0eb9d79dfc4817c5e2c10676904192395d9b8552760b0fa79add2769284a0ef5ebc4d61e64dc9a8b2d4770cdb4be4345026f6d04549140f4bb01e8252eb06d70afd84247f8023a0cc31329499a0efcd8a79e0832992a96b437258ab186c6a9c8f2e55fe7319605453b888d928730a11a11b4f56eec25b4c18b2205aad508a9f6850e6e23103a517cf43af019d54593803b76a3529777a58441d781d2eb509fcb723ba3be91d12c809f0148095e2066e1b0f0656ceeb751ad610e265bd4bc1b67f5e521ef420420e9b7e137f29240d63a42d678c1739f33f39a09a0f4c5249f808f41152a07ce9bfcc94e35683bea83f82a5e34e1fef3f8ea2cf4c9f1c8ccef87d7f58fc1b4ace6cb667e62ed1f54f72b3a156551d96f9a16ff4864ae3a01dc86b5c65e6676493f07d7257b34d8c6c5851334a4542dd2bea4aef4f444b5f26ac89a27e3313a4a66bdad09382357f1adbd61d526a2541022814cc4b2515aec30f74729d1a5826a3206c02ccd6adfb6c2b6c7aee33b7213bdbc5878151b50d1a8fdc1b2b9b44a01606770028723c848e1faf60b89de5a2e72b7d19f7745f7c89989ab2a8174291ad7d0f2b172672aba9f4a1b42df53baf6d353b45d755eff7526efa8a87a2aeaf84d9a434e8844a98eab172fa474b353f19e1231aca846d93eb24e650e015a42c578d23d794c02304ff72e358ea5c75f6709e587951d3900b3b1066ddd4a2fe9186d0cfcfcc7e33e9b882e8c2242ba990face580f94d66bb6a5212190fba3c1f1e046738c422d9e94ed6671157af9145bcfe7fd0d431a7a7c84a3eec802794286e2dc2b59e93fcb09ea22a1e47ee8f0b3cf756fb67bc3676819cbc67396322ea6be61552533b52a2fd258e82dc7c57a09211cce3e785f5b4deacae7b9dcd48080c9edb03d935c9c9a426bb6d3ec71e559af61b796827b5e425c991d3485381e0842b35cb0ad91154f4a13117b35d2a9ebfcf0ef68d73093dd483923f7b3a00e9c04c0eec31effc9f908f38949e1766409fc9c8cc48f95d4d537520159dd794edb56e824d31c67d9c7cbefdb51860a8d1f859baa9bf5c2752d00b6969e94d47a88be798f6df9e6b5977a56206c33a38e74ac5de0b23489c9f5a037e13ae0194beb9f954c6b8ebefa78194a4e891c12ddb43019e60d9b8e7fe78df65a83671b76fd1a9c7be064c6d822bb0749d2162168821484ab78f906cb990167a2f9e19a33be2086dd55e54cb8b6dbcd6d1cc9b4c828472d55db6f175547f73db54d142f290ef99e8e26f2c6ebc7a53bfe31fe1eb2ac6a13dd0081debcc346cc0d3407ff158bc48a314a18b7fa781e32b66f9eaa792031567fa8d5c33fd85ebf85af958ef84c0c69f2bc3f842bff08b4b3112a6ac24a78c9476f15d40de489e50fb5e426167a10739db436cb1a63f5e7b3baf7c21c3506d3021c487ce4625f66a18468c89c3a9c94c7c1c2676e1f21a26bc393cf83e7bdf9bf66c2e9dd080574e1a80fe152124e5191c9367f22b4a712322986165964ccc2b016f0fc52e69d009a2f9fc13f344153f17bcebf937f59714f44dfdc11e69c7216cdb4f4d2143222e41d7415b3ef52e45477f62def841cea29c6258a2a2d8c7895712c51025ed7fd5d68bf8aa5a96fbbba98090dac42ad69522f47288af9f6f7acd2406c42706a940300ab41a59488966dc63f4ce8a6e6e7b18c1cf7b3e5013441ad0d7f201343e4a64da2cd513782877cb35d00f2113147ec4d7410971968daa76b1b9ad115c9ef6e8fe6abeb8b372806dbccb26f504f3fb8fb26c97fc6dcc7091f2f940e76fc121b39f215cb5ee96383b0ad5dcb2f7671e1d75612b3992a8bfd9ef25545b75845991f64a26c87a8abbdde668be3e6fb8ebdc31e73eb4eafda15215e0b545907a86c0fa3d5f1af4cf096cd7ec9c31dd57851203a2ce0c4cfecefe63e43ec9335f00fe3195965d0602bdf0fb36a8b4c6a538f18c002895f4d33968901c0228fbbfd250ae07075c9c3d8e3233027ca1ba82586797b9c3fd5c256c9562789f4393908ecba4bbd26a49672d71098198efe77b3661a2114c3b919330e67cd0ae6e90d88e1922750b6d36bde8926f9c635fbe0b1016f016af69965d762ebcab348ea4fe695007c9e1f91b8f7019a3206627751c8216dae9857569f152888ba8876b51d5d73bffb3c5544500e1121d72a0d2ca9b382bae36c36fdb5680b5973ec3529eefc2077654f5ec0021d473c221d544d6c0b56c48926ece451f01bd3b2746f6ccb0a44a2e934eefbc24c8f4ced796e4941bb6363d2bf0af8834e0dde49632c228477fcbae8d6667c5996aeb14eac620e35a1b3a3b29c4122c91f92a2f9917291c04cfb9ef91215d8b0dffccd082474c9a2ee26ab2139d4428c74efd41f820d671b4255253abad18028b4d19715ba084eaa884dcc975da4c316ac3f8c056a2dc1215bd1db2fd504169e6dab0494bc8e02d4374f061c517d424b0050b678fb240df83d19c0f9a71465541f706cf976f6f653a216dc290698158864c941067577cc0b54c8ccae532de0ec0ddc67d4a22f5c9dcee990b7ae21567991bb1fa1f83d51114f00248735a3b884311b695a65fe6671db499588fd69c79baa8962d6f4331e3dda9b3d7075b2240d58cbe88521", 0xe71}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 3357.043263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3357.115938] input: syz1 as /devices/virtual/input/input335 [ 3357.134686] loop5: partition table partially beyond EOD, truncated 04:23:35 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400002d000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e4}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3357.157687] loop5: p1 size 2 extends beyond EOD, truncated 04:23:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xf0ffffffffffff) [ 3357.281172] loop5: p4 start 1854537728 is beyond EOD, truncated 04:23:35 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3357.339000] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3357.349017] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3357.374636] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3357.387334] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3357.449733] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3357.458785] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3357.473569] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3357.516836] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3357.522459] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3357.557395] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3357.572686] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3357.610996] loop5: p10 start 1854537728 is beyond EOD, truncated 04:23:35 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3357.664543] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3357.674248] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3357.706048] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3357.743355] input: syz1 as /devices/virtual/input/input336 [ 3357.749879] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3357.772105] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3357.798954] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3357.816258] loop5: p16 start 1854537728 is beyond EOD, truncated 04:23:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x100000000000000) [ 3357.848554] loop5: p17 start 1854537728 is beyond EOD, truncated 04:23:36 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000064000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3357.889033] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3357.911594] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3357.932567] loop5: p20 start 1854537728 is beyond EOD, truncated 04:23:36 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff93) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3357.985749] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3357.995505] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3358.021175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3358.029713] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3358.045315] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3358.053044] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3358.059490] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3358.100817] input: syz1 as /devices/virtual/input/input337 [ 3358.119424] loop5: p27 start 1854537728 is beyond EOD, truncated 04:23:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e4}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3358.189483] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3358.199680] IPv6: ADDRCONF(NETDEV_UP): veth1763: link is not ready [ 3358.249765] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3358.257008] team0: Port device veth1763 added [ 3358.264454] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3358.272129] input: syz1 as /devices/virtual/input/input338 [ 3358.302100] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3358.325348] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3358.355137] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3358.385193] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3358.401900] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3358.403236] loop5: p33 start 1854537728 is beyond EOD, [ 3358.437535] truncated [ 3358.443563] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3358.493257] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3358.515625] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3358.523950] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3358.538436] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3358.578007] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3358.593805] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3358.602209] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3358.608884] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3358.614528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3358.615755] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3358.630421] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3358.640702] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3358.652969] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3358.660255] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3358.670808] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3358.679683] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3358.689061] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3358.698283] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3358.708033] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3358.715219] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3358.723637] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3358.730206] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3358.740024] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3358.746499] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3358.752903] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3358.759198] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3358.765516] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3358.771897] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3358.778772] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3358.789550] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3358.795993] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3358.796010] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3358.808534] loop5: p64 start 1854537728 is beyond EOD, [ 3358.814083] truncated [ 3358.814093] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3358.814105] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3358.814116] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3358.835299] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3358.841822] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3358.848129] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3358.854594] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3358.860980] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3358.867458] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3358.873793] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3358.873806] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3358.873816] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3358.873827] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3358.873838] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3358.908755] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3358.919856] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3358.926271] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3358.932600] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3358.938837] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3358.945219] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3358.951650] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3358.957914] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3358.964226] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3358.970516] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3358.977000] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3358.983364] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3358.989758] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3358.996185] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3359.002516] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3359.008941] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3359.015485] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3359.022194] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3359.028620] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3359.034977] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3359.041409] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3359.047832] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3359.054334] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3359.060691] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3359.067090] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3359.073515] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3359.079799] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3359.086324] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3359.092782] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3359.099199] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3359.110053] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3359.117633] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3359.124177] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3359.130566] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3359.137282] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3359.143778] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3359.150863] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3359.157286] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3359.163759] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3359.170248] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3359.191577] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3359.206035] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3359.212875] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3359.219138] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3359.225810] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3359.232854] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3359.239102] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3359.245497] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3359.252124] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3359.258363] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3359.264679] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3359.270934] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3359.277260] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3359.283579] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3359.289838] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3359.296154] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3359.302548] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3359.308931] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3359.315995] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3359.323682] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3359.330167] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3359.336499] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3359.342806] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3359.349048] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3359.355331] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3359.361630] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3359.367870] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3359.374161] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3359.380417] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3359.386767] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3359.393060] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3359.399306] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3359.405603] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3359.412164] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3359.418455] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3359.424777] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3359.431050] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3359.437342] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3359.444464] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3359.450709] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3359.456990] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3359.463316] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3359.469564] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3359.476312] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3359.482901] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3359.489166] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3359.495449] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3359.501754] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3359.508165] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3359.514446] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3359.520838] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3359.527162] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3359.533537] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3359.539776] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3359.546093] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3359.552412] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3359.558877] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3359.565225] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3359.572763] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3359.579185] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3359.585496] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3359.592098] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3359.598373] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3359.604710] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3359.610980] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3359.617358] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3359.623694] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3359.629974] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3359.636339] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3359.642668] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3359.648916] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3359.655320] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3359.661625] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3359.667868] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3359.674174] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3359.680434] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3359.686737] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3359.693068] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3359.699319] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3359.706291] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3359.712601] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3359.718946] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3359.725311] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3359.731647] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3359.737923] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3359.744235] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3359.750490] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3359.756789] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3359.763106] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3359.769364] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3359.775760] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3359.782690] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3359.789112] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3359.795411] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3359.802679] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3359.809310] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3359.815602] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3359.821916] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3359.828162] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3359.835064] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3359.841401] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3359.847699] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3359.854095] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3359.860346] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3359.866644] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3359.872973] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3359.879229] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3359.885561] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3359.892020] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3359.898273] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3359.904610] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3359.910889] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3359.917251] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3359.923570] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3359.930044] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3359.936349] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3359.942657] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3359.948912] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3359.955200] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3359.961452] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3359.968587] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3359.974917] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3359.981171] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3359.987518] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3359.993798] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3360.000127] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3360.006480] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3360.012776] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3360.019015] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3360.025517] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3360.031829] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3360.038118] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3360.044429] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3360.050773] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3360.057112] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3360.063406] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3360.069660] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:38 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000ffffffffffff0700000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x200000000000000) 04:23:38 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:38 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff93) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:38 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000065000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3360.181023] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3360.562716] input: syz1 as /devices/virtual/input/input339 [ 3360.593893] input: syz1 as /devices/virtual/input/input340 [ 3360.596951] IPv6: ADDRCONF(NETDEV_UP): veth1765: link is not ready [ 3360.610931] Dev loop5: unable to read RDB block 1 [ 3360.618165] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3360.636702] team0: Port device veth1765 added [ 3360.636934] loop5: unable to read partition table [ 3360.659562] loop5: partition table beyond EOD, truncated [ 3360.666379] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3360.695290] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 3360.703666] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:23:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x300000000000000) [ 3360.785596] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3360.835400] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 04:23:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000001000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:39 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff93) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1, 0x0, 0x0, 0x4d}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 3360.880673] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3360.956816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b48a45cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca9944"], 0x1ec}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:39 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000007000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3361.078994] input: syz1 as /devices/virtual/input/input341 [ 3361.148751] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3361.273170] loop5: partition table partially beyond EOD, truncated [ 3361.282903] loop5: p1 size 2 extends beyond EOD, truncated 04:23:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1, 0x0, 0x0, 0x4d}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) [ 3361.320818] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3361.334133] IPv6: ADDRCONF(NETDEV_UP): veth1767: link is not ready [ 3361.344663] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3361.412565] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3361.508500] loop5: p7 start 1854537728 is beyond EOD, truncated 04:23:39 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() socket$inet6_tcp(0xa, 0x1, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r8) dup2(r8, r7) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRESHEX=r8, @ANYRESHEX=0x0], 0x247) munlockall() [ 3361.561703] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3361.620581] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3361.623961] team0: Port device veth1767 added [ 3361.631981] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3361.641069] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3361.653583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3361.667721] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3361.685849] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3361.697956] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3361.711213] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3361.736833] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3361.749984] loop5: p15 start 1854537728 is beyond EOD, truncated 04:23:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x400000000000000) [ 3361.782890] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3361.784309] loop5: p16 start 1854537728 is beyond EOD, [ 3361.822792] truncated [ 3361.833771] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3361.840865] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3361.862633] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3361.870930] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3361.893416] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3361.898495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3361.909990] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3361.921739] input: syz1 as /devices/virtual/input/input342 [ 3361.932778] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 04:23:40 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3361.932877] loop5: p21 start 1854537728 is beyond EOD, [ 3361.951072] truncated [ 3361.955602] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3361.977174] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3361.996879] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3362.014777] loop5: p25 start 1854537728 is beyond EOD, truncated 04:23:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3362.057993] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3362.069372] loop5: p27 start 1854537728 is beyond EOD, [ 3362.083367] truncated [ 3362.093583] loop5: p28 start 1854537728 is beyond EOD, truncated 04:23:40 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400002d000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3362.128501] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3362.141279] IPv6: ADDRCONF(NETDEV_UP): veth1769: link is not ready [ 3362.157803] loop5: p30 start 1854537728 is beyond EOD, truncated 04:23:40 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() socket$inet6_tcp(0xa, 0x1, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r8) dup2(r8, r7) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRESHEX=r8, @ANYRESHEX=0x0], 0x247) munlockall() [ 3362.177134] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3362.184418] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3362.190411] team0: Port device veth1769 added [ 3362.203744] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3362.218627] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3362.233473] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3362.240534] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3362.313328] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3362.374103] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3362.419181] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3362.483923] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3362.560898] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3362.624132] input: syz1 as /devices/virtual/input/input343 [ 3362.652962] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3362.710834] input: syz1 as /devices/virtual/input/input344 [ 3362.719437] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3362.754643] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3362.771741] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3362.788996] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3362.794817] loop5: p46 start 1854537728 is beyond EOD, [ 3362.802289] truncated [ 3362.808304] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3362.822062] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3362.830558] loop5: p48 start 1854537728 is beyond EOD, [ 3362.832249] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3362.832381] truncated [ 3362.850639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3362.855424] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3362.860951] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3362.869145] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3362.887879] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3362.894352] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3362.894366] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3362.894379] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3362.894391] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3362.894403] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3362.894415] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3362.894427] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3362.907895] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3362.919331] loop5: p59 start 1854537728 is beyond EOD, [ 3362.930093] truncated [ 3362.968193] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3362.980279] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3362.986721] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3362.998758] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3363.018666] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3363.025223] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3363.037038] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3363.044858] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3363.051177] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3363.063082] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3363.069434] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3363.085818] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3363.099971] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3363.106992] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3363.115481] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3363.137427] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3363.144596] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3363.152353] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3363.158733] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3363.165544] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3363.172142] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3363.178525] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3363.184752] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3363.191034] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3363.197366] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3363.203598] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3363.209745] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3363.216564] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3363.223131] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3363.229300] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3363.235722] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3363.241944] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3363.248101] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3363.255307] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3363.261580] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3363.267741] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3363.274004] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3363.280156] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3363.286411] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3363.292820] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3363.298974] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3363.305565] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3363.311885] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3363.318129] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3363.324434] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3363.330688] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3363.338005] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3363.344319] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3363.350654] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3363.356962] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3363.363265] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3363.369536] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3363.375888] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3363.382209] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3363.388456] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3363.394773] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3363.401026] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3363.407342] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3363.413853] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3363.420292] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3363.426788] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3363.433106] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3363.439505] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3363.445794] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3363.452265] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3363.458539] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3363.464845] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3363.471285] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3363.478596] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3363.484896] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3363.491262] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3363.497612] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3363.503902] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3363.510165] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3363.516506] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3363.522806] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3363.529057] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3363.535404] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3363.541725] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3363.548048] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3363.554366] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3363.560603] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3363.566995] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3363.574875] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3363.581130] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3363.587989] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3363.594477] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3363.600898] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3363.607805] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3363.614203] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3363.620442] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3363.626749] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3363.633040] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3363.639275] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3363.645561] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3363.651849] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3363.658099] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3363.664368] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3363.670622] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3363.676890] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3363.683192] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3363.689460] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3363.695735] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3363.702023] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3363.708264] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3363.714554] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3363.720801] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3363.727076] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3363.734179] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3363.740458] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3363.746745] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3363.753044] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3363.759295] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3363.765567] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3363.771850] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3363.778098] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3363.784372] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3363.790613] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3363.796880] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3363.803180] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3363.809421] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3363.815743] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3363.822023] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3363.828432] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3363.834742] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3363.841307] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3363.847596] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3363.853976] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3363.860265] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3363.867096] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3363.873393] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3363.879636] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3363.885924] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3363.892397] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3363.898647] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3363.904919] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3363.911171] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3363.917445] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3363.923770] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3363.930203] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3363.936514] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3363.943015] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3363.949254] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3363.955526] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3363.962508] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3363.968758] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3363.975248] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3363.981656] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3363.987895] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3363.994943] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3364.001383] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3364.009378] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3364.015873] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3364.022287] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3364.028544] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3364.034832] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3364.041075] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3364.047375] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3364.053662] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3364.061115] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3364.067549] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3364.073843] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3364.080232] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3364.086515] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3364.092813] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3364.099050] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3364.105411] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3364.111766] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3364.117999] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3364.124832] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3364.131150] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3364.137924] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3364.144235] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3364.150461] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3364.157692] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3364.163979] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3364.170209] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3364.176488] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3364.182955] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3364.189192] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3364.195565] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3364.201851] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3364.208093] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3364.214395] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3364.220636] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3364.227064] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3364.233471] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3364.239708] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3364.245982] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3364.253083] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3364.259323] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3364.265771] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3364.272050] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3364.278282] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3364.284658] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3364.290908] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000002000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x500000000000000) 04:23:42 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000064000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:42 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() socket$inet6_tcp(0xa, 0x1, 0x0) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r6, 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r8) dup2(r8, r7) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRESHEX=r8, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:42 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3364.375092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3364.687503] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3364.730577] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3364.733194] IPv6: ADDRCONF(NETDEV_UP): veth1771: link is not ready [ 3364.742068] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3364.774629] input: syz1 as /devices/virtual/input/input346 [ 3364.786869] input: syz1 as /devices/virtual/input/input345 [ 3364.826804] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3364.835761] team0: Port device veth1771 added [ 3364.858871] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3364.876030] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p 04:23:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x600000000000000) [ 3365.008863] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3365.019404] loop5: partition table partially beyond EOD, truncated [ 3365.029344] loop5: p1 size 2 extends beyond EOD, truncated [ 3365.047552] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3365.069205] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3365.093048] loop5: p6 start 1854537728 is beyond EOD, truncated 04:23:43 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000065000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3365.127422] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3365.141229] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3365.141303] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3365.148457] loop5: p9 start 1854537728 is beyond EOD, [ 3365.164346] truncated [ 3365.168729] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3365.195408] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3365.209978] IPv6: ADDRCONF(NETDEV_UP): veth1773: link is not ready [ 3365.229294] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3365.245238] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3365.260108] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3365.267596] team0: Port device veth1773 added [ 3365.268419] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3365.279442] loop5: p16 start 1854537728 is beyond EOD, truncated 04:23:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b48a45cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca994420c7f1c3"], 0x1f0}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3365.295185] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3365.316264] loop5: p18 start 1854537728 is beyond EOD, truncated 04:23:43 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3365.349956] loop5: p19 start 1854537728 is beyond EOD, truncated 04:23:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x700000000000000) 04:23:43 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3365.399118] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3365.461375] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3365.470185] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3365.476686] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3365.490502] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3365.501017] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3365.514630] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3365.545026] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3365.549392] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3365.585234] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3365.620124] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3365.680934] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3365.698444] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3365.720208] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3365.776598] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3365.782705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3365.824326] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3365.892046] input: syz1 as /devices/virtual/input/input348 [ 3365.899234] input: syz1 as /devices/virtual/input/input347 [ 3365.924494] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3365.939896] IPv6: ADDRCONF(NETDEV_UP): veth1775: link is not ready [ 3365.954535] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3365.976490] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3365.983668] team0: Port device veth1775 added [ 3366.009827] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3366.032097] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3366.046188] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3366.053953] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3366.067756] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3366.076339] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3366.083492] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3366.090169] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3366.109281] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3366.119072] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3366.126561] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3366.133451] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3366.140015] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3366.153482] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3366.159798] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3366.170149] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3366.176967] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3366.191225] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3366.200472] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3366.210658] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3366.217617] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3366.224066] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3366.230367] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3366.236674] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3366.242912] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3366.249158] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3366.255447] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3366.261843] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3366.268207] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3366.274469] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3366.280774] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3366.287101] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3366.297269] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3366.304848] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3366.312853] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3366.319120] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3366.335225] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3366.341684] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3366.347865] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3366.354464] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3366.360669] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3366.367207] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3366.373842] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3366.380005] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3366.386202] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3366.392437] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3366.398740] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3366.405115] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3366.411327] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3366.418175] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3366.424628] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3366.430904] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3366.438091] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3366.444387] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3366.450548] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3366.456887] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3366.463098] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3366.469395] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3366.476205] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3366.482420] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3366.488588] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3366.494781] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3366.500947] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3366.507240] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3366.513725] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3366.519890] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3366.526118] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3366.533896] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3366.540150] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3366.547023] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3366.553327] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3366.559860] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3366.566145] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3366.572809] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3366.579073] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3366.585370] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3366.591677] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3366.597919] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3366.604364] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3366.610608] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3366.616892] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3366.623278] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3366.629526] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3366.636081] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3366.642561] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3366.648829] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3366.655121] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3366.661543] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3366.667784] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3366.674772] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3366.681121] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3366.687407] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3366.694053] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3366.700295] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3366.706601] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3366.712913] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3366.719440] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3366.725723] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3366.732146] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3366.738593] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3366.744955] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3366.751203] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3366.757616] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3366.763930] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3366.770284] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3366.776594] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3366.782885] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3366.789181] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3366.795454] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3366.802576] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3366.808817] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3366.815089] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3366.821818] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3366.828064] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3366.834509] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3366.840763] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3366.847168] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3366.853543] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3366.859919] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3366.866221] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3366.872964] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3366.879235] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3366.885599] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3366.891901] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3366.898660] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3366.904941] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3366.911191] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3366.917470] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3366.923794] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3366.930050] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3366.937395] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3366.943748] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3366.950179] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3366.956476] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3366.962768] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3366.969017] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3366.975576] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3366.981976] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3366.988355] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3366.995162] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3367.001573] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3367.007903] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3367.014429] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3367.020823] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3367.027115] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3367.033420] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3367.039694] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3367.045972] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3367.052273] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3367.058509] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3367.065412] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3367.071712] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3367.078045] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3367.084368] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3367.090699] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3367.097062] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3367.103372] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3367.109609] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3367.115899] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3367.122179] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3367.128414] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3367.134686] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3367.140931] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3367.147387] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3367.153681] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3367.160007] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3367.166302] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3367.172601] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3367.178953] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3367.185324] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3367.192458] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3367.198703] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3367.204973] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3367.211217] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3367.217493] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3367.223788] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3367.230036] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3367.236414] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3367.242722] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3367.248959] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3367.255308] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3367.261598] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3367.267934] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3367.274229] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3367.280473] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3367.286749] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3367.293036] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3367.299272] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3367.305546] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3367.312078] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3367.318341] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3367.325217] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3367.331557] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3367.338178] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3367.344460] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3367.350709] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3367.357013] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3367.363309] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3367.369546] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3367.375825] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3367.382111] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3367.388359] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3367.394645] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3367.400883] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3367.407179] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3367.413471] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3367.419710] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3367.426008] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3367.432568] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3367.438932] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3367.445230] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3367.452434] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3367.458684] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3367.464987] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3367.471413] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3367.477736] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3367.484033] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3367.490273] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3367.496576] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3367.502970] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3367.509302] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3367.515589] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3367.521905] loop5: p255 start 1854537728 is beyond EOD, truncated 04:23:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000020000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:45 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019040000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xa00000000000000) 04:23:45 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$kcm(r1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x8}, 0x28, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x106, 0x18, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x106, 0x18, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x3b000, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe71}], 0x1, 0x0, 0x0, 0x9}, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:23:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3367.623409] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3367.950834] input: syz1 as /devices/virtual/input/input349 [ 3367.981194] IPv6: ADDRCONF(NETDEV_UP): veth1777: link is not ready [ 3367.996342] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3368.093215] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3368.102838] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3368.116275] team0: Port device veth1777 added [ 3368.119400] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:23:46 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) dup(0xffffffffffffffff) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc00000000000000) [ 3368.179849] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3368.193340] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3368.211835] loop5: partition table partially beyond EOD, truncated [ 3368.241411] loop5: p1 size 2 extends beyond EOD, truncated [ 3368.271353] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3368.282183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 04:23:46 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3368.296725] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3368.323658] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3368.347560] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3368.372682] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3368.390929] loop5: p9 start 1854537728 is beyond EOD, truncated 04:23:46 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019020300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3368.408008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3368.417376] loop5: p10 start 1854537728 is beyond EOD, truncated 04:23:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1f2}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3368.452928] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3368.476734] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3368.484854] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3368.491368] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3368.511209] input: syz1 as /devices/virtual/input/input350 [ 3368.518156] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3368.544206] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3368.559704] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3368.578251] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3368.594239] IPv6: ADDRCONF(NETDEV_UP): veth1779: link is not ready [ 3368.637595] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3368.650611] input: syz1 as /devices/virtual/input/input351 [ 3368.653759] team0: Port device veth1779 added [ 3368.661944] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3368.669821] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3368.684256] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3368.692263] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:47 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) dup(0xffffffffffffffff) r6 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3368.815279] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3368.910881] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3368.985420] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3369.001818] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3369.017766] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3369.027283] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3369.037661] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3369.046057] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3369.072151] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3369.079115] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3369.083867] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3369.098607] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3369.107060] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3369.114075] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3369.120222] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3369.120733] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3369.136588] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3369.143475] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3369.149980] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3369.157115] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3369.165078] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3369.175513] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3369.182934] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3369.189345] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3369.199669] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3369.206232] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3369.224946] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3369.250158] input: syz1 as /devices/virtual/input/input352 [ 3369.262464] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3369.271137] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3369.278766] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3369.289116] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3369.296956] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3369.306438] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3369.313782] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3369.320517] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3369.327344] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3369.334174] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3369.340518] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3369.340531] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3369.340543] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3369.340555] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3369.340567] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3369.340580] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3369.340592] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3369.340613] loop5: p61 start 1854537728 is beyond EOD, [ 3369.361388] truncated [ 3369.372475] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3369.400742] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3369.407353] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3369.414328] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3369.420830] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3369.427335] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3369.434337] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3369.448278] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3369.454902] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3369.461084] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3369.467508] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3369.473996] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3369.480167] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3369.487276] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3369.493979] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3369.500311] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3369.506545] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3369.513128] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3369.519294] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3369.525903] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3369.557703] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3369.564051] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3369.570533] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3369.578531] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3369.585001] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3369.591162] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3369.597440] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3369.603800] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3369.609962] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3369.616398] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3369.622653] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3369.628883] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3369.635287] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3369.641547] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3369.647735] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3369.654001] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3369.660337] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3369.666578] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3369.672795] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3369.679149] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3369.685480] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3369.691976] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3369.698226] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3369.704691] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3369.710976] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3369.717447] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3369.723802] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3369.730575] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3369.737025] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3369.743324] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3369.749557] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3369.755884] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3369.762236] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3369.768637] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3369.775164] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3369.781540] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3369.787844] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3369.794172] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3369.800424] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3369.806928] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3369.813299] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3369.819717] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3369.826068] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3369.832590] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3369.838947] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3369.845555] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3369.851940] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3369.858298] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3369.864672] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3369.870938] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3369.877356] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3369.883712] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3369.890089] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3369.896432] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3369.902758] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3369.909139] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3369.915660] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3369.922093] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3369.928588] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3369.934951] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3369.941209] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3369.947552] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3369.954040] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3369.960647] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3369.966981] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3369.973369] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3369.979626] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3369.985949] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3369.992289] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3369.998538] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3370.004887] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3370.011135] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3370.017507] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3370.023870] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3370.030113] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3370.036445] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3370.042761] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3370.049035] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3370.055404] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3370.062122] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3370.068367] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3370.074717] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3370.080965] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3370.087275] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3370.093626] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3370.099879] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3370.106199] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3370.112557] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3370.118819] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3370.125160] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3370.131870] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3370.138279] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3370.144636] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3370.150884] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3370.157225] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3370.163557] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3370.169807] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3370.176123] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3370.182444] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3370.188701] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3370.195056] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3370.201320] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3370.207636] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3370.214050] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3370.220303] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3370.226675] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3370.233029] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3370.239375] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3370.245718] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3370.252069] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3370.258338] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3370.264665] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3370.270928] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3370.277368] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3370.283706] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3370.289953] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3370.296334] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3370.302660] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3370.308908] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3370.315529] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3370.321870] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3370.328124] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3370.334472] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3370.340725] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3370.347044] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3370.353384] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3370.359719] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3370.366053] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3370.372631] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3370.380285] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3370.386612] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3370.392947] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3370.399184] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3370.405500] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3370.411816] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3370.418171] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3370.424538] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3370.430828] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3370.437166] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3370.443485] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3370.449731] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3370.456171] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3370.462594] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3370.468844] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3370.475188] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3370.481448] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3370.489261] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3370.495642] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3370.501960] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3370.508191] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3370.514535] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3370.520836] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3370.527162] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3370.533577] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3370.539978] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3370.546307] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3370.552658] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3370.558917] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3370.565279] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3370.571938] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3370.578595] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3370.585888] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3370.592362] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3370.598742] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3370.605066] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3370.611320] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3370.617827] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3370.624202] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3370.633405] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3370.639670] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3370.646050] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3370.652418] loop5: p253 start 1854537728 is beyond EOD, truncated 04:23:48 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000000000000000003f000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xe00000000000000) 04:23:48 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1f2}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:48 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019030300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:48 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r4) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r5) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) r6 = dup(0xffffffffffffffff) getsockopt$inet_tcp_int(r6, 0x6, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r8, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r9, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r10, 0x5501) r11 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r11) dup2(r11, r10) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYRESHEX=r11, @ANYRESHEX=0x0], 0x247) munlockall() [ 3370.658671] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3370.664986] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3370.735150] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3370.824036] IPv6: ADDRCONF(NETDEV_UP): veth1781: link is not ready [ 3371.107320] input: syz1 as /devices/virtual/input/input353 [ 3371.142584] team0: Port device veth1781 added [ 3371.166120] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3371.270891] input: syz1 as /devices/virtual/input/input354 [ 3371.282139] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:23:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xf00000000000000) [ 3371.321420] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3371.332051] loop5: partition table partially beyond EOD, truncated [ 3371.364315] loop5: p1 size 2 extends beyond EOD, truncated [ 3371.390479] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3371.434838] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3371.441282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3371.443474] loop5: p4 start 1854537728 is beyond EOD, [ 3371.455550] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 04:23:49 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:49 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3371.482914] truncated [ 3371.485780] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3371.493064] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3371.500862] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3371.523081] loop5: p7 start 1854537728 is beyond EOD, [ 3371.523146] truncated [ 3371.571120] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3371.594522] IPv6: ADDRCONF(NETDEV_UP): veth1783: link is not ready 04:23:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b48a45cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca994420c7f1c333b0"], 0x1f2}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:49 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019040300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3371.635124] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3371.641414] loop5: p10 start 1854537728 is beyond EOD, [ 3371.659137] team0: Port device veth1783 added [ 3371.685850] truncated [ 3371.688405] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3371.712739] input: syz1 as /devices/virtual/input/input355 04:23:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x1000000000000000) [ 3371.736446] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3371.799577] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3371.838781] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3371.854689] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3371.861240] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3371.889639] input: syz1 as /devices/virtual/input/input356 [ 3371.899375] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3371.919624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3371.978682] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3372.063192] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3372.174201] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3372.182271] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3372.188862] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3372.195890] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3372.202899] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3372.209505] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3372.219762] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3372.232038] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3372.241673] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3372.251097] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3372.266031] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3372.282511] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3372.290787] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3372.291598] IPv6: ADDRCONF(NETDEV_UP): veth1785: link is not ready [ 3372.300117] loop5: p31 start 1854537728 is beyond EOD, [ 3372.303754] truncated [ 3372.313272] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3372.320941] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3372.328134] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3372.335364] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3372.338358] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3372.343348] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3372.360751] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3372.363117] team0: Port device veth1785 added [ 3372.373979] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3372.380535] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3372.387539] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3372.394791] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3372.406259] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3372.409616] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3372.420450] loop5: p42 start 1854537728 is beyond EOD, [ 3372.429968] truncated [ 3372.446562] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3372.447771] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3372.476088] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3372.501932] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3372.521982] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3372.529476] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3372.536394] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3372.542753] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3372.549120] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3372.555629] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3372.562079] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3372.568394] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3372.575012] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3372.581421] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3372.587702] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3372.594064] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3372.600325] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3372.606696] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3372.606708] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3372.606727] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3372.625931] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3372.632651] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3372.632666] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3372.632676] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3372.651268] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3372.657517] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3372.665031] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3372.671301] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3372.677584] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3372.683840] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3372.690000] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3372.696322] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3372.702601] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3372.708888] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3372.715123] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3372.721280] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3372.727515] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3372.733869] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3372.740026] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3372.746231] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3372.753020] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3372.759615] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3372.765998] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3372.772348] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3372.778536] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3372.784783] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3372.790943] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3372.797199] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3372.803410] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3372.809572] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3372.816490] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3372.822700] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3372.822713] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3372.822725] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3372.822737] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3372.822746] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3372.822761] loop5: p98 start 1854537728 is beyond EOD, [ 3372.872477] truncated [ 3372.875039] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3372.881408] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3372.888838] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3372.895402] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3372.901712] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3372.907999] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3372.914346] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3372.920614] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3372.926911] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3372.933553] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3372.939800] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3372.946117] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3372.952435] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3372.958675] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3372.965094] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3372.971571] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3372.977832] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3372.984121] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3372.990376] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3372.996690] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3373.003806] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3373.010060] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3373.016352] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3373.022745] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3373.029256] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3373.035559] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3373.042060] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3373.048612] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3373.055023] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3373.061496] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3373.067739] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3373.074337] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3373.080763] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3373.087054] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3373.093448] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3373.099676] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3373.106090] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3373.112565] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3373.118899] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3373.125254] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3373.132391] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3373.138639] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3373.145008] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3373.151434] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3373.157871] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3373.164172] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3373.172395] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3373.178887] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3373.185190] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3373.191743] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3373.198159] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3373.204555] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3373.211035] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3373.217353] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3373.223652] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3373.229890] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3373.236169] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3373.242457] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3373.248713] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3373.255123] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3373.261399] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3373.268277] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3373.274773] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3373.281031] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3373.287323] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3373.293730] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3373.299953] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3373.306228] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3373.312540] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3373.318790] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3373.325256] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3373.331890] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3373.338151] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3373.344453] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3373.350702] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3373.357021] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3373.363327] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3373.369584] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3373.375878] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3373.382274] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3373.388516] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3373.395414] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3373.401731] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3373.407975] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3373.414291] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3373.420644] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3373.426938] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3373.433251] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3373.439731] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3373.446094] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3373.452408] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3373.458869] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3373.465186] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3373.471509] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3373.477769] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3373.484156] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3373.490629] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3373.496953] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3373.503433] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3373.509677] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3373.516000] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3373.523122] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3373.529384] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3373.535772] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3373.542156] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3373.548597] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3373.554906] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3373.561265] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3373.567566] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3373.573967] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3373.580223] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3373.586501] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3373.592793] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3373.599034] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3373.605328] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3373.611656] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3373.617900] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3373.624188] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3373.630500] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3373.636921] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3373.644161] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3373.650546] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3373.657513] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3373.663822] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3373.670443] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3373.676911] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3373.683206] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3373.689647] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3373.696088] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3373.702487] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3373.708832] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3373.715259] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3373.721683] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3373.728062] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3373.734627] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3373.741253] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3373.747648] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3373.753969] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3373.760194] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3373.766480] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3373.772779] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3373.779062] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3373.786167] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3373.792473] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3373.798902] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3373.805433] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3373.811921] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3373.818166] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3373.824993] loop5: p247 start 1854537728 is beyond EOD, truncated 04:23:52 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000040000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:52 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x2000000000000000) 04:23:52 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:52 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019050300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b48a45cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca994420c7f1c333b024"], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3373.831560] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3373.837810] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3373.844101] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3373.850359] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3373.856672] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3373.862971] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3373.869218] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3373.875489] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3373.944134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3374.037896] input: syz1 as /devices/virtual/input/input357 [ 3374.301167] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3374.415616] input: syz1 as /devices/virtual/input/input358 [ 3374.421806] loop5: partition table partially beyond EOD, truncated [ 3374.439786] loop5: p1 size 2 extends beyond EOD, truncated [ 3374.451102] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 04:23:52 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3374.475478] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3374.485738] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3374.504693] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3374.535347] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3374.549830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3374.550993] IPv6: ADDRCONF(NETDEV_UP): veth1787: link is not ready [ 3374.566826] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3374.573531] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3374.581004] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3374.584166] loop5: p8 start 1854537728 is beyond EOD, [ 3374.596226] team0: Port device veth1787 added [ 3374.607418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3374.622681] truncated [ 3374.625349] loop5: p9 start 1854537728 is beyond EOD, truncated 04:23:52 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3374.661903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3374.676805] loop5: p10 start 1854537728 is beyond EOD, truncated 04:23:52 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019060300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3374.710513] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3374.741022] loop5: p12 start 1854537728 is beyond EOD, truncated 04:23:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x3f00000000000000) 04:23:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3374.759876] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3374.768561] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3374.790556] input: syz1 as /devices/virtual/input/input359 [ 3374.907923] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3374.937339] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3374.949129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3374.953446] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3374.970907] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3375.010259] loop5: p19 start 1854537728 is beyond EOD, truncated 04:23:53 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3375.042459] loop5: p20 start 1854537728 is beyond EOD, [ 3375.057005] truncated [ 3375.108278] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3375.133008] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3375.158566] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3375.195410] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3375.221791] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3375.228505] input: syz1 as /devices/virtual/input/input360 [ 3375.334740] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3375.346316] IPv6: ADDRCONF(NETDEV_UP): veth1789: link is not ready [ 3375.352182] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3375.374854] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3375.382099] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3375.387899] team0: Port device veth1789 added [ 3375.406825] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3375.422026] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3375.432107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3375.443987] input: syz1 as /devices/virtual/input/input361 [ 3375.449789] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3375.473132] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3375.487941] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3375.513131] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3375.561312] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3375.585641] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3375.604713] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3375.612478] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3375.619105] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3375.625974] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3375.635530] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3375.649978] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3375.668007] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3375.678480] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3375.685303] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3375.692040] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3375.698535] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3375.705557] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3375.712680] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3375.719068] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3375.729585] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3375.736872] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3375.743293] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3375.749564] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3375.758156] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3375.765761] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3375.772131] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3375.778459] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3375.784823] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3375.791050] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3375.805334] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3375.817305] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3375.824257] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3375.830851] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3375.837270] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3375.843625] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3375.849781] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3375.856061] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3375.862496] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3375.868936] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3375.875982] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3375.882503] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3375.889100] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3375.895366] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3375.901958] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3375.908134] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3375.914377] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3375.920791] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3375.927017] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3375.933383] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3375.939587] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3375.945907] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3375.952175] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3375.958438] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3375.964769] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3375.971278] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3375.977776] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3375.984014] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3375.990538] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3375.997034] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3376.003506] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3376.009656] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3376.015985] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3376.022332] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3376.028754] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3376.035911] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3376.042386] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3376.048954] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3376.055214] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3376.061676] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3376.068153] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3376.074402] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3376.080961] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3376.087337] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3376.093812] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3376.100208] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3376.106709] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3376.113150] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3376.119396] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3376.125803] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3376.133029] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3376.139268] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3376.145635] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3376.152550] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3376.158781] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3376.165243] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3376.171683] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3376.177928] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3376.184252] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3376.190504] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3376.196834] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3376.203136] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3376.209401] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3376.215756] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3376.222068] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3376.228306] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3376.234617] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3376.240868] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3376.247169] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3376.253489] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3376.259730] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3376.266044] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3376.272501] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3376.278842] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3376.285225] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3376.291659] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3376.298004] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3376.304302] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3376.310650] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3376.316953] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3376.323708] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3376.330295] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3376.336904] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3376.343242] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3376.349572] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3376.356003] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3376.362316] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3376.368557] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3376.375035] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3376.382312] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3376.388692] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3376.395044] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3376.401333] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3376.407766] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3376.414119] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3376.420764] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3376.427271] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3376.433612] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3376.439967] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3376.446387] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3376.453028] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3376.459278] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3376.465660] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3376.472097] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3376.478336] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3376.484666] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3376.490926] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3376.497646] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3376.504018] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3376.510457] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3376.516967] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3376.523679] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3376.529908] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3376.536300] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3376.542799] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3376.549088] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3376.555462] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3376.561934] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3376.568301] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3376.574961] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3376.581704] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3376.588016] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3376.594473] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3376.600732] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3376.607202] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3376.613841] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3376.620109] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3376.626672] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3376.633458] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3376.639898] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3376.646219] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3376.652662] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3376.659114] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3376.665522] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3376.671849] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3376.678101] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3376.684403] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3376.690659] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3376.697114] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3376.703424] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3376.709661] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3376.715977] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3376.722293] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3376.728534] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3376.734983] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3376.741238] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3376.747521] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3376.753850] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3376.760094] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3376.766397] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3376.772710] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3376.779145] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3376.785484] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3376.791813] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3376.798060] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3376.804678] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3376.811034] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3376.817341] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3376.823636] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3376.829874] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3376.836252] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3376.842551] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3376.848786] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3376.855145] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3376.861389] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3376.867689] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3376.874091] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3376.880326] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3376.886600] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3376.892913] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3376.899158] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3376.905441] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3376.911747] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3376.917978] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3376.924280] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3376.930518] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3376.936924] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3376.943211] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3376.949554] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3376.955845] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3376.962126] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3376.968349] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3376.974728] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3376.980966] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3376.987373] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3376.993753] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3376.999989] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3377.006309] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3377.012632] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3377.018868] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3377.025271] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3377.031588] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3377.037825] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3377.044122] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3377.050508] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3377.056832] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3377.063136] loop5: p253 start 1854537728 is beyond EOD, truncated 04:23:55 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff070074000000000000000000000000000000ffffffffffffff7f000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x4000000000000000) 04:23:55 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019070300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:55 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) 04:23:55 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3377.069430] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3377.075747] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3377.107592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3377.167206] IPv6: ADDRCONF(NETDEV_UP): veth1791: link is not ready [ 3377.208923] team0: Port device veth1791 added [ 3377.474643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3377.488746] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3377.517780] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3377.527043] input: syz1 as /devices/virtual/input/input363 [ 3377.543935] Dev loop5: unable to read RDB block 1 [ 3377.551970] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:23:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x4b3e7a9e00000000) [ 3377.566001] input: syz1 as /devices/virtual/input/input362 [ 3377.576794] loop5: unable to read partition table [ 3377.593341] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3377.627793] loop5: partition table beyond EOD, truncated [ 3377.660422] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 3377.674202] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3377.711322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3377.730941] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:23:56 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:56 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff07007400000000000000000000000000000000000000fffffffb000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:56 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019090300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:56 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) [ 3377.884110] IPv6: ADDRCONF(NETDEV_UP): veth1793: link is not ready [ 3377.909872] team0: Port device veth1793 added 04:23:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x6000000000000000) 04:23:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3378.144064] input: syz1 as /devices/virtual/input/input364 [ 3378.147926] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3378.248842] input: syz1 as /devices/virtual/input/input365 [ 3378.269776] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3378.301678] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3378.339702] loop5: partition table partially beyond EOD, truncated [ 3378.348255] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3378.386616] loop5: p1 size 2 extends beyond EOD, truncated [ 3378.396559] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3378.483545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3378.513288] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3378.515617] loop5: p4 start 1854537728 is beyond EOD, [ 3378.567529] truncated [ 3378.567779] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3378.574306] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3378.663884] IPv6: ADDRCONF(NETDEV_UP): veth1795: link is not ready [ 3378.693275] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3378.699727] loop5: p7 start 1854537728 is beyond EOD, truncated 04:23:56 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190a0300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:56 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) [ 3378.718182] team0: Port device veth1795 added [ 3378.726196] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3378.736125] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3378.747899] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3378.757981] loop5: p11 start 1854537728 is beyond EOD, truncated 04:23:57 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() 04:23:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x6558000000000000) [ 3378.790488] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3378.805729] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3378.820884] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3378.853210] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3378.883111] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3378.901842] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3378.917348] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3378.933651] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3378.967084] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3378.993669] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3379.031236] input: syz1 as /devices/virtual/input/input366 [ 3379.039391] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3379.075113] input: syz1 as /devices/virtual/input/input367 [ 3379.080773] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3379.127544] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3379.141179] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3379.148683] IPv6: ADDRCONF(NETDEV_UP): veth1797: link is not ready [ 3379.171133] loop5: p24 start 1854537728 is beyond EOD, truncated 04:23:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3379.179999] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3379.204163] loop5: p25 start 1854537728 is beyond EOD, [ 3379.205798] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3379.232733] team0: Port device veth1797 added 04:23:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x8100000000000000) [ 3379.267050] truncated [ 3379.278196] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3379.284105] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3379.290649] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3379.304156] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3379.380114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3379.389429] loop5: p28 start 1854537728 is beyond EOD, truncated 04:23:57 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r5, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r7, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r8, 0xffffffffffffffff) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r10) dup2(r10, r9) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r8, @ANYRESHEX=r10, @ANYRESHEX=0x0], 0x247) munlockall() [ 3379.421805] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3379.473818] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3379.627101] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3379.671589] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3379.684612] IPv6: ADDRCONF(NETDEV_UP): veth1799: link is not ready [ 3379.691956] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3379.700284] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3379.717690] team0: Port device veth1799 added [ 3379.724712] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3379.745338] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3379.752183] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3379.758514] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3379.765297] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3379.772062] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3379.778444] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3379.785879] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3379.792856] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3379.799723] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3379.806602] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3379.814503] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3379.829572] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3379.844050] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3379.853466] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3379.859801] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3379.872933] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3379.885530] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3379.895213] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3379.912787] input: syz1 as /devices/virtual/input/input368 [ 3379.917284] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3379.938225] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3379.949261] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3379.961654] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3379.968160] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3379.977873] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3379.985263] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3379.991948] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3379.998278] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3380.004559] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3380.004572] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3380.004584] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3380.004595] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3380.017153] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3380.035944] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3380.042237] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3380.048447] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3380.054775] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3380.060997] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3380.067288] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3380.073755] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3380.080048] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3380.086399] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3380.092938] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3380.099117] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3380.106216] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3380.112470] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3380.118624] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3380.124858] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3380.131011] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3380.151946] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3380.158165] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3380.167198] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3380.181588] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3380.187915] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3380.197229] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3380.203611] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3380.209888] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3380.216799] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3380.223196] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3380.229383] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3380.236299] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3380.242555] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3380.248714] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3380.254951] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3380.261121] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3380.267360] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3380.273651] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3380.279883] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3380.286204] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3380.292538] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3380.298967] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3380.305291] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3380.311580] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3380.317809] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3380.324099] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3380.330368] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3380.336672] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3380.343005] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3380.350343] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3380.356648] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3380.363785] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3380.370146] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3380.376532] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3380.382941] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3380.389210] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3380.395667] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3380.401957] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3380.408346] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3380.419830] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3380.426144] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3380.432448] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3380.438880] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3380.445212] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3380.451732] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3380.457962] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3380.464256] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3380.470506] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3380.476788] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3380.483177] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3380.489433] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3380.496339] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3380.503911] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3380.510197] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3380.516525] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3380.522840] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3380.529108] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3380.536627] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3380.544160] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3380.553351] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3380.559609] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3380.566001] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3380.572488] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3380.578748] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3380.585072] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3380.591343] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3380.597648] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3380.603968] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3380.610327] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3380.616654] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3380.623748] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3380.630000] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3380.636348] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3380.642891] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3380.649238] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3380.655589] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3380.661904] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3380.668162] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3380.674454] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3380.680852] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3380.687340] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3380.693702] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3380.699946] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3380.706296] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3380.712571] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3380.718818] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3380.725206] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3380.731515] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3380.737845] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3380.744155] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3380.750422] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3380.757299] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3380.763593] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3380.769926] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3380.776342] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3380.782656] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3380.788905] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3380.795225] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3380.801596] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3380.807831] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3380.814124] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3380.820363] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3380.826650] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3380.833025] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3380.839247] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3380.845532] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3380.851813] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3380.858033] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3380.864444] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3380.870686] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3380.876967] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3380.884059] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3380.890313] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3380.896588] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3380.902879] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3380.909110] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3380.915391] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3380.921784] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3380.928317] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3380.934787] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3380.941129] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3380.947870] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3380.954179] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3380.960410] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3380.966805] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3380.973172] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3380.979419] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3380.985707] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3380.992196] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3380.998425] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3381.004737] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3381.011219] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3381.018062] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3381.024481] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3381.030886] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3381.037199] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3381.043649] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3381.049907] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3381.056244] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3381.062566] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3381.068806] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3381.075100] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3381.081345] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3381.087714] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3381.093994] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3381.100486] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3381.106760] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3381.113090] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3381.119308] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3381.125607] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3381.131886] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3381.138118] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3381.145179] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3381.151495] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3381.157737] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3381.164060] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3381.170303] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3381.176775] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3381.183064] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3381.189312] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3381.195673] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3381.202042] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3381.208274] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3381.214552] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3381.220801] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3381.227263] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3381.233534] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3381.239753] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3381.246043] loop5: p251 start 1854537728 is beyond EOD, truncated 04:23:59 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000007ffffffffffff000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:23:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) munlockall() 04:23:59 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019220300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:23:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x88a8ffff00000000) 04:23:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:23:59 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3381.252549] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3381.258796] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3381.265107] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3381.271484] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3381.338698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3381.515829] input: syz1 as /devices/virtual/input/input369 [ 3381.674740] input: syz1 as /devices/virtual/input/input370 [ 3381.728413] IPv6: ADDRCONF(NETDEV_UP): veth1801: link is not ready [ 3381.739685] Dev loop5: unable to read RDB block 1 [ 3381.740244] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3381.752955] loop5: unable to read partition table [ 3381.772016] loop5: partition table beyond EOD, truncated [ 3381.781940] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3381.788712] team0: Port device veth1801 added [ 3381.799660] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 3381.803008] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:24:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) munlockall() 04:24:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x9effffff00000000) [ 3381.860629] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3381.874718] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 04:24:00 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3381.957745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 04:24:00 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000007fffffffffffffff000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 3382.074948] input: syz1 as /devices/virtual/input/input371 [ 3382.089444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:24:00 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019230300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) [ 3382.209063] input: syz1 as /devices/virtual/input/input372 [ 3382.236231] Dev loop5: unable to read RDB block 1 [ 3382.251378] loop5: unable to read partition table [ 3382.262156] loop5: partition table beyond EOD, truncated [ 3382.268070] IPv6: ADDRCONF(NETDEV_UP): veth1803: link is not ready [ 3382.289746] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:24:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) munlockall() [ 3382.342266] team0: Port device veth1803 added 04:24:00 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc3ffffff00000000) [ 3382.793771] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3382.841996] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3382.861340] input: syz1 as /devices/virtual/input/input373 [ 3382.867564] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3382.883830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:24:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000002000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 3382.955608] input: syz1 as /devices/virtual/input/input374 [ 3382.999935] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3383.009387] Dev loop5: unable to read RDB block 1 [ 3383.016711] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3383.038788] loop5: unable to read partition table [ 3383.044705] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3383.059760] loop5: partition table beyond EOD, truncated [ 3383.099289] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 3383.114798] IPv6: ADDRCONF(NETDEV_UP): veth1805: link is not ready [ 3383.134469] team0: Port device veth1805 added 04:24:01 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192c0300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() 04:24:01 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc524040000000000) 04:24:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(&(0x7f0000000300)) 04:24:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000200000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 3383.402793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3383.438496] input: syz1 as /devices/virtual/input/input375 [ 3383.697699] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3383.848146] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3383.867655] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3383.886867] loop5: partition table partially beyond EOD, truncated [ 3383.900095] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3383.910024] loop5: p1 size 2 extends beyond EOD, truncated [ 3383.923777] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3383.940811] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3383.947867] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3383.949733] IPv6: ADDRCONF(NETDEV_UP): veth1807: link is not ready [ 3383.954726] loop5: p7 start 1854537728 is beyond EOD, [ 3383.968230] truncated [ 3383.970786] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3383.977924] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3383.984118] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3383.990299] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3383.998664] team0: Port device veth1807 added [ 3384.003639] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3384.014907] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3384.021306] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3384.030698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3384.038873] input: syz1 as /devices/virtual/input/input376 04:24:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3384.059715] loop5: p13 start 1854537728 is beyond EOD, truncated 04:24:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc624040000000000) 04:24:02 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192d0300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:02 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3384.146450] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3384.235187] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3384.262040] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3384.281998] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3384.303351] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3384.321668] loop5: p19 start 1854537728 is beyond EOD, truncated 04:24:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) set_tid_address(&(0x7f0000000300)) [ 3384.327301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3384.341801] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3384.349753] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3384.363607] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3384.370423] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3384.378180] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3384.385464] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3384.409189] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3384.429720] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3384.468662] input: syz1 as /devices/virtual/input/input378 [ 3384.473604] loop5: p28 start 1854537728 is beyond EOD, truncated 04:24:02 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3384.529372] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3384.541913] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3384.554305] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3384.556566] loop5: p31 start 1854537728 is beyond EOD, [ 3384.575837] IPv6: ADDRCONF(NETDEV_UP): veth1809: link is not ready [ 3384.627464] truncated [ 3384.661660] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3384.736802] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3384.787381] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3384.814976] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3384.824617] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3384.831716] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3384.838528] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3384.845416] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3384.848587] team0: Port device veth1809 added [ 3384.857912] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3384.865173] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3384.871831] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3384.878685] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3384.878960] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3384.885307] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3384.905222] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3384.914964] loop5: p42 start 1854537728 is beyond EOD, truncated 04:24:03 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xc724040000000000) [ 3384.955820] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3384.971326] loop5: p44 start 1854537728 is beyond EOD, truncated 04:24:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019480300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3385.048430] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3385.058060] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3385.066974] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3385.072330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3385.077610] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3385.091059] loop5: p49 start 1854537728 is beyond EOD, truncated 04:24:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3385.111859] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3385.125054] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3385.167893] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3385.195408] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3385.210286] IPv6: ADDRCONF(NETDEV_UP): veth1811: link is not ready [ 3385.221201] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3385.232357] input: syz1 as /devices/virtual/input/input380 [ 3385.265063] team0: Port device veth1811 added [ 3385.276473] loop5: p55 start 1854537728 is beyond EOD, truncated 04:24:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b48a45cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca994420c7f1c333b024"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) set_tid_address(&(0x7f0000000300)) [ 3385.335612] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3385.372022] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3385.395958] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3385.419856] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3385.434336] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3385.451674] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3385.460940] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3385.481082] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3385.490439] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3385.505162] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3385.511962] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3385.520384] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3385.521111] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3385.533257] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3385.567385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3385.571374] loop5: p65 start 1854537728 is beyond EOD, [ 3385.579098] truncated [ 3385.593009] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3385.655392] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3385.677128] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3385.690350] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3385.729982] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3385.741596] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3385.748083] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3385.754590] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3385.761023] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3385.767436] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3385.782815] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3385.789422] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3385.796225] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3385.802686] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3385.808947] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3385.815612] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3385.842397] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3385.875049] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3385.885941] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3385.894039] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3385.900495] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3385.907109] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3385.913504] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3385.919847] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3385.926349] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3385.932835] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3385.939588] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3385.962155] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3385.972375] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3385.978575] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3385.984963] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3385.991247] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3385.997607] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3386.004228] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3386.010411] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3386.016891] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3386.023256] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3386.029585] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3386.036286] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3386.042750] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3386.049071] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3386.055875] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3386.062304] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3386.068583] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3386.074965] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3386.081290] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3386.087641] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3386.093967] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3386.100202] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3386.106666] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3386.113319] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3386.119943] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3386.126372] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3386.132968] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3386.139345] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3386.145673] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3386.151989] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3386.158229] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3386.164556] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3386.170816] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3386.177173] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3386.183497] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3386.189744] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3386.196091] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3386.202432] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3386.208684] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3386.215041] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3386.221401] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3386.227746] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3386.234115] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3386.240363] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3386.247132] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3386.253640] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3386.259898] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3386.266223] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3386.272583] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3386.278962] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3386.290193] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3386.296538] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3386.302867] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3386.309140] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3386.315527] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3386.322514] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3386.328786] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3386.335163] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3386.341513] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3386.347863] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3386.354422] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3386.360661] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3386.367080] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3386.367093] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3386.367105] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3386.367116] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3386.367126] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3386.367137] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3386.367149] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3386.367159] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3386.367170] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3386.367181] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3386.367192] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3386.367203] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3386.367215] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3386.449975] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3386.456341] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3386.462712] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3386.468953] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3386.475300] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3386.481611] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3386.487938] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3386.494291] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3386.500545] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3386.506856] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3386.513357] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3386.519700] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3386.526003] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3386.532372] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3386.538702] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3386.545063] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3386.551706] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3386.557949] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3386.564270] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3386.570540] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3386.576887] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3386.583207] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3386.589489] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3386.595793] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3386.602272] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3386.608526] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3386.615292] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3386.621634] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3386.627892] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3386.634326] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3386.640562] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3386.646876] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3386.653219] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3386.659537] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3386.665847] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3386.672181] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3386.678412] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3386.684725] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3386.691176] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3386.697749] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3386.704190] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3386.711388] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3386.717996] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3386.724327] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3386.730863] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3386.737266] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3386.743615] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3386.749880] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3386.756261] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3386.762683] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3386.769031] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3386.775728] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3386.782074] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3386.788947] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3386.795315] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3386.802156] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3386.808421] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3386.814808] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3386.821089] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3386.827472] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3386.833861] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3386.840117] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3386.846420] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3386.852824] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3386.859066] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3386.865369] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3386.871787] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3386.878021] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3386.884336] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3386.890693] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3386.897280] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3386.903626] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3386.909876] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3386.916226] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3386.922580] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3386.928836] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3386.935391] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3386.941719] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3386.947943] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3386.956019] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3386.962414] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3386.968805] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3386.975286] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3386.981651] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3386.987890] loop5: p252 start 1854537728 is beyond EOD, truncated 04:24:05 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff07007400000000000000000000000000000000003f0000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:24:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xe4ffffff00000000) 04:24:05 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r8, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() 04:24:05 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000194c0300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) set_tid_address(&(0x7f0000000300)) [ 3386.994216] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3387.000952] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3387.007273] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3387.084041] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3387.172023] IPv6: ADDRCONF(NETDEV_UP): veth1813: link is not ready [ 3387.494065] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3387.522218] input: syz1 as /devices/virtual/input/input383 [ 3387.541626] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3387.542439] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3387.643498] team0: Port device veth1813 added [ 3387.651827] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3387.673486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3387.675686] loop5: partition table partially beyond EOD, 04:24:05 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3387.698166] truncated [ 3387.709718] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3387.725369] loop5: p1 size 2 extends beyond EOD, truncated [ 3387.734617] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 04:24:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xf0ffffff00000000) [ 3387.768157] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3387.790554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3387.808286] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3387.832266] loop5: p6 start 1854537728 is beyond EOD, truncated 04:24:06 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:06 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019560300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3387.913435] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3387.940304] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3387.945254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3387.955652] loop5: p9 start 1854537728 is beyond EOD, truncated 04:24:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff00000002f2000000030005000000000002004e20ded5b29c0000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c800800000d4414b622a5446fed34559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e831c15e786fda31a52255432f3e116927b0032c4b92b2858be830c16df808e815476cb4ce617d37df1b6d66c83313b4a15b6330e124aa5aa6592b3fc6520c311f5146bc3d0befe0ace6695ea852f6c1bc72d6364aa68487056acc6605ae3becef54806187d3b67547134de0f4d1145752985e469d2069b492b48a45cd436bdfac8e72070fb896025138a9307ff32700065d7a33bac39bbc0032f7a4869e156aed176d70c9e55b292cc857e823d6ca994420c7f1c333b024"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(0x0) [ 3387.969186] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3387.979507] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3388.022099] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3388.062028] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3388.092973] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3388.122614] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3388.132955] IPv6: ADDRCONF(NETDEV_UP): veth1815: link is not ready [ 3388.139915] loop5: p16 start 1854537728 is beyond EOD, truncated [ 3388.150436] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3388.178184] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3388.187502] team0: Port device veth1815 added [ 3388.222737] loop5: p19 start 1854537728 is beyond EOD, truncated 04:24:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3388.295302] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3388.315193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3388.448899] input: syz1 as /devices/virtual/input/input384 [ 3388.451239] loop5: p21 start 1854537728 is beyond EOD, [ 3388.484027] truncated [ 3388.486849] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3388.501961] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3388.526164] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3388.538310] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3388.567771] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3388.604595] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3388.611355] loop5: p26 start 1854537728 is beyond EOD, [ 3388.624857] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3388.639615] truncated [ 3388.652097] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3388.660751] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3388.675081] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3388.692886] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3388.723772] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3388.731289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3388.742182] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3388.749162] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3388.756808] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3388.771806] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3388.786759] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3388.800665] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3388.811032] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3388.817476] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3388.823828] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3388.830284] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3388.836751] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3388.843928] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3388.854701] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3388.861020] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3388.867615] loop5: p44 start 1854537728 is beyond EOD, truncated [ 3388.873923] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3388.880187] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3388.887109] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3388.893448] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3388.899639] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3388.906949] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3388.916818] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3388.925989] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3388.933057] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3388.939358] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3388.946540] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3388.952999] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3388.959157] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3388.965977] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3388.991070] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3388.997398] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3389.004024] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3389.010201] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3389.017087] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3389.023644] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3389.030081] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3389.036487] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3389.042762] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3389.049087] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3389.055391] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3389.061748] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3389.067922] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3389.074269] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3389.080432] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3389.086690] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3389.093126] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3389.099302] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3389.106365] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3389.114758] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3389.121056] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3389.127821] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3389.134342] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3389.140789] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3389.147014] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3389.153845] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3389.160020] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3389.167092] loop5: p86 start 1854537728 is beyond EOD, truncated [ 3389.173402] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3389.180069] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3389.186483] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3389.192695] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3389.198843] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3389.205100] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3389.211800] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3389.218056] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3389.226927] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3389.233193] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3389.239893] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3389.246860] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3389.253493] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3389.260045] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3389.266389] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3389.272735] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3389.279194] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3389.286315] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3389.292652] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3389.298973] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3389.305328] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3389.311656] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3389.318167] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3389.324709] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3389.330975] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3389.337405] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3389.344311] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3389.350912] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3389.357225] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3389.363876] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3389.370340] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3389.377849] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3389.384443] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3389.391144] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3389.397508] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3389.403944] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3389.410273] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3389.416599] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3389.422957] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3389.429303] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3389.435837] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3389.442284] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3389.448547] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3389.454879] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3389.461219] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3389.467531] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3389.473853] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3389.480287] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3389.486597] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3389.492932] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3389.499173] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3389.506226] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3389.512557] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3389.519094] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3389.525455] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3389.531781] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3389.538042] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3389.544371] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3389.550816] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3389.557547] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3389.563877] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3389.570291] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3389.576998] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3389.583537] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3389.590387] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3389.596798] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3389.603219] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3389.610301] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3389.616774] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3389.623058] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3389.629298] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3389.636455] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3389.642885] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3389.649654] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3389.655968] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3389.662281] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3389.668571] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3389.674971] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3389.681215] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3389.687530] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3389.693828] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3389.700079] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3389.706365] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3389.712678] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3389.718919] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3389.725235] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3389.731544] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3389.737789] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3389.744088] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3389.750333] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3389.758352] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3389.765069] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3389.771294] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3389.777589] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3389.783920] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3389.790187] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3389.796495] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3389.802820] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3389.809171] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3389.815478] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3389.821781] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3389.828030] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3389.834324] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3389.841117] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3389.847413] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3389.853716] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3389.859955] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3389.867896] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3389.874558] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3389.880919] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3389.887231] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3389.893970] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3389.900212] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3389.906862] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3389.913173] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3389.919444] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3389.925816] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3389.933016] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3389.939393] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3389.945713] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3389.952011] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3389.958354] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3389.964659] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3389.970998] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3389.977326] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3389.984499] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3389.991344] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3389.997631] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3390.003936] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3390.010177] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3390.016469] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3390.023439] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3390.029689] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3390.036074] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3390.042885] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3390.049125] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3390.055492] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3390.061791] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3390.068029] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3390.074429] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3390.080850] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3390.087234] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3390.093630] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3390.099890] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3390.109084] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3390.117330] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3390.123663] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3390.129917] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3390.136332] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3390.142725] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3390.148966] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3390.155812] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3390.162100] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3390.168443] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3390.174753] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3390.183121] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3390.189363] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3390.197741] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3390.204160] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3390.210526] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3390.216834] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3390.223252] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3390.229513] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3390.236444] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3390.243033] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3390.249269] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3390.256646] loop5: p253 start 1854537728 is beyond EOD, truncated [ 3390.265741] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3390.272058] loop5: p255 start 1854537728 is beyond EOD, truncated 04:24:08 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000400000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:24:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xfcffffff00000000) 04:24:08 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:08 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() 04:24:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019600300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(0x0) [ 3390.353967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3390.453878] IPv6: ADDRCONF(NETDEV_UP): veth1817: link is not ready [ 3390.585745] team0: Port device veth1817 added [ 3390.722214] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3390.750939] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 04:24:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffff7f00000000) [ 3390.781264] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3390.790693] input: syz1 as /devices/virtual/input/input385 [ 3390.819268] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3390.825999] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3390.839435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3390.872698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:24:09 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019680300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3390.978122] IPv6: ADDRCONF(NETDEV_UP): veth1819: link is not ready 04:24:09 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3391.000302] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3391.003875] team0: Port device veth1819 added [ 3391.100543] loop5: partition table partially beyond EOD, truncated [ 3391.119961] loop5: p1 size 2 extends beyond EOD, truncated [ 3391.170437] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3391.189620] loop5: p5 start 1854537728 is beyond EOD, truncated [ 3391.221325] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3391.255096] loop5: p7 start 1854537728 is beyond EOD, truncated 04:24:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(r4, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) set_tid_address(0x0) [ 3391.285689] loop5: p8 start 1854537728 is beyond EOD, truncated [ 3391.301104] loop5: p9 start 1854537728 is beyond EOD, truncated [ 3391.337801] loop5: p10 start 1854537728 is beyond EOD, truncated [ 3391.360604] loop5: p11 start 1854537728 is beyond EOD, truncated [ 3391.369801] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3391.380754] loop5: p12 start 1854537728 is beyond EOD, truncated [ 3391.404913] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3391.416768] input: syz1 as /devices/virtual/input/input387 [ 3391.425706] loop5: p13 start 1854537728 is beyond EOD, truncated [ 3391.434953] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 3391.467365] loop5: p14 start 1854537728 is beyond EOD, truncated [ 3391.489119] loop5: p15 start 1854537728 is beyond EOD, truncated [ 3391.497207] loop5: p16 start 1854537728 is beyond EOD, truncated 04:24:09 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3391.585739] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3391.657001] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3391.729066] loop5: p17 start 1854537728 is beyond EOD, truncated [ 3391.751102] loop5: p18 start 1854537728 is beyond EOD, truncated [ 3391.758286] loop5: p19 start 1854537728 is beyond EOD, truncated [ 3391.765289] loop5: p20 start 1854537728 is beyond EOD, truncated [ 3391.772328] loop5: p21 start 1854537728 is beyond EOD, truncated [ 3391.779336] loop5: p22 start 1854537728 is beyond EOD, truncated [ 3391.786376] loop5: p23 start 1854537728 is beyond EOD, truncated [ 3391.793293] loop5: p24 start 1854537728 is beyond EOD, truncated [ 3391.799796] loop5: p25 start 1854537728 is beyond EOD, truncated [ 3391.806912] loop5: p26 start 1854537728 is beyond EOD, truncated [ 3391.813943] loop5: p27 start 1854537728 is beyond EOD, truncated [ 3391.820438] loop5: p28 start 1854537728 is beyond EOD, truncated [ 3391.830732] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3391.830944] loop5: p29 start 1854537728 is beyond EOD, truncated [ 3391.847052] loop5: p30 start 1854537728 is beyond EOD, truncated [ 3391.853928] loop5: p31 start 1854537728 is beyond EOD, truncated [ 3391.860419] loop5: p32 start 1854537728 is beyond EOD, truncated [ 3391.868142] loop5: p33 start 1854537728 is beyond EOD, truncated [ 3391.877468] loop5: p34 start 1854537728 is beyond EOD, truncated [ 3391.893127] loop5: p35 start 1854537728 is beyond EOD, truncated [ 3391.910552] loop5: p36 start 1854537728 is beyond EOD, truncated [ 3391.917572] loop5: p37 start 1854537728 is beyond EOD, truncated [ 3391.924750] loop5: p38 start 1854537728 is beyond EOD, truncated [ 3391.933221] loop5: p39 start 1854537728 is beyond EOD, truncated [ 3391.940981] loop5: p40 start 1854537728 is beyond EOD, truncated [ 3391.964281] loop5: p41 start 1854537728 is beyond EOD, truncated [ 3391.970677] loop5: p42 start 1854537728 is beyond EOD, truncated [ 3391.980005] loop5: p43 start 1854537728 is beyond EOD, truncated [ 3391.990487] loop5: p44 start 1854537728 is beyond EOD, [ 3391.998935] truncated [ 3392.004961] loop5: p45 start 1854537728 is beyond EOD, truncated [ 3392.011675] loop5: p46 start 1854537728 is beyond EOD, truncated [ 3392.018376] loop5: p47 start 1854537728 is beyond EOD, truncated [ 3392.025241] loop5: p48 start 1854537728 is beyond EOD, truncated [ 3392.033046] loop5: p49 start 1854537728 is beyond EOD, truncated [ 3392.039347] loop5: p50 start 1854537728 is beyond EOD, truncated [ 3392.045950] loop5: p51 start 1854537728 is beyond EOD, truncated [ 3392.052576] loop5: p52 start 1854537728 is beyond EOD, truncated [ 3392.058869] loop5: p53 start 1854537728 is beyond EOD, truncated [ 3392.066300] loop5: p54 start 1854537728 is beyond EOD, truncated [ 3392.084903] loop5: p55 start 1854537728 is beyond EOD, truncated [ 3392.091527] loop5: p56 start 1854537728 is beyond EOD, truncated [ 3392.098100] loop5: p57 start 1854537728 is beyond EOD, truncated [ 3392.105147] loop5: p58 start 1854537728 is beyond EOD, truncated [ 3392.111414] loop5: p59 start 1854537728 is beyond EOD, truncated [ 3392.117971] loop5: p60 start 1854537728 is beyond EOD, truncated [ 3392.124912] loop5: p61 start 1854537728 is beyond EOD, truncated [ 3392.131400] loop5: p62 start 1854537728 is beyond EOD, truncated [ 3392.138649] loop5: p63 start 1854537728 is beyond EOD, truncated [ 3392.144946] loop5: p64 start 1854537728 is beyond EOD, truncated [ 3392.151152] loop5: p65 start 1854537728 is beyond EOD, truncated [ 3392.157580] loop5: p66 start 1854537728 is beyond EOD, truncated [ 3392.163905] loop5: p67 start 1854537728 is beyond EOD, truncated [ 3392.170122] loop5: p68 start 1854537728 is beyond EOD, truncated [ 3392.176436] loop5: p69 start 1854537728 is beyond EOD, truncated [ 3392.182699] loop5: p70 start 1854537728 is beyond EOD, truncated [ 3392.188959] loop5: p71 start 1854537728 is beyond EOD, truncated [ 3392.195231] loop5: p72 start 1854537728 is beyond EOD, truncated [ 3392.201843] loop5: p73 start 1854537728 is beyond EOD, truncated [ 3392.208027] loop5: p74 start 1854537728 is beyond EOD, truncated [ 3392.214455] loop5: p75 start 1854537728 is beyond EOD, truncated [ 3392.220606] loop5: p76 start 1854537728 is beyond EOD, truncated [ 3392.226821] loop5: p77 start 1854537728 is beyond EOD, truncated [ 3392.233054] loop5: p78 start 1854537728 is beyond EOD, truncated [ 3392.239204] loop5: p79 start 1854537728 is beyond EOD, truncated [ 3392.246432] loop5: p80 start 1854537728 is beyond EOD, truncated [ 3392.254026] loop5: p81 start 1854537728 is beyond EOD, truncated [ 3392.262300] loop5: p82 start 1854537728 is beyond EOD, truncated [ 3392.268585] loop5: p83 start 1854537728 is beyond EOD, truncated [ 3392.275996] loop5: p84 start 1854537728 is beyond EOD, truncated [ 3392.282920] loop5: p85 start 1854537728 is beyond EOD, truncated [ 3392.289117] loop5: p86 start 1854537728 is beyond EOD, [ 3392.294879] truncated [ 3392.297305] loop5: p87 start 1854537728 is beyond EOD, truncated [ 3392.303594] loop5: p88 start 1854537728 is beyond EOD, truncated [ 3392.309756] loop5: p89 start 1854537728 is beyond EOD, truncated [ 3392.316011] loop5: p90 start 1854537728 is beyond EOD, truncated [ 3392.322224] loop5: p91 start 1854537728 is beyond EOD, truncated [ 3392.328629] loop5: p92 start 1854537728 is beyond EOD, truncated [ 3392.334879] loop5: p93 start 1854537728 is beyond EOD, truncated [ 3392.341046] loop5: p94 start 1854537728 is beyond EOD, truncated [ 3392.347278] loop5: p95 start 1854537728 is beyond EOD, truncated [ 3392.353592] loop5: p96 start 1854537728 is beyond EOD, truncated [ 3392.359740] loop5: p97 start 1854537728 is beyond EOD, truncated [ 3392.365940] loop5: p98 start 1854537728 is beyond EOD, truncated [ 3392.372184] loop5: p99 start 1854537728 is beyond EOD, truncated [ 3392.378359] loop5: p100 start 1854537728 is beyond EOD, truncated [ 3392.384663] loop5: p101 start 1854537728 is beyond EOD, truncated [ 3392.391102] loop5: p102 start 1854537728 is beyond EOD, truncated [ 3392.398365] loop5: p103 start 1854537728 is beyond EOD, truncated [ 3392.404713] loop5: p104 start 1854537728 is beyond EOD, truncated [ 3392.411389] loop5: p105 start 1854537728 is beyond EOD, truncated [ 3392.417852] loop5: p106 start 1854537728 is beyond EOD, truncated [ 3392.424149] loop5: p107 start 1854537728 is beyond EOD, truncated [ 3392.430477] loop5: p108 start 1854537728 is beyond EOD, truncated [ 3392.436765] loop5: p109 start 1854537728 is beyond EOD, truncated [ 3392.443091] loop5: p110 start 1854537728 is beyond EOD, truncated [ 3392.449429] loop5: p111 start 1854537728 is beyond EOD, truncated [ 3392.456025] loop5: p112 start 1854537728 is beyond EOD, truncated [ 3392.462365] loop5: p113 start 1854537728 is beyond EOD, truncated [ 3392.468785] loop5: p114 start 1854537728 is beyond EOD, truncated [ 3392.475108] loop5: p115 start 1854537728 is beyond EOD, truncated [ 3392.481581] loop5: p116 start 1854537728 is beyond EOD, truncated [ 3392.487994] loop5: p117 start 1854537728 is beyond EOD, truncated [ 3392.494326] loop5: p118 start 1854537728 is beyond EOD, truncated [ 3392.500964] loop5: p119 start 1854537728 is beyond EOD, truncated [ 3392.507317] loop5: p120 start 1854537728 is beyond EOD, truncated [ 3392.513767] loop5: p121 start 1854537728 is beyond EOD, truncated [ 3392.520520] loop5: p122 start 1854537728 is beyond EOD, truncated [ 3392.527629] loop5: p123 start 1854537728 is beyond EOD, truncated [ 3392.535288] loop5: p124 start 1854537728 is beyond EOD, truncated [ 3392.541731] loop5: p125 start 1854537728 is beyond EOD, truncated [ 3392.547988] loop5: p126 start 1854537728 is beyond EOD, truncated [ 3392.554280] loop5: p127 start 1854537728 is beyond EOD, truncated [ 3392.560730] loop5: p128 start 1854537728 is beyond EOD, truncated [ 3392.567102] loop5: p129 start 1854537728 is beyond EOD, truncated [ 3392.573626] loop5: p130 start 1854537728 is beyond EOD, truncated [ 3392.579869] loop5: p131 start 1854537728 is beyond EOD, truncated [ 3392.586170] loop5: p132 start 1854537728 is beyond EOD, truncated [ 3392.592512] loop5: p133 start 1854537728 is beyond EOD, truncated [ 3392.598965] loop5: p134 start 1854537728 is beyond EOD, truncated [ 3392.605466] loop5: p135 start 1854537728 is beyond EOD, truncated [ 3392.612242] loop5: p136 start 1854537728 is beyond EOD, truncated [ 3392.618538] loop5: p137 start 1854537728 is beyond EOD, truncated [ 3392.625224] loop5: p138 start 1854537728 is beyond EOD, truncated [ 3392.632474] loop5: p139 start 1854537728 is beyond EOD, truncated [ 3392.638940] loop5: p140 start 1854537728 is beyond EOD, truncated [ 3392.645251] loop5: p141 start 1854537728 is beyond EOD, truncated [ 3392.652392] loop5: p142 start 1854537728 is beyond EOD, truncated [ 3392.659024] loop5: p143 start 1854537728 is beyond EOD, truncated [ 3392.665347] loop5: p144 start 1854537728 is beyond EOD, truncated [ 3392.671658] loop5: p145 start 1854537728 is beyond EOD, truncated [ 3392.677900] loop5: p146 start 1854537728 is beyond EOD, truncated [ 3392.684389] loop5: p147 start 1854537728 is beyond EOD, truncated [ 3392.690645] loop5: p148 start 1854537728 is beyond EOD, truncated [ 3392.697412] loop5: p149 start 1854537728 is beyond EOD, truncated [ 3392.704005] loop5: p150 start 1854537728 is beyond EOD, truncated [ 3392.710375] loop5: p151 start 1854537728 is beyond EOD, truncated [ 3392.716694] loop5: p152 start 1854537728 is beyond EOD, truncated [ 3392.723226] loop5: p153 start 1854537728 is beyond EOD, truncated [ 3392.729715] loop5: p154 start 1854537728 is beyond EOD, truncated [ 3392.736044] loop5: p155 start 1854537728 is beyond EOD, truncated [ 3392.742489] loop5: p156 start 1854537728 is beyond EOD, truncated [ 3392.748733] loop5: p157 start 1854537728 is beyond EOD, truncated [ 3392.755135] loop5: p158 start 1854537728 is beyond EOD, truncated [ 3392.761404] loop5: p159 start 1854537728 is beyond EOD, truncated [ 3392.767904] loop5: p160 start 1854537728 is beyond EOD, truncated [ 3392.774506] loop5: p161 start 1854537728 is beyond EOD, truncated [ 3392.780777] loop5: p162 start 1854537728 is beyond EOD, truncated [ 3392.787905] loop5: p163 start 1854537728 is beyond EOD, truncated [ 3392.794217] loop5: p164 start 1854537728 is beyond EOD, truncated [ 3392.800466] loop5: p165 start 1854537728 is beyond EOD, truncated [ 3392.807029] loop5: p166 start 1854537728 is beyond EOD, truncated [ 3392.813433] loop5: p167 start 1854537728 is beyond EOD, truncated [ 3392.819772] loop5: p168 start 1854537728 is beyond EOD, truncated [ 3392.826077] loop5: p169 start 1854537728 is beyond EOD, truncated [ 3392.832507] loop5: p170 start 1854537728 is beyond EOD, truncated [ 3392.838757] loop5: p171 start 1854537728 is beyond EOD, truncated [ 3392.845153] loop5: p172 start 1854537728 is beyond EOD, truncated [ 3392.851593] loop5: p173 start 1854537728 is beyond EOD, truncated [ 3392.857971] loop5: p174 start 1854537728 is beyond EOD, truncated [ 3392.864469] loop5: p175 start 1854537728 is beyond EOD, truncated [ 3392.870714] loop5: p176 start 1854537728 is beyond EOD, truncated [ 3392.877014] loop5: p177 start 1854537728 is beyond EOD, truncated [ 3392.883331] loop5: p178 start 1854537728 is beyond EOD, truncated [ 3392.889677] loop5: p179 start 1854537728 is beyond EOD, truncated [ 3392.896083] loop5: p180 start 1854537728 is beyond EOD, truncated [ 3392.902590] loop5: p181 start 1854537728 is beyond EOD, truncated [ 3392.908828] loop5: p182 start 1854537728 is beyond EOD, truncated [ 3392.915705] loop5: p183 start 1854537728 is beyond EOD, truncated [ 3392.922025] loop5: p184 start 1854537728 is beyond EOD, truncated [ 3392.928281] loop5: p185 start 1854537728 is beyond EOD, truncated [ 3392.934702] loop5: p186 start 1854537728 is beyond EOD, truncated [ 3392.940950] loop5: p187 start 1854537728 is beyond EOD, truncated [ 3392.947281] loop5: p188 start 1854537728 is beyond EOD, truncated [ 3392.953595] loop5: p189 start 1854537728 is beyond EOD, truncated [ 3392.959837] loop5: p190 start 1854537728 is beyond EOD, truncated [ 3392.966128] loop5: p191 start 1854537728 is beyond EOD, truncated [ 3392.972683] loop5: p192 start 1854537728 is beyond EOD, truncated [ 3392.978950] loop5: p193 start 1854537728 is beyond EOD, truncated [ 3392.985279] loop5: p194 start 1854537728 is beyond EOD, truncated [ 3392.991581] loop5: p195 start 1854537728 is beyond EOD, truncated [ 3392.997971] loop5: p196 start 1854537728 is beyond EOD, truncated [ 3393.004292] loop5: p197 start 1854537728 is beyond EOD, truncated [ 3393.010736] loop5: p198 start 1854537728 is beyond EOD, truncated [ 3393.017345] loop5: p199 start 1854537728 is beyond EOD, truncated [ 3393.023850] loop5: p200 start 1854537728 is beyond EOD, truncated [ 3393.030090] loop5: p201 start 1854537728 is beyond EOD, truncated [ 3393.036380] loop5: p202 start 1854537728 is beyond EOD, truncated [ 3393.043654] loop5: p203 start 1854537728 is beyond EOD, truncated [ 3393.049912] loop5: p204 start 1854537728 is beyond EOD, truncated [ 3393.056368] loop5: p205 start 1854537728 is beyond EOD, truncated [ 3393.062664] loop5: p206 start 1854537728 is beyond EOD, truncated [ 3393.068911] loop5: p207 start 1854537728 is beyond EOD, truncated [ 3393.075260] loop5: p208 start 1854537728 is beyond EOD, truncated [ 3393.081575] loop5: p209 start 1854537728 is beyond EOD, truncated [ 3393.087824] loop5: p210 start 1854537728 is beyond EOD, truncated [ 3393.094138] loop5: p211 start 1854537728 is beyond EOD, truncated [ 3393.100399] loop5: p212 start 1854537728 is beyond EOD, truncated [ 3393.106717] loop5: p213 start 1854537728 is beyond EOD, truncated [ 3393.113055] loop5: p214 start 1854537728 is beyond EOD, truncated [ 3393.119484] loop5: p215 start 1854537728 is beyond EOD, truncated [ 3393.126027] loop5: p216 start 1854537728 is beyond EOD, truncated [ 3393.136424] loop5: p217 start 1854537728 is beyond EOD, truncated [ 3393.142735] loop5: p218 start 1854537728 is beyond EOD, truncated [ 3393.148993] loop5: p219 start 1854537728 is beyond EOD, truncated [ 3393.155335] loop5: p220 start 1854537728 is beyond EOD, truncated [ 3393.161645] loop5: p221 start 1854537728 is beyond EOD, truncated [ 3393.167886] loop5: p222 start 1854537728 is beyond EOD, truncated [ 3393.174931] loop5: p223 start 1854537728 is beyond EOD, truncated [ 3393.181271] loop5: p224 start 1854537728 is beyond EOD, truncated [ 3393.187631] loop5: p225 start 1854537728 is beyond EOD, truncated [ 3393.193933] loop5: p226 start 1854537728 is beyond EOD, truncated [ 3393.200175] loop5: p227 start 1854537728 is beyond EOD, truncated [ 3393.206559] loop5: p228 start 1854537728 is beyond EOD, truncated [ 3393.212856] loop5: p229 start 1854537728 is beyond EOD, truncated [ 3393.219180] loop5: p230 start 1854537728 is beyond EOD, truncated [ 3393.225459] loop5: p231 start 1854537728 is beyond EOD, truncated [ 3393.231764] loop5: p232 start 1854537728 is beyond EOD, truncated [ 3393.238019] loop5: p233 start 1854537728 is beyond EOD, truncated [ 3393.244336] loop5: p234 start 1854537728 is beyond EOD, truncated [ 3393.250900] loop5: p235 start 1854537728 is beyond EOD, truncated [ 3393.257325] loop5: p236 start 1854537728 is beyond EOD, truncated [ 3393.263641] loop5: p237 start 1854537728 is beyond EOD, truncated [ 3393.269885] loop5: p238 start 1854537728 is beyond EOD, truncated [ 3393.276178] loop5: p239 start 1854537728 is beyond EOD, truncated [ 3393.282472] loop5: p240 start 1854537728 is beyond EOD, truncated [ 3393.288897] loop5: p241 start 1854537728 is beyond EOD, truncated [ 3393.295303] loop5: p242 start 1854537728 is beyond EOD, truncated [ 3393.302032] loop5: p243 start 1854537728 is beyond EOD, truncated [ 3393.308376] loop5: p244 start 1854537728 is beyond EOD, truncated [ 3393.314704] loop5: p245 start 1854537728 is beyond EOD, truncated [ 3393.320945] loop5: p246 start 1854537728 is beyond EOD, truncated [ 3393.327350] loop5: p247 start 1854537728 is beyond EOD, truncated [ 3393.333748] loop5: p248 start 1854537728 is beyond EOD, truncated [ 3393.339988] loop5: p249 start 1854537728 is beyond EOD, truncated [ 3393.346271] loop5: p250 start 1854537728 is beyond EOD, truncated [ 3393.352572] loop5: p251 start 1854537728 is beyond EOD, truncated [ 3393.358812] loop5: p252 start 1854537728 is beyond EOD, truncated [ 3393.365325] loop5: p253 start 1854537728 is beyond EOD, truncated 04:24:11 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000001000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 04:24:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xffffffff00000000) 04:24:11 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() 04:24:11 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000196c0300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:24:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() 04:24:11 executing program 4: [ 3393.371653] loop5: p254 start 1854537728 is beyond EOD, truncated [ 3393.377900] loop5: p255 start 1854537728 is beyond EOD, truncated [ 3393.409601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:24:11 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) [ 3393.616537] input: syz1 as /devices/virtual/input/input389 [ 3393.633224] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3393.680928] IPv6: ADDRCONF(NETDEV_UP): veth1821: link is not ready [ 3393.701094] team0: Port device veth1821 added [ 3393.717604] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 04:24:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r2, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000240), 0x1192aca8268c9077, 0x40, 0x0, 0xe21f1104abc8c01) 04:24:11 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r1, 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r3) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup2(r7, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x37}) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) dup2(0xffffffffffffffff, r9) dup2(r9, r8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESHEX=r9, @ANYRESHEX=0x0], 0x247) munlockall() [ 3393.777761] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p [ 3393.869413] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock 04:24:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0xfffffffffffff000) [ 3393.931791] loop5: partition table partially beyond EOD, truncated [ 3393.939704] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3393.962504] loop5: p1 size 2 extends beyond EOD, truncated [ 3393.968752] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 04:24:12 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$P9_RFLUSH(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpriority(0x0, r2) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0xfff, @empty}, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x4}, 0x93, [0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0xb88b0ac4, 0x800]}, 0x4d) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff93) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, r6, 0x400) io_getevents(0x0, 0x401, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) munlockall() [ 3393.971896] EXT4-fs error (device loop0): ext4_read_inode_bitmap:133: comm syz-executor.0: Invalid inode bitmap blk 0 in block_group 0 [ 3393.990521] protocol 88fb is buggy, dev hsr_slave_0 [ 3393.990583] protocol 88fb is buggy, dev hsr_slave_1 [ 3393.990680] protocol 88fb is buggy, dev hsr_slave_0 [ 3393.990728] protocol 88fb is buggy, dev hsr_slave_1 [ 3393.990830] protocol 88fb is buggy, dev hsr_slave_0 [ 3393.990882] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.034903] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3394.050385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3394.074658] input: syz1 as /devices/virtual/input/input391 [ 3394.117165] loop5: p4 start 1854537728 is beyond EOD, truncated [ 3394.143992] loop5: p5 start 1854537728 is beyond EOD, truncated 04:24:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb370012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) [ 3394.167760] loop5: p6 start 1854537728 is beyond EOD, truncated [ 3394.225311] loop5: p7 start 1854537728 is beyond EOD, truncated [ 3394.253709] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3394.263855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3394.266663] loop5: p8 start 1854537728 is beyond EOD, [ 3394.282188] ------------[ cut here ]------------ [ 3394.287863] refcount_t: increment on 0; use-after-free. [ 3394.295003] WARNING: CPU: 0 PID: 29444 at lib/refcount.c:153 refcount_inc_checked+0x61/0x70 [ 3394.303524] Kernel panic - not syncing: panic_on_warn set ... [ 3394.303524] [ 3394.310912] CPU: 0 PID: 29444 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 3394.317836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3394.327197] Call Trace: [ 3394.329788] dump_stack+0x197/0x210 [ 3394.333412] panic+0x26a/0x50e [ 3394.336593] ? __warn_printk+0xf3/0xf3 [ 3394.340479] ? refcount_inc_checked+0x61/0x70 [ 3394.344968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3394.350493] ? __warn.cold+0x5/0x53 [ 3394.354115] ? refcount_inc_checked+0x61/0x70 [ 3394.358601] __warn.cold+0x20/0x53 [ 3394.362204] ? console_unlock+0x81d/0x10b0 [ 3394.366437] ? refcount_inc_checked+0x61/0x70 [ 3394.371037] report_bug+0x263/0x2b0 [ 3394.374666] do_error_trap+0x204/0x360 [ 3394.378547] ? math_error+0x340/0x340 [ 3394.382340] ? wake_up_klogd+0x99/0xd0 [ 3394.386214] ? vprintk_emit+0x1ab/0x690 [ 3394.390190] ? error_entry+0x7c/0xe0 [ 3394.393982] ? trace_hardirqs_off_caller+0x65/0x220 [ 3394.399252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3394.404090] do_invalid_op+0x1b/0x20 [ 3394.407884] invalid_op+0x14/0x20 [ 3394.411504] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 3394.416598] Code: 1d 6d 50 14 06 31 ff 89 de e8 7b c5 47 fe 84 db 75 dd e8 32 c4 47 fe 48 c7 c7 a0 2b 82 87 c6 05 4d 50 14 06 01 e8 ad 44 1b fe <0f> 0b eb c1 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 [ 3394.435490] RSP: 0018:ffff88800bfc78b8 EFLAGS: 00010282 [ 3394.440941] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3394.448200] RDX: 000000000001c184 RSI: ffffffff81559456 RDI: ffffed10017f8f09 [ 3394.455606] RBP: ffff88800bfc78c8 R08: ffff88805a4ae040 R09: ffff88805a4ae8e0 [ 3394.462927] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809514d7e8 [ 3394.470194] R13: 0000000000000000 R14: ffff888046fa6a40 R15: ffff888088405f10 [ 3394.477478] ? vprintk_func+0x86/0x189 [ 3394.481362] ? refcount_inc_checked+0x61/0x70 [ 3394.485852] kobject_get+0x66/0xc0 [ 3394.489387] cdev_get+0x60/0xb0 [ 3394.492659] chrdev_open+0xb0/0x6b0 [ 3394.496277] ? cdev_put.part.0+0x50/0x50 [ 3394.500441] ? security_file_open+0x16b/0x1b0 [ 3394.505029] do_dentry_open+0x4c3/0x1210 [ 3394.509081] ? kasan_check_read+0x11/0x20 [ 3394.513221] ? cdev_put.part.0+0x50/0x50 [ 3394.517286] ? chown_common+0x5c0/0x5c0 [ 3394.521249] ? inode_permission+0xb4/0x560 [ 3394.525490] vfs_open+0xa0/0xd0 [ 3394.528761] path_openat+0x10d7/0x45e0 [ 3394.532651] ? __lock_acquire+0x6ee/0x49c0 [ 3394.536877] ? getname+0x1a/0x20 [ 3394.540247] ? do_sys_open+0x2c9/0x550 [ 3394.544138] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 3394.548797] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3394.553551] ? __alloc_fd+0x44d/0x560 [ 3394.557352] do_filp_open+0x1a1/0x280 [ 3394.561146] ? may_open_dev+0x100/0x100 [ 3394.565118] ? do_raw_spin_unlock+0x178/0x270 [ 3394.569626] ? _raw_spin_unlock+0x2d/0x50 [ 3394.573788] ? __alloc_fd+0x44d/0x560 [ 3394.577598] do_sys_open+0x3fe/0x550 [ 3394.581398] ? filp_open+0x80/0x80 [ 3394.584935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3394.589769] ? do_syscall_64+0x26/0x620 [ 3394.593855] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3394.599228] ? do_syscall_64+0x26/0x620 [ 3394.603206] __x64_sys_open+0x7e/0xc0 [ 3394.607002] do_syscall_64+0xfd/0x620 [ 3394.610795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3394.616197] RIP: 0033:0x4143d1 [ 3394.619390] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 3394.638756] RSP: 002b:00007f0882fd07a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 3394.646761] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004143d1 [ 3394.654043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f0882fd0850 [ 3394.661318] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 3394.668593] R10: ffffffffffffffff R11: 0000000000000293 R12: 00007f0882fd16d4 [ 3394.675855] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff [ 3394.684949] Kernel Offset: disabled [ 3394.689086] Rebooting in 86400 seconds..